Privacy Policy

At InstaLILY, we respect your privacy and are committed to protecting personal data. This Privacy Policy explains how we collect, use, and share information when enterprise customers and their authorized users use InstaLILY’s services (“Services”). InstaLILY acts as a service provider processing data on behalf of our enterprise customers.

1. Information we collect

We collect and process information provided by enterprise customers and their authorized users in connection with the Services, with specifics of data collected to be jointly determined. This data may include (for example):

Customer and user details

• Name, work email, role, and account identifiers used to provision access, administer accounts, and support the Services.

Customer data processed through the Services

• Operational notes; documents (e.g., invoices, purchase orders, shipping documents); structured transactions and metrics; communications content; calendars and contacts; and other customer-specified data sources configured for use with the Services.

Usage, security, and diagnostic data

• Audit and usage events (e.g., feature usage, timestamps, actions taken in the product), and system logs and metrics used for security monitoring, troubleshooting, and root-cause analysis (RCA). This data is collected and retained in a tenant-isolated manner.

Branding site cookies

• Our marketing website (instalily.ai) uses cookies and similar technologies as described in the section titled “Visitors to our marketing website.”

2. How we use your information

We use information we collect to:

• Provide, maintain, and improve the Services.
• Administer accounts and provide customer support.
• Monitor for security, prevent abuse, and investigate incidents.
• Perform troubleshooting and root-cause analysis (RCA) using tenant-isolated logs and metrics.
• Comply with legal obligations.

We do not use data processed through the Services to deliver advertising, and we do notuse data processed through the Services to train any external AI models. These commitments apply to the Services. Information collected through our marketing website is handled separately and is used for advertising and measurement as described in the section titled “Visitors to our marketing website.”

3. Sharing your information

Services. InstaLILY does not share data gathered through use of the Services, or other information provided to us by an enterprise customer, other than as directed by that customer or as required by law. Data collected from one enterprise customer is not disclosed to another.

Marketing website. Information collected from visitors to our marketing website is disclosed to the service providers and advertising partners identified in the section titled “Visitors to our marketing website.” Some of those disclosures may constitute a “sale” or “share” of personal information under certain state privacy laws. That section explains the categories of information involved, the categories of recipients, and how to opt out.

4. Visitors to our marketing website

This section applies to instalily.ai and any other InstaLILY marketing or informational webpage (our “Marketing Site”). It does not apply to the Services, which are addressed above.

Our role

For the Marketing Site, InstaLILY determines the purposes and means of processing and acts as a “business” under the California Consumer Privacy Act and as a “controller” under comparable state laws. This differs from our role in relation to the Services, where we act as a service provider or processor on behalf of our enterprise customers.

Information we collect

When you visit the Marketing Site we and our service providers collect the following categories of personal information:

• Identifiers, including internet protocol address, cookie and device identifiers, and, if you contact us, your name, business email address, company and job title.
• Commercial information, including the products and solutions you view and any inquiry or demonstration request you submit.
• Internet or other electronic network activity information, including pages viewed, links and buttons selected, time spent on pages, referring website, search terms where provided to us by a search engine, and the advertising campaign, if any, that brought you to the Marketing Site.
• Approximate location, derived from internet protocol address at country and region level. We do not collect precise geolocation.
• Inferences drawn from the above, such as the industry or professional interests we associate with a visiting organization.

We do not collect sensitive personal information through the Marketing Site, and we do not use or disclose personal information for the purpose of inferring characteristics about you.

How we use it

• To operate, secure and improve the Marketing Site.
• To understand how the Marketing Site is used and to measure the performance of our marketing.
• To deliver advertising to you on other websites and platforms, including advertising based on your activity on the Marketing Site.
• To respond to inquiries and demonstration requests, and to contact you about our products and services.
• To comply with legal obligations and to establish or defend legal claims.

Who we disclose it to

We disclose the categories of personal information described above to the following categories of recipients:

• Advertising partners, such as Google, Microsoft, LinkedIn and Reddit, for advertising, retargeting and conversion measurement.
• Analytics providers, such as Google Analytics and Amplitude, for measurement and product analytics.
• Hosting and infrastructure providers, such as Vercel, for site delivery, performance and security.
• Customer relationship management providers, such as HubSpot, for managing and responding to inquiries.
• Professional advisers and authorities, such as legal and accounting advisers and regulators, for legal and regulatory compliance.

Disclosures to advertising partners for the purpose of showing you advertising on other platforms may be treated as a “sale” or a “share” for cross-context behavioral advertising under the California Consumer Privacy Act, and as “targeted advertising” under comparable state laws. We do not exchange personal information for money. We have not sold or shared, and do not knowingly sell or share, the personal information of consumers we know to be under 16 years of age.

Cookies and similar technologies

We use cookies, pixels, tags and similar technologies on the Marketing Site. Cookies that are strictly necessary to operate the site are always active. In the United States, analytics and advertising cookies begin operating when you arrive on the Marketing Site, and you may opt out at any time as described below. In the European Economic Area, the United Kingdom and Switzerland, analytics and advertising cookies do not operate unless you consent to them first.

Your choices

• Do Not Sell or Share My Personal Information: Select this link in the footer of any page to open our cookie controls, change your choices, and opt out of disclosures of your personal information for targeted advertising. Selecting “Reject non-essential” stops analytics and advertising cookies and prevents them from operating on your future visits from the same browser.
• Global Privacy Control: We recognize and honor the Global Privacy Control signal. If your browser or a browser extension sends that signal, we treat it as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising, and we apply it without requiring any further action from you. Because that signal is browser-specific, you will need to send it from each browser and device you use.
• Browser controls: Most browsers allow you to block or delete cookies. Blocking strictly necessary cookies may prevent parts of the Marketing Site from working. We do not respond to “Do Not Track” browser signals, which are not supported by a common standard.
• Marketing email: You may unsubscribe using the link in any marketing email we send you.

Your rights

Depending on the state in which you live, you may have the right to:

• Know what personal information we have collected about you, the sources of that information, the purposes for collecting it and the categories of recipients to whom we disclose it.
• Access a copy of the personal information we hold about you, in a portable format where required.
• Correct inaccurate personal information we hold about you.
• Delete personal information we have collected from you, subject to exceptions permitted by law.
• Opt out of the sale or sharing of your personal information and of targeted advertising.
• Limit our use and disclosure of sensitive personal information, although as noted above we do not collect sensitive personal information through the Marketing Site.
• Not be discriminated against for exercising any of these rights. We will not deny you goods or services, charge you a different price, or provide you a different level of quality because you exercised a privacy right.

How to exercise your rights

Email us at hello@instalily.aiwith the subject line “Privacy Request” and tell us which right you wish to exercise and the state in which you live. To opt out of targeted advertising you do not need to contact us; use the footer controls or send a Global Privacy Control signal.

We will acknowledge your request promptly and respond within 45 days. If we need more time we will tell you within that period. Before we act on a request to access, correct or delete personal information, we may need to verify your identity, and we will only use the information you provide for that purpose. If we cannot verify your identity we will tell you why.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof that you gave them signed permission to act for you, and we may ask you to verify your own identity directly with us.

Appeals. If we decline your request, you may appeal that decision by replying to our response or emailing hello@instalily.aiwith the subject line “Privacy Appeal.” We will inform you in writing of the outcome of the appeal, and our reasons, within 45 days. If we deny your appeal you may contact your state attorney general.

How long we keep it

We retain Marketing Site analytics information for the period configured in our analytics tools. Advertising identifiers are retained for the period set by the relevant advertising platform. Information you submit through a form is retained for as long as we are in contact with you about our products and services, and thereafter as needed to comply with our legal obligations or to establish or defend legal claims.

5. Data security

We implement reasonable security measures to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure.

6. Your choices

Enterprise end users: If you are an employee or other authorized user of an enterprise customer, requests to access, update, or delete personal data should be submitted through your employer or account administrator.

Marketing website visitors: If you are a visitor to instalily.ai, your choices and your privacy rights are described in the section titled “Visitors to our marketing website,” including how to open our cookie controls, how to opt out of targeted advertising, and how we handle the Global Privacy Control signal.

7. Data retention

Retention is determined based on data classification and customer requirements.

• Essential logs and metrics used for security and reliability are retained for the duration of the active customer account and may be deleted upon customer request, subject to legal or contractual requirements.
• Customer data processed through the Services is retained according to the customer’s configuration and instructions, and may be deleted upon request, subject to legal or contractual requirements.
• Residual copies may persist for a limited period in backups or disaster recovery systems before being overwritten.

Retention of information collected through our marketing website is described in the section titled “Visitors to our marketing website.”

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website. Your continued use of the Services after the changes take effect signifies your acceptance of the revised Privacy Policy.

9. Contact us

If you have any questions about this Privacy Policy or our handling of your data, please contact us at:

InstaLILY
455 Broadway, New York, NY 10013
Email: hello@instalily.ai