Chính sách quyền riêng tư

This Privacy Policy explains what personal data Sensever collects, why, who receives it, how long it is kept and what you can do about it. It is one policy for every Sensever service: sensever.com, accounts.sensever.com, the mirror sensever.ru, Sensever Flow, Sensever Foundry, Crawl (crawl.sensever.com), Storage (assets.sensever.com), Billing, the Sensever apps for Windows, macOS, iOS and Android, the website widget and comments that site owners install, the Sensever API and the Sensever MCP server at https://mcp.sensever.com/mcp (together, "Sensever" or the "Service").

This document has a version: the date at the top of the page. How versions work and how we tell you about changes is described in section 16.

1. Who we are

Sensever is operated by Sensever Inc, 1498 Buford Hwy Ste C, #322, Sugar Hill, GA 30518, USA ("we", "us"). We are the controller of the personal data described here, except for the data that businesses collect from their own customers and website visitors through Sensever (see section 10).

Questions and requests about privacy: legal@sensever.com.

2. Data we collect

This section lists the data that most of Sensever uses. Data that only one service uses is described with that service in section 11 and, for Foundry, in section 12.

Your account

• Name, @username, email address, phone number (optional; you can hide it from other people), profile photo, language, time zone and country. If you have not given a country, we fill it in at sign-in from your IP address, using a local database (DB-IP Lite). No outside service is asked.
• Your password, stored only as a one-way hash.
• If you sign in with Google, Apple or Yandex, we receive from that provider your account id there, your email address and your name, and from Google also your profile photo. With Apple you can hide your real email address; we then receive a relay address from Apple. For Sign in with Apple we keep an encrypted Apple token, so that we can withdraw Sensever's access at Apple when your account is deleted.
• Sign-in codes are sent to your email address. Sign-up by phone number is switched off today.
• Sign-in sessions: the device and browser, sign-in time and IP address. You can sign out of all devices at once in your account.
• Your acceptance of these documents: which version of the Privacy Policy and of the Terms of Service you accepted, and when.

What you create and share

• Messages, voice messages, photos, videos, locations and other files in chats, groups, channels and support requests; reactions, edits, read marks and unsent drafts. Drafts are kept on our servers, so that they follow you across devices, until you send or clear them.
• Call information: who took part, when and for how long, and technical call-quality data.
• Channels, articles, videos and other materials you publish, tasks and records in Sensever Flow, your Foundry questionnaire and projects, stickers, contacts and the names you give them, and the files and tables you add to a project assistant's knowledge base.

Services you connect

• Messaging channels of a project (WhatsApp Business and Instagram through Meta, Telegram, MAX): the messages customers send and the names, usernames or phone numbers these platforms pass to us. If a project uses WhatsApp calling, call events and call history are stored too; these calls are not recorded.
• Sensever Mail: see Sensever Mail and Google user data below.
• AI apps that you connect through the Sensever MCP server: see section 6.

Sensever Mail and Google user data

If you connect a Gmail or Google Workspace mailbox, we access it through the Google API to show, search, sort and send mail in Sensever on your instructions. Depending on what you allow, we ask Google for access to read and change your mail (gmail.modify or full mail access) and to read and change basic mail settings, and, for a Workspace administrator, to read the list of users and groups of the organisation. You can also connect other mailboxes (for example Yandex, Mail.ru, Yahoo or AOL) over IMAP and SMTP.

We use mailbox data only to provide Sensever Mail to you and to the people you share the mailbox with. Sensever's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the mail features you use in Sensever;
• we do not transfer it to anyone, except as needed to provide these features, to comply with the law, or as part of a merger or sale of Sensever with your data protected as described here;
• we do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train general AI or machine-learning models;
• people at Sensever do not read your mail, unless you ask us to (for example in a support request), it is needed for security (for example to investigate abuse), or the law requires it.

You can disconnect a mailbox at any time in Sensever, and you can withdraw Sensever's access in your Google account settings.

Payments

Payments are processed by Stripe. We receive the payment status, amount, currency and the details needed for invoices. We do not receive or store full card numbers.

