Privacy Policy

Last updated: July 24, 2026

Instelo ("we", "us", or "our") is a desktop AI assistant that lives in an overlay on your screen. Your privacy matters to us, and this policy explains what information we collect, how we use it, and the choices you have. If you have any questions, contact us at tryinstelo@gmail.com.

The short version

• We do not store your screenshots or chat content.
• When you ask a question, a screen capture is sent through our secure backend to your chosen AI provider for that request, then discarded — it is not written to disk or kept in our database.
• We keep only what we need to run your account: your email, plan, and daily usage counts.
• We do not sell your personal data. Ever.

What we collect

• Account information: your email address and authentication data when you create an account (managed through Supabase Auth).
• Subscription and billing: your plan tier and billing status, processed by Stripe. We never see or store your full card details.
• Usage counts: daily token usage totals, used only to enforce plan limits. These are counts, not content.
• Support communications: anything you choose to send us when you contact support.

What we do not collect or store

• Screen content: when you send a message, a screenshot is captured locally on your device. To generate an answer, that capture (and your prompt) is transmitted through our secure backend infrastructure (Supabase Edge Functions) to the AI provider you selected (OpenAI, Anthropic, or Google). We use this path so provider API keys stay server-side and so we can enforce authentication and plan limits. Screenshots are not saved to your disk by Instelo, and we do not retain screenshots or chat content in our database after the request completes.
• Conversations: your prompts and the AI's responses are not logged or retained by us as stored content.
• Keystrokes or browsing history: Instelo does not monitor what you type or the sites you visit. It only captures your screen at the moment you ask it to.

How we use information

We use the account and usage data described above to:

• Sign you in and provide the service
• Enforce plan limits and process subscriptions
• Keep the service reliable and respond to support requests
• Comply with legal obligations

Third-party services

We rely on a small number of trusted processors:

• Supabase — authentication, account storage, and the secure backend that proxies AI requests (and voice transcription when enabled) to providers
• Stripe — payments and subscription management
• AI providers (OpenAI, Anthropic, Google) — process the prompts and screenshots forwarded for each request. Their privacy policies apply to that processing.

Data retention

We retain account and billing records while your account is active and as required for legal, tax, or fraud-prevention purposes. You can request deletion of your account and associated data at any time by emailing us.

Security

All connections use encrypted transport (HTTPS/TLS), and sensitive operations such as AI provider keys are handled server-side only — they are never shipped in the app. No method of transmission over the internet is 100% secure, but we design Instelo to hold as little of your data as possible so there is less to protect in the first place.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Email tryinstelo@gmail.com to exercise any of these rights and we will respond promptly.

Children

Instelo is not directed at children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect data from children.

Changes to this policy

If we make changes, we will post the revised policy on this page with an updated date. For material changes, we will make reasonable efforts to notify you in the app or by email.