Política de privacidad

This Privacy Policy explains what personal data Sensever collects, why, who receives it, how long it is kept and what you can do about it. It applies to sensever.com, accounts.sensever.com, the mirror sensever.ru, the Sensever apps for Windows and macOS, the website widget and comments that site owners install, the Sensever API and the Sensever MCP server at https://mcp.sensever.com/mcp (together, "Sensever" or the "Service").

1. Who we are

Sensever is operated by Sensever Inc, 1498 Buford Hwy Ste C, #322, Sugar Hill, GA 30518, USA ("we", "us"). We are the controller of the personal data described here, except for the data that businesses collect from their own customers through Sensever (see section 10).

Questions and requests about privacy: legal@sensever.com.

2. Data we collect

Your account

• Name, @username, email address, phone number (optional; you can hide it from other people), profile photo, language and time zone.
• Your password, stored only as a one-way hash. If you sign in with Google, we receive your name, email address and profile photo from Google.
• Sign-in sessions: the device and browser, sign-in time and IP address. You can sign out of all devices at once in your account.

What you create and share

• Messages, voice messages, photos, videos and other files in chats, groups, channels and support requests; reactions, edits and read marks.
• Call information: who took part, when and for how long.
• Channels, articles, videos and other materials you publish, tasks and comments in Sensever Flow, stickers, contacts and the names you give them, and the files you add to a project assistant's knowledge base.

Services you connect

• Messaging channels of a project (WhatsApp Business through Meta, Instagram, Telegram, MAX): the messages customers send and the names, usernames or phone numbers these platforms pass to us.
• Sensever Mail: if you connect a Gmail or Google Workspace mailbox, we access it through the Google API to show, search, sort and send mail in Sensever on your instructions. We use mailbox data only to provide Sensever Mail to you and to the people you share the mailbox with. We do not use it for advertising and do not sell it.
• AI apps that you connect through the Sensever MCP server: see section 6.

Payments

Payments are processed by Stripe. We receive the payment status, amount, currency and the details needed for invoices. We do not receive or store full card numbers.

Technical and usage data

• Records of requests to our servers and API: IP address, browser or app (user agent), address requested, result and time.
• Push notification tokens of your devices (Firebase Cloud Messaging), if you allow notifications.
• Visit statistics of sensever.com, described in section 5.

3. How we use data

We use personal data to:

• provide the Service: deliver messages and calls, store and show files, sync your devices, send notifications;
• keep accounts and the Service secure: sign-in checks, limits against abuse and spam, investigating incidents;
• answer support requests;
• bill for paid features and keep accounting records;
• understand how the Service is used and improve it (statistics, see section 5);
• run the AI features you or your project turn on (see section 4);
• comply with the law.

We do not sell personal data, we do not show advertising, and we do not use your messages, files or mail to train AI models.

Legal bases (where the GDPR or a similar law applies): performance of our contract with you (providing the Service); our legitimate interests (security, preventing abuse, statistics without cookies, improving the Service); your consent (analytics cookies, notifications; you can withdraw it at any time); and legal obligations (for example, tax records).

4. AI features

Sensever includes AI assistants (for example, the Sensever assistant and assistants that a project sets up for its customers). When an assistant answers, the question and the context it needs (recent messages of the conversation and excerpts from the project's knowledge base) are sent to our AI model provider, currently xAI, to generate the answer. For billing we count the number of tokens used, not their content.

5. Cookies and visit statistics

Necessary cookies keep you signed in to sensever.com and accounts.sensever.com, protect forms against forgery, remember your language (chat_lang, one year) and remember that you closed the cookie notice (sv_cookie_ok, one year).

After you press "OK" on the cookie notice, sensever.com loads Google Analytics 4 and Yandex Metrica through Google Tag Manager, and our own statistics may keep an identifier in your browser. Advertising storage stays switched off: we show no ads. In the Sensever desktop app, statistics are collected with an identifier as part of using the app.

Before you press "OK", Google Tag Manager loads with analytics storage denied (Google Consent Mode), and our own statistics count the visit without cookies: a key that is computed from the IP address and browser and changes every day, so visits cannot be linked across days or to you. The IP address of such a visit is not stored.

Our own statistics (pages viewed, time on the page, where the visit came from, country, device type) are kept for 25 months. Full IP addresses are kept for 30 days and then shortened (to /24 for IPv4, /48 for IPv6). Records of API requests are kept for 30 days.

