Privacy Policy
Last updated: May 2026
This Privacy Policy explains how Senectra collects, uses, and protects your information and the information of your customers.
1. What we collect
| Data | Why | Retention |
|---|---|---|
| Account info (username, email) | Account creation and authentication | Until account deletion |
| Conversation logs | Dashboard history and analytics | 90 days |
| Knowledge base content | Power chatbot responses | Until deleted |
| Payment info | Processed by Stripe — we never store card details | Per Stripe's policy |
| IP addresses | Rate limiting and security | 30 days |
2. Your customers' data
When your customers chat with your bot, their messages are:
- Stored in your account's conversation log (visible in your dashboard)
- Processed by the SCTRA 1.0 model to generate responses
- Never shared with other Senectra clients
- Never sold or used for advertising
You are responsible for informing your own customers that their conversations are handled by an AI and may be stored.
3. How we use your data
- To provide and improve the Service
- To send transactional emails (password resets, escalation alerts)
- To detect abuse and enforce rate limits
- To generate aggregated, anonymized analytics
We do not use your data for advertising. We do not sell your data to third parties.
4. Third-party services
| Service | Purpose |
|---|---|
| SCTRA 1.0 | AI response generation |
| MongoDB Atlas | Database hosting |
| Stripe | Payment processing |
| Gmail (SMTP) | Transactional email delivery |
5. Cookies
We use localStorage (not cookies) to store your session token in the browser. No third-party tracking cookies are used.
6. Security
- Passwords are hashed with SHA-256 and never stored in plaintext
- All API endpoints require JWT authentication
- Data is transmitted over HTTPS in production
- Each client's data is isolated by a unique client_id
7. Your rights
You have the right to:
- Access all data we hold about your account
- Correct inaccurate information
- Delete your account and all associated data
- Export your conversation history
To exercise these rights, contact us at privacy@senectra.ai.
8. Data retention
Conversation logs are kept for 90 days by default. Knowledge base content and account data are kept until you delete them or close your account. After account deletion, all data is removed within 30 days.
9. Children
Senectra is not intended for children under 13. We do not knowingly collect data from children.
10. Changes
We may update this Policy. Significant changes will be notified by email. Continued use of the Service after changes constitutes acceptance.
11. Contact
Privacy questions: privacy@senectra.ai