Technical and usage data

• Records of requests to our servers and API: IP address, browser or app (user agent), address requested, result and time.
• Push notification tokens of your devices (Apple Push Notification service and Firebase Cloud Messaging), if you allow notifications.
• Error reports from Sensever web pages: what you were doing, the error, the page address without parameter values, browser, language, screen size and your account. They never contain tokens, cookies, message texts, file contents, email addresses or phone numbers.
• Visit statistics of sensever.com, described in section 5.

3. How we use data

We use personal data to:

• provide the Service: deliver messages and calls, store and show files, sync your devices, send notifications, run Flow, Foundry and the other services you use;
• keep accounts and the Service secure: sign-in checks, limits against abuse and spam, scanning uploaded files for viruses, moderation, investigating incidents;
• answer support requests;
• bill for paid features, pay partner rewards and keep accounting records;
• understand how the Service is used and improve it (statistics, see section 5);
• measure our own advertising on other websites, with your consent (see section 5);
• run the AI features you or your project turn on (see section 4);
• comply with the law.

We do not sell personal data, we do not show advertising in Sensever, and we do not use your messages, files, mail or Foundry answers to train AI models.

Legal bases (where the GDPR or a similar law applies):

4. AI features

Sensever includes AI features: the Sensever assistant, assistants that a project sets up for its customers, Eva (a general assistant, today open only to Sensever administrators), translation of channel posts in Studio, AI voice in telephony and the Foundry assistants described in section 12.

What is sent to the AI model provider. When an assistant answers, the question and the context it needs (recent messages of the conversation, a short summary of the conversation and excerpts from the project's knowledge base) are sent to third-party providers of artificial intelligence services (such as OpenAI, Anthropic, xAI) that process data on our behalf under data processing terms ("AI providers"), to generate the answer. Photos that you send to an assistant (up to 4 per message) are sent to an AI provider so that the assistant can see them. Voice messages to an assistant are turned into text by an AI provider.

What stays with us. Excerpts of the knowledge base are found with our own search model, which runs on our servers; no outside service sees these texts for search. For each conversation an assistant keeps a short summary and its last messages ("memory"), so that it remembers the conversation; this is kept as long as the conversation. For billing we count the number of tokens used, not their content.

People can always take over. In customer support, a project's staff can take a conversation over from the assistant at any time; the assistant then pauses. A project can also send its conversations to its own bot on its own server; the project is then responsible for that processing.

AI answers are generated automatically and can be wrong. They do not make decisions about you that have legal or similarly significant effects.

5. Cookies and visit statistics

Necessary cookies keep you signed in to sensever.com and accounts.sensever.com, protect forms against forgery, remember your language (chat_lang, one year) and remember that you closed the cookie notice (sv_cookie_ok, one year). Sign-up, sign-in and sign-out events are recorded for security without asking.

After you press "OK" on the cookie notice, sensever.com loads, through Google Tag Manager, Google Analytics 4 and Yandex Metrica (statistics; Yandex Metrica can record how the page is used), and Google Ads and Meta Pixel tags that tell Google and Meta that a visit or a sign-up happened, so that we can measure our own advertising on their platforms. Our own statistics may then keep an identifier in your browser. We show no ads in Sensever. In the Sensever apps, our own statistics are collected with an identifier as part of using the app.

Before you press "OK", Google Tag Manager loads with analytics and advertising storage denied (Google Consent Mode), and our own statistics count the visit without cookies: a key that is computed from the IP address and browser and changes every day, so visits cannot be linked across days or to you. The IP address of such a visit is not stored.

Our own statistics (pages viewed, time on the page, where the visit came from, country, device type, and whether the connection comes from a known VPN, Tor or data-centre network) are kept for 25 months. The address of a page is stored without its query string. Full IP addresses are kept for 30 days and then shortened (to /24 for IPv4, /48 for IPv6). Records of API requests are kept for 30 days.

You can withdraw consent at any time by deleting the cookies and site data of sensever.com in your browser.

6. Connected AI apps (MCP)

The Sensever MCP server (https://mcp.sensever.com/mcp) lets an AI app that you choose work with your Sensever data on your behalf.

Connecting. The app sends you to accounts.sensever.com. You sign in and see a consent screen with the app's name, the address it will return to and the permissions it asks for. Nothing is shared until you press "Allow". Each app needs its own consent. Permissions that would send messages outside Sensever (to customers or by email) are off by default.

What the app can read today. The MCP server is read-only. It offers three tools:

• whoami: your Accounts id, name, @username and the permissions of this connection (permission profile);
• search: finds messages in the chats, groups and channels you are a member of (permission chat.read), up to 20 results per page, each with the chat name, sender, date, a short excerpt and a link;
• fetch: opens one message found by search: its full text, chat, sender, time and link (permission chat.read).

The app cannot send, edit or delete anything. Each request is checked by the Sensever service that owns the data, exactly as if you opened it yourself: the app never sees more than you can see in Sensever. The app calls these tools only when it decides to, usually because you asked it something.

What the AI app does with the data. The results of the tools go to the AI app and are handled by its provider under that provider's own terms and privacy policy, not ours. Data already received by the app stays there after you disconnect it; delete it in the app if you need to.

What we store.

• accounts.sensever.com keeps the connection: the app, the permissions you gave, when you connected it, when it was last used and when it was disconnected. Access tokens are valid for 15 minutes; refresh tokens for 30 days and are replaced with a new one each time they are used.
• The MCP server has no database. It does not store message texts, search queries or tokens. For every tool call it writes one line to its call log: the time, your Accounts id, the app's client id, the tool, the service called, the result status, the duration, the response size and a request id. Log files are deleted after 90 days.
• Tokens are accepted only in the Authorization header. Your access token never reaches the services that hold your data: for each request the MCP server receives a separate internal credential that is valid for 10 seconds.
• Limits apply against misuse: 120 tool calls per minute per connection and 600 per minute per person.

Disconnecting. You can disconnect an app at any time at accounts.sensever.com/connected-apps or in your profile on sensever.com, Profile → Connected apps. Disconnecting ends all of the app's tokens and your consent, and takes effect within 30 seconds. "Sign out everywhere" and disabling your account also disconnect all apps.

7. Who receives data

We share personal data only as needed to run the Service:

• Other people in Sensever: what you post is visible to the members of that chat, group, channel, workspace or project. Public channels, public profiles and public pages can be seen by anyone. What other Foundry members see is described in section 12.
• Service providers that process data for us:

• AI apps you connect through MCP (see section 6).
• Partners who brought a business to Sensever see that business's payments needed to calculate their reward (see section 11).
• The sensever.ru mirror: if you open Sensever through sensever.ru, your requests pass through a relay server in Russia that forwards them to our servers. Calls of Sensever telephony also pass through a server in Russia (sip.sensever.ru).
• Authorities, when the law requires it, and to protect the rights and safety of people and of the Service.
• A successor, if Sensever is reorganised or sold; this policy will keep applying to your data.

Map tiles in chat location messages come from OpenStreetMap through our own servers, so your browser does not contact OpenStreetMap. Countries are found from IP addresses with a local database (IP Geolocation by DB-IP).

8. International transfers

Sensever Inc is a company in the United States. Our servers are in the European Union, and some providers process data in other countries, including the United States. If you use the sensever.ru mirror or Sensever telephony, your data passes through a server in Russia. Where the law requires it, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses offered by our providers.

9. How long we keep data

Deleting your account. When your account is deleted, it is closed at once: you are signed out everywhere, tokens and connected apps stop working, and Sign in with Apple is revoked. Your email address and phone number stay in our records, so that they are not given to someone else. Messages you sent to other people stay in their chats. If you want us to erase more of your data, write to legal@sensever.com; we will erase what the law allows us to erase.

Deleted data can remain in database backups for some time after deletion, until the backups are replaced.

10. Businesses that use Sensever and their customers

Businesses use Sensever for customer support, the website widget, comments, mail, visitor statistics of their website and AI assistants. For the data of their customers and website visitors, the business is the controller and we process the data on its behalf. If you wrote to a business through Sensever, or visited its website, contact that business first about your data; we help it answer.

The widget and visitor statistics. The widget on a business's website counts page views, time on the page and events that the website sends. It keeps an identifier in that website's browser storage (not a cookie). A business can turn on a consent mode: until the visitor agrees, visits are then counted without an identifier, with a daily key that cannot be linked across days, and the IP address is not stored. We store the browser, device type, screen size, language, time zone, country, where the visit came from (including campaign tags), the page address without its query string, and the IP address. We do not store names, email addresses or phone numbers in these statistics. Full IP addresses are shortened after 30 days. Statistics of project websites are kept for 13 months.

When a visitor writes. When a visitor first writes through the widget, we keep with the request the visitor's IP address, country, browser, languages, time zone, screen size, the page they came from and campaign tags, so that the business can help. This is deleted together with the request.

Crawl. A business can let its assistant learn from its own website. Crawl (crawl.sensever.com) reads only sites whose owner has proved control of them: with a DNS record, a tag or a file on the site, or the project's widget code on the home page. Control is checked again every 30 days; if it is lost, crawling stops and the copy is deleted 14 days later. Crawl identifies itself as SenseverCrawl/1.0, follows robots.txt and limits its speed. It stores the text, title, description and structured data of public pages as they are published, which can include contact details the site shows. It does not store the raw pages, keeps no cookies and does not store search queries. When a page disappears, its text is deleted. When the business removes the site or deletes the project, everything Crawl stored for it is deleted.

11. Sensever services

Sensever Flow (tasks, deals and records). Flow stores what a workspace puts in it: objects such as tasks, deals, contacts and companies (which can include the names, email addresses and phone numbers of the business's own contacts), time entries, comments, attachments and webhooks set up by the workspace. Flow gets your identity from your Sensever account and keeps your account id, name, email address and photo. Discussions of objects take place in Sensever chats. Flow's emails are sent through Sensever Accounts and its notifications through a Sensever chat bot. Flow sends no data to AI providers. For a business's own contacts, the business is the controller. Flow keeps an activity history and an audit log of changes for 12 months. When a workspace is deleted or an object is archived, the data is hidden from everyone but stays in our database; write to legal@sensever.com if you want it erased.

Storage (Assets). Files are stored in Google Cloud Storage in the European Union. Every upload is scanned for viruses. Videos and audio are processed on our servers, and their metadata is removed. Files you make public get a permanent public address. When you share a link, our server opens the linked page to make a preview (as SenseverLinkBot/1.0) and keeps the preview image.

Studio (publishing). A post can be public, visible to members, or visible to a circle of people. A post is listed publicly only if both the post and its channel are public. Public posts get a permanent public address that search engines can find.

Calls. Calls use WebRTC and are encrypted in transit. When a direct connection is not possible, and for group calls, the audio and video pass through Cloudflare. Calls between people are not recorded.

Sensever telephony and AI voice. Where a project uses Sensever telephony, calls pass through our telephone server (sip.sensever.ru). When an AI voice answers a call, the call audio is sent to an AI provider (see section 4) to understand and answer it, and the text of the conversation is stored with the call so that the project can read it. Calls are recorded only if the project turns recording on.

Billing and the partner program. Billing keeps your balance, payments, invoices and usage (for example storage, AI tokens and the number of Flow members). A partner who brought a business to Sensever sees that business's name and the payments on which the partner's reward is calculated. If the business gives the partner access to its project, the partner sees what that access level allows. For partner payouts we keep the partner's name, country, bank details and verification data; account numbers are stored encrypted.

Mobile apps. The Sensever apps for iOS and Android use the camera, microphone, photos and location only when you use a feature that needs them, and location only while the app is open. They contain no outside analytics or crash-reporting tools.

12. Sensever Foundry

Sensever Foundry helps people find co-founders, team members, projects and investors. It is opening in stages and may be available only to some accounts. Foundry is only for people aged 18 or older.

What you tell Foundry

Your questionnaire can include:

• where you can work: your country, the cities from a world city catalogue (GeoNames) where you can work in person, a distance in kilometres and whether you would relocate. Foundry does not ask for your address and does not store a map point of where you live;
• skills and experience: skills and their level, occupations, tools, education, places of work and their websites, achievements, certificates and industries you know;
• what you offer and look for: resources, interests, project stages, a headline and an "About" text;
• work terms: hours per week, horizon, format, the risk you accept, languages, time zone, pay and equity expectations, goals, responsibilities, excluded industries and countries, team size;
• capital, if you want to invest: amount, currency, cheque size, instrument and readiness;
• work style: optional answers. You decide separately whether they are used for matching and whether they are shown;
• identity: first and last name, contacts (email, phone, Telegram, WhatsApp, LinkedIn, website), company details and a photo.

Foundry does not ask for your gender, age, date of birth, nationality or religion. From your Sensever account it keeps only your account id and language; it does not copy the rest of your account.

Your identity details and capital are stored in an encrypted vault, separately from the rest of the questionnaire. Every time they are opened, this is logged: by whom and why. The matching program cannot read the vault. A photo is reduced to 256×256 pixels and stripped of its metadata.

What other members see

• You choose. For every part of the questionnaire you choose "Only me" or show it. Parts marked "Only me" are not shown to anyone, but are still used for matching. Your contacts are never shown in lists. Your first name and photo are shown by default, and your last name and company are hidden by default; you can change this. Your headline is always shown.
• In lists, Discovery and the catalogue other members see a pseudonym, your headline and the parts of your questionnaire you show, but not your capital. Your name and photo are shown only if you chose to show them. To make people harder to recognise, some details on public cards (country, capital range, years of experience) are made less precise until at least 5 people share them.
• In a two-person chat each person appears as a pseudonym (an animal), or with the name and photo they chose to show, together with their public card. Capital is shown only if its owner chose to show it. Until the other person replies, the writer sees only their pseudonym and headline.
• Mutual reveal. Your name, contacts, company, photo and Sensever account are shown to another member only when you both chose to reveal yourselves to each other.
• Projects. Members see a project's title, teaser, industry, stage, place, roles and media. A project's financial information (the capital it seeks, when, the payback period and profit forecasts) is shown only to members who accepted the investor terms. Views of financial information are recorded.

Matching and profiling

Foundry ranks people and projects for each other. This is profiling, and this is how it works:

• Rules first. Foundry leaves out pairs that do not fit the hard conditions both sides set: countries, languages, hours, pay, equity, horizon, risk, time zone, format and place, team size, blocks and contact limits.
• Then a score. The rest are ranked by how well the skills cover the roles, by shared interests, by how well the terms fit and by trust checks. Shared interests are partly measured by comparing texts with our own model, which runs on our servers: on your side only the names of the industries you show, on the project side its title and description. People who were contacted many times recently are shown a little less, so that attention is shared fairly.
• No AI language model is used for matching, and the matching program never sees your identity.
• No decision with legal effect. The result is a list of suggestions. People always decide themselves whom to write to, and you can always write to members and projects you find yourself in Discovery and the catalogue.
• Exclusion. A member is excluded from matching and from writing to others only after reports about them from 3 different people have been confirmed by our moderators, and until a moderator lifts the exclusion.
• Old profiles. After 180 days without changes we remind you to update your questionnaire; after 365 days your profile is hidden until you come back.
• You can ask us how your ranking works, and object to it, at legal@sensever.com.

Investors and checks

Investor status is declared by the member: a member who states capital and accepts the investor terms is treated as an investor. We do not verify investors, their qualification or their money. A "checked" mark for capital or for a company is set by our team after a manual review. Your acceptance of the investor or author terms is stored with the version you accepted. You can withdraw your acceptance of the investor terms at any time.

Chats, reports and moderation

• Chats between two members run in Sensever chat. Foundry does not store their messages. The link between a pseudonym and a person is kept only inside the chat service. Leaving or blocking closes a chat; it stays read-only for 90 days and is then archived. We do not read these chats; when someone reports a message, our moderators may review it.
• Blocks are permanent and work both ways: the two people no longer see each other's projects, are not suggested to each other and cannot write to each other.
• Reports have a reason and an optional text. Our moderators decide on each report.
• Project moderation. Before a project is published, its texts are checked by rules and by an automatic AI check. The AI check only flags a project for a person to review; it never approves or rejects a project on its own.
• Staff access. Our administrators can open a member's identity only for a stated reason: a report, a support request, a legal request, a check or an appeal. Every such access is logged.

AI in Foundry

Eva, the Foundry assistant that helps you fill in your questionnaire, and the project assistant that helps you describe a project send your messages to them and your questionnaire or project draft to an AI provider (see section 4) to generate their answers. Your name, contacts, company and photo are not sent, but anything you type into the chat is. The Eva conversation is stored in the encrypted vault. For AI calls we keep only technical records (purpose, model, tokens, result) for 90 days.

Projects from public sources

The catalogue also shows projects imported from public sources: the EU research database CORDIS, public GitHub repositories and SEC Form C filings in the United States. We take the project's title, description, country, website and amounts, and for SEC filings the issuer's company name. We do not store the names or contacts of people from these sources: email addresses, phone numbers and links are removed from texts, and GitHub user names are not kept. Images are copied to our storage without their metadata. An imported card disappears when its project ends or the source removes it.

Claiming a card. A member who is the founder, a team member or a representative of an imported project can claim its card: Foundry gives a claim code, the member puts it on a page of the project and sends us the address of that page. Our team checks it by hand. Claims are kept as a record. If you want an imported card about your project removed or corrected, write to legal@sensever.com.

How long Foundry keeps data

When you delete your account, Foundry erases your vault (identity, capital, Eva conversation), your work style, education, experience, achievements and tools, your notifications, contacts and views, and the text of reports you made. You leave all chats, your open projects are closed and your acceptance of the investor terms is withdrawn. The rest of your questionnaire answers (for example skills, terms, interests, headline and "About" text), the texts of closed projects, reports about you and your claims stay without any link to your account, for statistics and safety. A check runs every day to confirm that the erasure happened.

Legal bases in Foundry

Matching that you ask for is part of our contract with you. Optional work-style answers and viewing financial information rest on your consent. Moderation, reports, blocks, access logs and the protection of members rest on our legitimate interest in a safe service. Members in countries under comprehensive sanctions (Cuba, Iran, North Korea, Syria) are not included in matching.

13. Security

Connections are encrypted (TLS). Passwords are stored as hashes. Tokens are short-lived and checked on every request, and each service checks your access to its own data. Foundry identity data, partners' bank account numbers and the secrets of assistant connectors are encrypted. Uploaded files are scanned for viruses. Backups are stored separately from the servers. Access to personal data inside our team is limited to what the work requires, and access to sensitive data is logged. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

14. Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to its processing (including profiling for Foundry matching), get an explanation of automated processing, and withdraw consent at any time. You can edit most of your data yourself in your account, your Foundry settings and your workspaces. To delete your account or to use any other right, write to legal@sensever.com. We answer within one month. You also have the right to complain to a data protection authority.

15. Children

You must be at least 16 years old to use Sensever, or older if the law of your country requires it. Sensever Foundry is only for people aged 18 or older. If you believe a child has given us personal data, write to us and we will delete it.

16. Versions and changes

Each version of this policy is identified by the date it takes effect, shown at the top of the page. When we make a material change (for example new kinds of data, new purposes or new recipients), we publish a new version and ask you to accept it before you continue to use Sensever. Small changes that do not affect your rights (for example clearer wording) do not need a new acceptance. Earlier versions stay available: they are listed at the top of this page and open at /privacy?version=<version>, for example /privacy?version=2026-10-15.

17. Contact

Sensever Inc, 1498 Buford Hwy Ste C, #322, Sugar Hill, GA 30518, USA. Email: legal@sensever.com.

Điều khoản dịch vụ