Privacy Policy

This Privacy Policy applies to all users of InsaneSDD, operated by InfoBeans Technologies Limited ("InfoBeans", "we", "us", or "our"). This includes visitors to insanesdd.ai, registered tenants, administrators, and anyone who accesses our AI-native Spec-Driven Development platform in any capacity.

By using InsaneSDD, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the platform.

We collect the following categories of data:

We use collected data for the following purposes:

InsaneSDD uses cookies and browser local storage. We only set non-essential cookies after you provide explicit consent via our Cookie Preferences banner.

You can withdraw or update your cookie consent at any time by clicking Reset Cookie Preferences. You can also manage cookies directly through your browser settings.

We do not sell, rent, or trade your personal data. We share data only with trusted sub-processors required to operate InsaneSDD:

All sub-processors are bound by data processing agreements and are required to implement appropriate technical and organisational security measures.

• Account data: Retained for the duration of your subscription plus 90 days after account closure, then permanently deleted.
• Project and specification data: Retained while your account is active. Deleted upon account termination unless a longer retention is required by law.
• Audit trail logs: Retained for 7 years to support compliance and regulated-industry requirements.
• Analytics data: Google Analytics data is retained for 26 months per Google's default retention settings.
• Contact/enquiry data: Retained for up to 2 years or until the enquiry is resolved.

InsaneSDD implements industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS 1.2 or higher
• Passwords and credentials are stored using bcrypt hashing — never in plaintext
• Authentication uses short-lived JWT tokens with secure rotation
• Role-based access control (RBAC) separates tenant, admin, and superadmin privileges
• Database access is restricted to application-layer connections only — no public exposure
• Regular security reviews and dependency audits

Despite these measures, no system is completely secure. If you discover a security vulnerability, please report it responsibly to security@infobeans.com.

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

To exercise any of these rights, contact us at privacy@infobeans.com. We will respond within 30 days.

California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to Know: Request disclosure of personal information collected, used, and shared.
• Right to Delete: Request deletion of personal information (subject to certain exceptions).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: We do not sell personal information. No opt-out is required for sales.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a California privacy request, email privacy@infobeans.com with "CCPA Request" in the subject line.

InsaneSDD is operated by InfoBeans Technologies Limited, headquartered in India. Your data may be transferred to and processed in countries outside your home jurisdiction, including the United States and India. Where we transfer personal data from the EEA or UK, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms. You may request details of the specific safeguards in place by contacting us at privacy@infobeans.com.

InsaneSDD is a professional B2B platform not directed at children. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that a child has provided personal data without parental consent, we will delete it promptly. If you believe a child has submitted data to us, please contact privacy@infobeans.com.

InsaneSDD may contain links to third-party websites or integrations (e.g. GitHub, Jira, Confluence). This Privacy Policy does not apply to those external services. We encourage you to review their privacy policies before providing any personal data. InfoBeans is not responsible for the privacy practices of third-party platforms.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via email. Your continued use of InsaneSDD after changes take effect constitutes acceptance of the revised policy.

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact: