Privacy Policy.
Effective September 2026. Instill is in closed beta. This policy says what we collect and how we use it, in plain words. It will change as the product does.
Closed beta. Please read this first.
Instill is in closed beta. It is not finished, and it will change. We may end beta access at any time.
When you use Instill, our team can see the messages you type and what Instill writes back. The outside AI services that run Instill see them too. Ask us and we will tell you which ones. We keep your messages only to do the work you set up, and we delete them when you ask.
To connect your email, calendar or other tools, you sign in through Composio. Composio is the service that links Instill to those tools. Once a tool is connected, Instill can read it and act in it, as far as the access you gave allows.
If you use Instill during this beta, you accept these risks. If you don't, please wait before you connect your tools or use Instill.
Please don't type or connect anything you can't afford to share, like passwords, card numbers or health records.
Who handles your data.
Instill (“we,” or “us”) is the team operating the Instill website, applications, and services (the “Service”). Instill is currently in closed beta and is not yet incorporated as a separate legal entity; the operators of the Service are responsible for handling your data in accordance with this policy.
If you have any question about your data, write to us at hello@instill.expert.
The categories of data.
We collect the following categories of personal data:
- Account information. Your name, email address, and authentication identifiers when you sign up or sign in. Experts additionally provide professional background and profile information.
- Content you submit. Messages you type to Instill, files and notes you share, and anything Instill reads from tools you connect, such as emails and calendar events. For experts: the materials you use to instill an agent, such as methods, examples and voice references.
- Run & engagement data. The outputs produced by agents, expert verifications, revisions, and the audit trail of the engagement.
- Payment data. Billing details and transaction history are handled by our payment provider, which is the Merchant of Record. Instill receives transaction confirmations and limited metadata; we do not store your full card or banking details.
- Usage & device data. Log data such as IP address, browser type, pages visited, timestamps, and referring URLs, collected for security and product improvement.
- Cookies & local storage. Used to keep you signed in and to remember your preferences. See section vii.
- Communications. Messages you send us by email or through the Service.
The purposes of processing.
We use personal data to:
- Provide, operate, and maintain the Service.
- Authenticate you, secure your account, and prevent fraud or abuse.
- Run Instill, including sending your messages to outside AI services to produce replies (see section iv).
- Process payments and fulfil our tax, accounting, and regulatory obligations.
- Improve the product, debug, monitor performance, and develop new features. Where we use Your Content to improve models or templates, we de-identify or aggregate it first.
- Send transactional and Service-related communications (e.g., receipts, security alerts, important notices).
- Respond to your requests, feedback, and support questions.
- Comply with applicable law and enforce our Terms of Use.
Our legal bases for processing (where GDPR or similar laws apply) include performance of a contract with you, our legitimate interests in operating and improving the Service, your consent (for non-essential cookies or marketing), and compliance with legal obligations.
Service providers and partners.
We do not sell your personal data. To run Instill, we use outside services for hosting, storage, AI, tool connections, payments, email and analytics. They handle your data for us. During the closed beta we do not list them here. Ask us and we will tell you. Their own terms cover what they keep and for how long.
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets — in which case we will give you notice where reasonably possible.
Where your data may go.
Our service providers operate across multiple jurisdictions, including the United States, the European Union, and India. Your data may be transferred to and processed in countries other than where you reside. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect international transfers.
How long we keep it.
We retain personal data for as long as your account is active and for a reasonable period afterwards to support legitimate business and legal needs — for example, to defend legal claims, satisfy tax and accounting obligations, or maintain security logs. After that, we delete or anonymize it.
During Beta, retention practices may evolve. If you delete your account, your content will be removed from active systems and from backups in the ordinary course of our backup cycle.
Cookies and similar technologies.
We use a small number of cookies and local-storage entries to keep you signed in, remember your preferences, secure the Service, and understand how it is used. We do not use cookies for cross-site advertising.
You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.
What you can ask us to do.
Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to our processing of your personal data, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data-protection authority.
To exercise any of these rights, email us at hello@instill.expert. We will respond within the timeframes required by applicable law.
How we protect data.
We use industry-standard administrative, technical, and physical safeguards — including encryption in transit, access controls, and audit logging — to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.
Not for users under 18.
The Service is not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.
When this policy changes.
We may update this Privacy Policy as the Service evolves. We will change the effective date at the top, and for material changes we will give additional notice through the Service or by email.
How to reach us.
For any privacy-related question or request, write to us at hello@instill.expert. As Instill is in closed beta and not yet incorporated as a separate legal entity, this email is the primary channel for privacy correspondence.