Privacy Policy

Last Updated: 3.09.2026

Sensbot.ai ("we," "our," or "us") provides AI-powered solutions for sales, customer support, and user engagement.

We take privacy seriously and are committed to protecting your personal data. This Privacy Policy outlines our data collection, usage, and protection practices. As information privacy is an evolving responsibility, we will periodically update this policy as needed.

1. Contacting Us About Data Protection

Sensbot.ai is headquartered in Novo mesto, Slovenia. If you have any questions, concerns, or requests regarding data privacy, you may contact our Privacy Team:

Email: marketing@sensbot.ai
Website: https://sensbot.ai/

2. Information We Collect and How We Use It

Sensbot.ai collects personal data from visitors and customers. This typically includes:

  • Name
  • Job title
  • Employer name
  • Work address
  • Work email
  • Work phone number

Why We Collect This Information

We collect this data to:

  • Provide and improve our Services
  • Respond to inquiries and customer support requests
  • Deliver marketing and promotional content (where permitted)
  • Analyze user behavior for better experience optimization

We do not sell your personal data. We only share it with third-party service providers that facilitate our operations (e.g., cloud hosting, analytics, and payment processors).

Occasionally, we may obtain data from third-party sources such as LinkedIn or industry databases.

3. Data We Process on Behalf of Our Customers

Sensbot.ai has two distinct roles. For the data described in Section 2, and for our own website, we are the data controller. When a business connects their online store, mailbox or booking system to our services, we act as a data processor on that business's behalf. The business is the controller of that data and decides what is connected and for how long.

What We Receive From a Connected Store or Mailbox

Depending on which of our products the business enables, and on the permissions they grant, we may receive:

  • Catalogue data — products, variants, categories, prices, stock levels, product descriptions and images.
  • Order data — order contents, totals, status, shipping and payment method, and the buyer details attached to an order, which can include name, email address, telephone number, and delivery and billing address.
  • Published website content — public pages such as shipping, returns, FAQ and terms, used to build the assistant's knowledge base.
  • Conversation content — messages that shoppers send to the chat assistant on the business's website, and their transcripts.
  • Email content — where the business connects a support mailbox, the incoming messages and the replies they send, used to generate and improve draft responses.

Why We Process It

Solely to provide the service the business has asked for: answering shopper questions accurately, looking up an order when the shopper asks about it, drafting replies for the business's staff to review, and reporting on how the assistant performed. We do not use this data for our own marketing, and we do not sell it.

AI Processing

To generate answers and drafts, the relevant content is sent to third-party AI model providers that we engage as sub-processors under written contract. Neither we nor those providers use our customers' data to train AI models. Content is sent for the purpose of producing a response and is not retained by the provider for model improvement.

Sub-Processors

We engage a limited number of sub-processors: cloud hosting (Germany), AI model providers, payment processing, and transactional email delivery. Each is bound by a written agreement with confidentiality and data-protection obligations. A current list of sub-processors, and our standard Data Processing Agreement, are available on request from info@sensbot.ai.

Retention and Deletion

We retain this data for as long as the business's account is active. A business can disconnect a store or mailbox at any time from within their platform or by removing our plugin or app, and can request deletion of the associated data by contacting us. On request we delete it, subject to any legal retention obligations.

If You Are a Shopper

If you contacted a store that uses Sensbot and you want your data accessed, corrected or deleted, the store is the controller of that data and is the right first point of contact. You may also write to us at info@sensbot.ai and we will assist the store in responding to your request.

4. Use of Sensbot.ai Website

Like most websites, Sensbot.ai automatically collects certain information through log files, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and interaction history

We use this data to optimize our website, improve user experience, and monitor security.

Cookies and Tracking Technologies

Sensbot.ai uses cookies to enhance user experience. For details on how we use cookies and how you can manage them, please refer to our Cookie Policy.

5. Sharing Your Information

We may share your data in the following situations:

  • With Service Providers — We use third-party vendors for cloud storage, analytics, payment processing, and communications.
  • Legal Compliance — We may disclose data to comply with legal obligations, such as subpoenas or court orders.
  • Business Transfers — In case of a merger, sale, or reorganization, data may be transferred to new ownership.
  • Emergency Situations — We may disclose data in cases of security threats or fraud prevention.

Our third-party processors are contractually obligated to handle your data securely and in accordance with data protection regulations.

6. International Data Transfers

Your information is processed and stored on our servers in Germany. Some of our sub-processors, including the AI model providers described in Section 3, may process content outside the European Economic Area. If you are in the European Economic Area (EEA) or the UK, we take appropriate safeguards to ensure GDPR compliance. These safeguards include:

  • Standard contractual clauses with third-party service providers
  • Secure encryption of data during transfer
  • Compliance with applicable data protection laws

7. Your Rights Under GDPR and Other Privacy Laws

If you are a resident of the EEA, UK, or other jurisdictions with privacy laws, you may have the following rights:

  • Right to Be Informed — Know what personal data we collect and why.
  • Right of Access — Request a copy of your personal data.
  • Right to Rectification — Request corrections to inaccurate data.
  • Right to Erasure ("Right to Be Forgotten") — Request deletion of your personal data.
  • Right to Restrict Processing — Request that we limit how we process your data.
  • Right to Data Portability — Obtain a copy of your data in a structured format.
  • Right to Object — Object to processing, including direct marketing.
  • Rights Related to Automated Decision-Making — Challenge decisions made solely by automated systems.

To exercise these rights, contact marketing@sensbot.ai. We will respond within legally mandated timeframes.

8. Data Security Measures

Sensbot.ai employs advanced security measures to protect your personal data, including:

  • Encryption — All data is encrypted at rest and in transit.
  • Access Control — Restricted access to personal data based on roles and permissions.
  • Rate Limiting — To prevent abuse, we limit request rates on our systems.
  • Domain Allowlist — Users can restrict chatbot usage to specific domains.
  • Infrastructure Security — Our services run on secure cloud infrastructure.
  • Compliance — We adhere to GDPR and other data protection frameworks.
  • No AI Training on User Data — Your data is not used to train AI models.

9. Data Retention Policy

Sensbot.ai retains data for as long as necessary to provide our services and for business and legal compliance purposes.

  • Customer Data — Retained for the duration of the customer relationship.
  • Prospect Data — Retained until it no longer holds business value.
  • Log Data — Retained for security and analytics purposes.

Upon request, we will delete your personal data, subject to legal obligations.

10. Children's Privacy

Sensbot.ai is not intended for children under 13. We do not knowingly collect or store personal information from minors. If you believe a child has provided us with personal data, contact us at info@sensbot.ai for removal.

11. Use of Google Workspace APIs

Sensbot.ai integrates with Google Workspace APIs to enhance functionality. We explicitly do not use data obtained through these APIs to train AI models. Data accessed is solely used for service-related functionalities and is handled according to this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.