Plain-English summary: We collect only what we need to run your account. We never sell your data. You can request, export, or delete your data at any time. We use Stripe for payments — your card numbers never touch our servers.
InsulatorOS is a software product owned and operated by Finance10XAI Inc., a Delaware corporation ("Company," "we," "us," or "our"). InsulatorOS is not a separate corporation. This Privacy Policy describes how we collect, use, and share information when you use insulatoros.com and the InsulatorOS application (collectively, the "Service").
Subscribing insulation businesses are separate from the software provider. They remain responsible for the customer information they enter and their own privacy obligations. Finance10XAI Inc. processes that business information to provide the Service, subject to the applicable agreement and law. Our initial pilot customer is Xertzy LLC d/b/a Insulate You; it does not own or operate the InsulatorOS software platform.
Questions or requests? Email us at privacy@insulatoros.com.
The current live advertising integration is a limited, explicitly authorized, development-only, read-only pilot. It is not a generally available self-service connection or publishing feature. Live spending previews are processed temporarily and are not imported into the advertising ledger or financial database. Reporting results and sanitized diagnostics may be reviewed by authorized operators during validation.
Where CRM attribution features are used, we store acquisition information supplied with leads, such as source, medium, campaign labels, referring origins, and advertising identifiers when provided. Stored attribution URL fields omit paths, query strings, fragments, and credentials. This information may be associated with the company's customer records, estimates, contracts, and payments to report performance; an inferred match is not treated as verified revenue attribution.
Account reporting does not require reading private Facebook messages, personal posts, or Instagram media. Facebook Page, Instagram business-account connections, and direct campaign publishing are planned capabilities, not enabled by the current reporting pilot. We will describe additional data uses before introducing them.
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
A future AI Marketing Assistant or Creative Studio may process brand assets, marketing prompts, and advertising drafts to produce copy or images. Those features and external publishing are not activated by the current reporting pilot. Additional processing, provider disclosures, retention rules, and customer approval controls must be reviewed before release.
InsulatorOS is a shared platform for multiple companies. Access to company business records is restricted by company scope and user permissions. A company's authorization to access its advertising account does not authorize access for another company. The current live advertising preview is restricted to an explicitly approved pilot company and its owner authorization; it is not a shared advertising-account connection for all subscribers.
We share information only in these circumstances:
If you are a California resident, you have the following rights under the CCPA:
To submit a Data Subject Access Request (DSAR), email privacy@insulatoros.com with the subject line "CCPA Request." We will respond within 45 days.
We retain your account data for as long as your account is active. If you cancel your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it for legal or compliance purposes. Business records (invoices, contracts) may be retained for up to 7 years to comply with applicable financial record-keeping laws.
Disconnecting an advertising provider stops future authorized access once the credentials or permissions have been revoked; it does not itself delete previously stored CRM attribution, reports, or information held by the provider. The current live spending preview does not persist report rows to the advertising ledger. Any retained support records or diagnostic copies are included in the scope of an applicable deletion request, subject to legal and security retention requirements.
To request disconnection or deletion of Meta, Google Ads, or other account-related information, follow our Data Deletion Instructions. We verify identity and authority before acting on company data and explain any information that must be retained. Deletion is handled through a reviewed request, not an automatic self-service deletion button.
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at security@insulatoros.com.
We use only essential session cookies required to authenticate your login. We do not use advertising cookies or third-party tracking pixels. The IVY AI chat widget stores conversation context in your browser's session storage, which is cleared when you close your browser tab.
InsulatorOS is a business software platform intended for users 18 years of age and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.
We may update this Privacy Policy periodically. We will notify you of material changes by email or by a prominent notice in the application at least 30 days before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
For privacy questions, DSAR requests, or to exercise your rights: