SPSS InsightGenius API Docs

Privacy Policy

Last updated: March 24, 2026

1. What We Do

SPSS InsightGenius ("the Service") is a REST API and MCP server operated by Genius Labs that processes SPSS (.sav), CSV, and Excel survey data files to produce market research analysis (crosstabs, significance testing, frequency tables, and Excel reports).

2. Data We Process

When you use our API or MCP server, you may upload data files containing survey responses. Here is how we handle that data:

  • Stateless processing: Files are processed in-memory and returned immediately. We do not store your data files on disk or in any persistent database.
  • Temporary file sessions (MCP): When you use the MCP spss_upload_file tool, your file is stored in Redis with a 30-minute sliding-window TTL. After 30 minutes of inactivity, the data is automatically deleted. No backups are made.
  • Temporary downloads: Excel files generated by analysis tools are stored in Redis for 5 minutes to enable download. After expiry, they are permanently deleted.
  • No data retention: We do not retain, archive, or backup any uploaded data files or generated reports beyond the temporary processing windows described above.
  • No data sharing: We do not sell, rent, share, or disclose your data to any third parties.

3. AI Processing

Some features use Claude Haiku (by Anthropic) for:

  • Reporting Ticket parsing: If you upload a .docx file, we send its text content (not your survey data) to Claude Haiku to extract analysis specifications.
  • Smart labeling: Variable names and labels may be sent to Claude Haiku to suggest improved labels. No actual survey response data is sent.
  • Executive summaries: Aggregated analysis results (percentages, means — not individual responses) may be sent to Claude Haiku to generate narrative summaries.

We never send individual survey responses or personally identifiable information (PII) to any AI model. Only metadata, labels, and aggregated statistics are used for AI features.

4. Authentication & API Keys

  • API keys are stored as SHA-256 hashes. We never store raw API keys.
  • API keys are used solely for authentication and rate limiting.
  • Usage logs record: API key name (not the key itself), endpoint called, response status, processing time, and request/response sizes. These logs are used for billing and debugging only.

5. Infrastructure

  • Hosting: Railway (Google Cloud Platform, europe-west4 region).
  • Redis: Used for rate limiting, file sessions, and temporary downloads. Data is ephemeral (TTL-based auto-deletion).
  • HTTPS: All traffic is encrypted in transit via TLS.
  • No persistent storage: The service has no database. All state is ephemeral.

6. Your Rights

Since we do not store your data beyond temporary processing windows:

  • Deletion: Data is automatically deleted after processing (or after session/download TTL expires).
  • Access: We do not retain data to provide access to after processing is complete.
  • Portability: All analysis results are returned to you immediately in the API response.

7. Changes

We may update this policy as our service evolves. Material changes will be communicated via the API changelog or email to registered API key holders.

8. Contact

For privacy-related inquiries: hello@insightgenius.io

Genius Labs — Bogota, Colombia