Політика конфіденційності

1.1. The controller/operator of SENSORA is Altair Solutions Sp. z o.o., Ul. Ostrobramska 101, 04-041 Warszawa, Poland. KRS: 0000907518. NIP: PL9522217938. REGON: 389278509.

1.2. For questions about privacy, access, correction, or deletion of data, contact sensorsoffical@gmail.com.

1.3. This Policy applies to sensora.space and SENSORA's official features. As of this version, the service is available as a web application; future native versions may have additional technical mechanisms, which users will be informed about separately.

1.4. The Operator has assessed that a formal Data Protection Officer is not currently required under Article 37 of the GDPR: SENSORA's core activity is not the large-scale, regular, and systematic monitoring of individuals, nor the large-scale processing of special categories of data. Sensitive information that appears in chat is shared voluntarily by the user in the course of an esoteric consultation the user requested, not collected as SENSORA's core activity. This position is reassessed if the scale or nature of processing materially changes. Data-related inquiries can still be sent to the contact in 1.2 at any time.

Contact details used to sign in: email or phone number.

Date of birth and data the user enters for personalized features.

Mood history, personal readings, natal/numerology results, compatibility reports, and details about friends the user adds to the service.

Private chat messages, complaints, support inquiries, and related session logs.

Palm photos, if the user uses the AI palm-reading feature.

Order and transaction data needed for payment, refunds, accounting, and dispute resolution.

A random device identifier (device ID) used to prevent repeated claiming of the one-time 3 free minutes.

A push token and notification settings, if the user allows push notifications.

Technical data processed by the infrastructure: IP address, country/region, browser and device data, and network/server logs. SENSORA's core database has no dedicated field for storing an IP address, but Vercel receives it at the infrastructure level.

Purpose — Typical legal basis:

Creating and maintaining an account; providing chat, free features, and personalized content — Performance of a contract / providing the feature the user requested.

Payment, refunds, transaction accounting, and resolving payment disputes — Performance of a contract and legal/accounting obligations.

Security, fraud prevention, and preventing repeated use of the free trial — Legitimate interest in protecting the service and users, where permitted by law.

Support, complaints, and quality control — Performance of a contract and legitimate interest in the proper functioning of the service.

Push notifications — User settings/consent and other applicable basis under applicable law.

Web analytics and technical diagnostics — Legitimate interest in stability and understanding of service usage, where permitted by law.

AI palm reading — Performance of the requested feature; separate consent or another specific basis, if required by applicable law.

3.1. If a user voluntarily shares information about health, beliefs, intimate life, or other sensitive matters in chat, SENSORA processes it only to the extent necessary for the requested interaction and in accordance with applicable law. Users should not share excessive sensitive data if it is not needed for the chosen feature.

4.1. A private chat is accessible to the relevant Mentor and to authorized SENSORA administrators, consultants, and support staff, to the extent needed for their work: providing the service, support, handling complaints, security, and quality control.

4.2. Mentors and part of the staff work mainly from Ukraine; some staff may work from Lithuania and other countries. Access is granted by role and only for work purposes.

4.3. For its technical operations, SENSORA relies on the following main providers: Vercel — hosting of the web application and Vercel Web Analytics; Supabase — the database, with the confirmed location of the main database being Ireland, EU; Stripe — payment processing and related payment operations; Anthropic — AI processing of photos for the palm-reading feature.

4.4. Data may also be disclosed to government authorities or other parties where required by law, a court order, or another proper legal basis.

5.1. SENSORA does not use private chats to train artificial intelligence models and does not apply automated moderation to them as a standard feature of the service.

5.2. AI palm reading is a separate feature. The photo is sent to the Anthropic Claude API for one-time processing of that specific request. SENSORA does not retain the uploaded palm photo as a separate user file after this processing is complete.

5.3. Under Anthropic's standard commercial terms, API requests and responses are typically deleted on Anthropic's side within 30 days, except where longer retention is required for legal compliance or safety. For material flagged by safety systems as a potential violation, individual records may be retained longer. Commercial API data is not used by Anthropic to train models by default. SENSORA does not claim to operate under a Zero Data Retention regime.

