1. Data Controller
The data controller for personal data collected on sens-ai.biz and through Sens-AI services is:
2. Data Collected
In the course of providing our AI chatbot services, we collect the following categories of data:
- Identification data: name, professional email address
- Account data: login credentials, user preferences
- Conversation data: messages exchanged with the AI chatbot, conversation history
- Phone number: the caller's number on the telephone channel, or a number given during a conversation, used to identify the person and to let an agent call them back; kept for 90 days, like the conversation it belongs to
- Technical data: IP address, browser type, cookie data
- Usage data: service usage statistics, connection logs
3. Purpose of Data Processing
Your personal data is processed for the following purposes:
- Providing and operating the AI chatbot service
- Managing your user account
- Improving the quality of our services
- Technical support and customer assistance
- Service-related communications (updates, maintenance)
- Compliance with legal obligations
4. Legal Basis for Processing
Data processing is based on the following legal grounds:
- Contract execution: processing is necessary for providing the AI chatbot service you subscribed to (Article 6.1.b GDPR)
- Legitimate interest: improving our services and securing the platform (Article 6.1.f GDPR)
- Consent: for non-essential cookies and marketing communications (Article 6.1.a GDPR)
5. Data Retention Periods
Your personal data is retained for the following periods:
| Data Type | Retention Period |
|---|---|
| Conversation data | 90 days from the last exchange |
| Account data | Until account deletion |
| Technical logs | 30 to 90 days |
| Cookies | 13 months maximum |
6. Third-party Data Processors
To operate our services, we use the following GDPR-compliant data processors:
| Processor | Service | Location |
|---|---|---|
| Cloudflare | Hosting, CDN, file storage, security | EU (European servers) |
| Turso | Database | EU (Ireland) |
| Upstash | Cache, job queue, semantic search | EU (Frankfurt) |
| Mistral AI | AI language model | EU (France) |
| Creem | Payment platform (Merchant of Record) | EU |
| Loops.so | Transactional and marketing email | United States (SCCs) |
Your conversation data is hosted within the European Economic Area (EEA). Hosting, database, file storage and the AI language model are all located in the EU.
The following transfers outside the EEA exist, all governed by the European Commission's Standard Contractual Clauses (SCCs): our email delivery provider Loops.so is established in the United States and receives only the data required to send a message — email address, name and communication preferences — with no conversation content; some of our infrastructure providers store your data in the EU but may access it from the United States as part of their technical support; and payments are routed through international payment networks, which are additionally PCI-DSS certified. The per-provider detail is set out in Article 9 of our data processing agreement.
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access: obtain confirmation that your data is being processed and receive a copy
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of your personal data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to the processing of your data on legitimate grounds
- Right to restriction: request restriction of the processing of your data
To exercise these rights, contact us at: info@sens-ai.biz
You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr
9. Contact
For any questions regarding the protection of your personal data, please contact us:
Email: info@sens-ai.biz
Website: https://sens-ai.biz