Privacy policy

Data controller

Insrt, [address] — [email]

Data we collect and why

Account (email, name, company, hashed password): access to the client or artist space, order and licence history. Legal basis: performance of the contract. Orders and licences (licensee identity, billing address, history, certificates): invoicing, proof of licence, accounting obligations. Kept 10 years. Contact and quote requests (name, email, company, brief): answering the request. Kept 3 years after the last exchange. Artist space (demos, contracts, statements, billing identity): performing contracts and paying royalties. Kept for the contract term plus legal obligations. Audience measurement: Vercel Analytics and Speed Insights, cookie-free, no individual identifier.

Cookies

Only technical cookies: login session, language, display currency and cart. No advertising or third-party tracking cookies.

Processors

Vercel (hosting, USA, standard contractual clauses), Neon (database, Frankfurt), Cloudflare (file storage), Stripe (payments — Insrt never stores card data), Resend (email), Inngest (audio processing). Text descriptions of catalogue tracks — never personal data — are sent to Voyage AI for search.

Your rights

Access, rectification, erasure, restriction, objection and portability. Write to [email]. You may lodge a complaint with your supervisory authority (in France, the CNIL).

Security

Encrypted connections (HTTPS), hashed passwords, private files served only through short-lived signed links.