6.1. Vercel Web Analytics is enabled in production. Under the confirmed configuration, it does not require third-party advertising cookies; to measure sessions, Vercel may create a technical identifier/hash based on the incoming request and store a session identifier for up to 24 hours.

6.2. Independently of Web Analytics, Vercel, as the hosting provider, receives the IP address and may determine the country or region from it, and may process device characteristics and technical logs. SENSORA's core database does not store the IP address in a dedicated field.

7.1. SENSORA generates a random UUID, sensora_device_id, in the browser and stores it in localStorage. When checking eligibility for the free introductory period, this ID is sent to SENSORA's server and recorded in Supabase in the free_trial_usage table together with a record of the free-trial use.

7.2. The current system retains this anti-fraud record with no automatic deletion period, including after account deletion, so that deleting and re-registering an account does not create a new free trial period. The code does not use additional canvas, user-agent, or IP fingerprinting beyond this random UUID.

Category — Current retention approach:

Account, chats, mood history, friends, reports, and related content — for as long as the account is active; deleted during self-service account deletion under the current logic.

Palm photos — SENSORA does not retain it as a separate file after one-time processing; Anthropic's provider-side retention periods, described above, apply there.

Transaction/payment records — may be retained longer after account deletion for tax, accounting, refund, and legal purposes. Under the current logic, records may remain without a user_id, retaining the amount and date.

Device ID / free_trial_usage — retained with no automatic deletion period to prevent repeated free trials, including after account deletion.

Push subscription — deleted together with the account under the current logic.

Vercel Web Analytics session identifier — up to 24 hours, per Vercel Web Analytics' current mechanism.

8.1. SENSORA does not currently have a separate, regular database backup export configured at the application level. The project uses Supabase Free; this does not exclude the provider's own technical logs or service data.

9.1. Account deletion is available to the user as a self-service feature and is carried out at the database level. Under the current logic it deletes the wallet, conversations, friends, mood history, compatibility reports, and push subscriptions; certain transactional and anti-fraud records may remain under the rules of this Policy.

9.2. There is currently no automated export of all personal data or a separate toggle to withdraw each individual consent. Requests for access, export, correction, or deletion can be sent to sensorsoffical@gmail.com. Push notifications can be turned off through the available device/service settings.

10.1. The current application has no module that gives SENSORA the right to use private chats, photos, stories, or other personal materials in advertising. Such materials are not used for marketing based solely on acceptance of the Terms of Use or this Policy.

10.2. If SENSORA introduces such use in the future, it will require a separate, optional opt-in explaining the material, the purpose, and the ability to withdraw consent going forward.

11.1. The Operator is located in Poland; the main Supabase database is in Ireland. At the same time, Mentors and staff from Ukraine, Lithuania, and other countries may have access to data, and Vercel, Stripe, and Anthropic may process data in their own infrastructure regions.

11.2. Where the law requires special safeguards for an international transfer, the Operator applies the appropriate legal mechanism and limits the transfer to what is necessary.

12.1. Depending on where they live and the applicable law, a user may have the right to access their personal data, correct it, delete it, restrict its processing, object to processing, data portability, withdraw consent, and lodge a complaint with a competent authority.

12.2. To fulfill a request, SENSORA may ask for information needed for a proportionate identity check. Withdrawing consent does not make processing carried out before the withdrawal unlawful.

12.3. SENSORA does not sell private chats or other personal materials to advertisers and does not use them to train AI models.

13.1. SENSORA is intended for persons aged 18 and over. If we become aware of an account belonging to a person who does not meet the age requirement, access may be restricted, and the data processed or deleted in accordance with the law.

13.2. SENSORA applies organizational and technical measures to protect data, but no online service can guarantee absolute security.

13.3. This Policy may be updated in connection with changes to features, providers, or legislation. The current version is published at sensora.space/privacy.

13.4. Contact: sensorsoffical@gmail.com. Related documents: sensora.space/terms, sensora.space/cookies, sensora.space/contacts.