Privacy Policy
Effective date: November 2, 2026
This policy applies to senthion.app, the Senthion workspace at workspace.senthion.app, and beta-related communications. Senthion is operated by its owner, who is the data controller for these purposes. This policy describes current product behavior; it is not a promise that every deployment uses the same providers.
Information we process
Website and requests: If you request early access or contact us, we process the email address, optional name, locale or topic, and message you provide. Netlify processes form submissions for the marketing site. Hosting and security systems may process technical request data such as IP address, browser details, and timestamps.
Workspace: We process account identifiers and profile details (username, email, display name, role, and password hash); authentication/session and security data; and content you create, including tasks, descriptions, subtasks, saved skills/instructions, metadata, and skill revision history. We do not store imported SKILL.md files as separate uploads: their text is imported into a saved skill. MCP access tokens are displayed once and stored as hashes, along with their names, prefixes, and usage dates. Operational logs may contain event names, error messages, and limited record identifiers; do not include sensitive information in workspace content.
The app does not currently provide general document storage. Do not upload or enter special-category, highly confidential, or other sensitive personal information.
Purposes and legal bases
We use information to provide and secure the site and beta workspace, administer accounts, respond to requests, prevent abuse, troubleshoot errors, and meet legal obligations. Where GDPR applies, the basis is generally performance of the requested service, our legitimate interests in operating and securing it, consent where required, or compliance with legal obligations. You may withdraw consent where processing relies on consent.
AI and integrations
Task AI runs in the browser using Chrome's on-device model when available. If that model is unavailable, and the Gemini fallback is configured, the prompt and task/skill context included to generate a plan are sent from our server to Google Gemini (Google LLC) for processing. Avoid putting sensitive personal information in AI prompts. Google's processing is subject to its applicable terms and privacy documentation. AI is optional; ordinary workspace features do not require it. Remote MCP clients only receive workspace data when you configure and authorize them with an access token; you are responsible for those clients' privacy practices. We use Google Analytics on the marketing site to measure site usage. Google may process online identifiers, device/browser information, and interaction data. Analytics is not used in the workspace.
Service providers and transfers
The marketing site and its contact and early-access forms are hosted/processed by Netlify. The workspace is hosted on a virtual machine; its hosting and related infrastructure providers may process workspace data to operate and secure the service. The application may send AI fallback requests to Google. Providers process information only as needed to provide their services. Provider locations, subprocessors, contractual terms, and international-transfer safeguards depend on the production account and configuration; contact us for current details. Software delivery providers may process deployment data but are not given workspace content by the app.
Cookies, storage, and analytics
The marketing site loads Google Analytics (measurement ID G-LN47X6G26F) only after you opt in through the analytics consent prompt. If enabled, it may use cookies and similar technologies to collect usage information; Google may process online identifiers and device/browser information. You can reject analytics or block/clear cookies in your browser. The workspace uses cookies for the theme, sidebar preference, and authentication/session functionality. These support requested features or security. See the Cookie Notice.
Retention and deletion
Workspace content and account data are kept while the account is active. You can delete your account from Settings; this deletes its database account and associated account-owned records, including tasks, saved skills and their versions, and MCP tokens. If you cannot sign in, contact us to request deletion. We aim to respond to privacy requests within one month, subject to identity verification and applicable law. We retain request correspondence only as long as needed to resolve it and maintain required records.
Security/error logs are retained only as needed to investigate incidents and operate the service; the current self-hosted setup does not define an automated log-retention period. The current deployment configuration documents a persistent database volume but does not itself configure automated backups. If backups are enabled, deleted data may remain in protected backups until their scheduled expiry (target: no more than 30 days), and will not be restored except for disaster recovery. We will update this notice if these arrangements change. Legal or security obligations may require limited additional retention.
Your rights and requests
Subject to applicable law, you may request access to, correction or deletion of your personal data, or restriction of or objection to processing, and may request a portable copy. You can edit account profile details in Settings and delete your account there. For any request, including a request concerning a marketing-site submission, use our contact form and select “Privacy request.” Please identify the account or email involved; do not send passwords or sensitive documents. You may complain to your supervisory data-protection authority.
Children and changes
Senthion is not directed to children under 16, and we do not knowingly invite them to use the beta. We may revise this policy and will post the effective date of the latest version here.
Contact
Data controller: Senthion. Submit privacy requests and questions through the contact form.