Privacy Policy

This Privacy Policy explains how Pengu Insights ("Pengu Insights," "we," "us," or "our") collects, uses, and shares information when you use penguinsights.io, app.penguinsights.io, and related services (the "Services").

1. Who is responsible

Controller: Pengu Insights
Email: hey@penguinsights.io

2. Information we collect

Account and contact data

When you register, book a call, download a lead magnet, or contact us, we may collect name, email address, company name, role, and message content.

Usage and product data

We collect information about how you use the Services, such as feature usage, credit consumption, device/browser type, approximate location derived from IP, and diagnostic logs needed to operate and secure the product.

Payment data

Payments are processed by third-party processors. We receive billing status and limited invoice metadata. We do not store full card numbers on our servers.

Cookies and similar technologies

We use cookies and similar technologies for essential site functions, preferences, and analytics (including Google Tag Manager / Analytics where enabled). You can control cookies through your browser settings.

3. How we use information

We use personal data to:

Provide, maintain, and improve the Services
Create and manage accounts, billing, and support requests
Send transactional emails (confirmations, security notices)
Send product or marketing messages when you opt in or where allowed by law (you can unsubscribe)
Monitor abuse, fraud, and security incidents
Comply with legal obligations

4. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on:

Contract — to deliver the Services you request
Legitimate interests — to secure, improve, and market the Services in a proportionate way
Consent — where required (for example certain cookies or email marketing)
Legal obligation — when we must retain or disclose information by law

5. Sharing

We may share data with:

Service providers (hosting, email, analytics, payment, customer support tools) under contractual confidentiality
Professional advisors when needed
Authorities when required by law or to protect rights and safety
A buyer or successor if we are involved in a merger, acquisition, or asset sale

We do not sell personal data.

6. International transfers

We may process data in countries outside your own, including where our providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

7. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, and security requirements. Account data is typically retained while your account is active and for a reasonable period afterward. You may request deletion as described below.

8. Security

We use administrative, technical, and organizational measures designed to protect personal data. No method of transmission or storage is 100% secure. Please use a strong unique password and notify us of suspected unauthorized access.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also withdraw consent where processing is consent-based, and lodge a complaint with a supervisory authority.

To exercise rights, email hey@penguinsights.io. We may need to verify your identity before responding.

10. Children

The Services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will take appropriate steps.

11. Third-party links

Our site may link to third-party websites. Their privacy practices are their own. Review their policies before providing personal data.

12. Changes

We may update this Privacy Policy. We will post the revised version on this page with a new "Last updated" date. Material changes may be communicated by email or in-product notice when appropriate.

13. Contact

Privacy questions: hey@penguinsights.io

Legal