You can withdraw consent at any time by deleting the cookies and site data of sensever.com in your browser.

6. Connected AI apps (MCP)

The Sensever MCP server (https://mcp.sensever.com/mcp) lets an AI app that you choose, such as Claude (Anthropic) or ChatGPT (OpenAI), work with your Sensever data on your behalf.

Connecting. The app sends you to accounts.sensever.com. You sign in and see a consent screen with the app's name, the address it will return to and the permissions it asks for. Nothing is shared until you press "Allow". Each app needs its own consent. Permissions that would send messages outside Sensever (to customers or by email) are off by default.

What the app can read today. The MCP server is read-only. It offers three tools:

• whoami: your Accounts id, name, @username and the permissions of this connection (permission profile);
• search: finds messages in the chats, groups and channels you are a member of (permission chat.read), up to 20 results per page, each with the chat name, sender, date, a short excerpt and a link;
• fetch: opens one message found by search: its full text, chat, sender, time and link (permission chat.read).

The app cannot send, edit or delete anything. Each request is checked by the Sensever service that owns the data, exactly as if you opened it yourself: the app never sees more than you can see in Sensever. The app calls these tools only when it decides to, usually because you asked it something.

What the AI app does with the data. The results of the tools go to the AI app and are handled by its provider under that provider's own terms and privacy policy, not ours. Data already received by the app stays there after you disconnect it; delete it in the app if you need to.

What we store.

• accounts.sensever.com keeps the connection: the app, the permissions you gave, when you connected it, when it was last used and when it was disconnected. Access tokens are valid for 15 minutes; refresh tokens for 30 days and are replaced with a new one each time they are used.
• The MCP server has no database. It does not store message texts, search queries or tokens. For every tool call it writes one line to its call log: the time, your Accounts id, the app's client id, the tool, the service called, the result status, the duration, the response size and a request id. Log files are deleted after 90 days.
• Tokens are accepted only in the Authorization header. Your access token never reaches the services that hold your data: for each request the MCP server receives a separate internal credential that is valid for 10 seconds.
• Limits apply against misuse: 120 tool calls per minute per connection and 600 per minute per person.

Disconnecting. You can disconnect an app at any time at accounts.sensever.com/connected-apps or in your profile on sensever.com, Profile → Connected apps. Disconnecting ends all of the app's tokens and your consent, and takes effect within 30 seconds. "Sign out everywhere" and disabling your account also disconnect all apps.

7. Who receives data

We share personal data only as needed to run the Service:

• Other people in Sensever: what you post is visible to the members of that chat, group, channel or project. Public channels, public profiles and public pages can be seen by anyone.
• Service providers that process data for us:

• AI apps you connect through MCP (see section 6).
• The sensever.ru mirror: if you open Sensever through sensever.ru, your requests pass through a relay server in Russia that forwards them to our servers.
• Authorities, when the law requires it, and to protect the rights and safety of people and of the Service.
• A successor, if Sensever is reorganised or sold; this policy will keep applying to your data.

8. International transfers

Some providers process data outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses offered by these providers.

9. How long we keep data

Deleted data can remain in database backups for some time after deletion.

10. Businesses that use Sensever and their customers

Businesses use Sensever for customer support, the website widget, comments, mail and website statistics. For the data of their customers and website visitors, the business is the controller and we process the data on its behalf. If you wrote to a business through Sensever, contact that business first about your data; we help it answer.

The widget on a business's website counts page views and time on the page. It keeps an identifier in that website's browser storage (not a cookie). Statistics of project websites are kept for 13 months.

11. Security

Connections are encrypted (TLS). Passwords are stored as hashes. Tokens are short-lived and checked on every request, and each service checks your access to its own data. Backups are stored separately from the servers. Access to personal data inside our team is limited to what the work requires. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

12. Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to its processing, and withdraw consent at any time. You can edit most of your data yourself in your account. To delete your account or to use any other right, write to legal@sensever.com. We answer within one month. You also have the right to complain to a data protection authority.

13. Children

Sensever is not intended for children under 16. If you believe a child has given us personal data, write to us and we will delete it.

14. Changes

We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell you in the Service before it takes effect.

15. Contact

Sensever Inc, 1498 Buford Hwy Ste C, #322, Sugar Hill, GA 30518, USA. Email: legal@sensever.com.

Condiciones de uso