Privacy Policy

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contract Performance — processing necessary to provide you with the Service you signed up for (account management, AI companion interactions, billing).
• Legitimate Interests — fraud prevention, security monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent — analytics cookies and optional marketing communications, which you can withdraw at any time.
• Legal Obligation — where we are required to process data to comply with applicable law.

• To provide, maintain, and improve our services
• To process transactions and send billing-related communications
• To personalize your experience and AI companion interactions
• To detect, prevent, and address fraud, abuse, or technical issues
• To comply with legal obligations
• To send service-related announcements (you can opt out of non-essential emails)

We do not sell your personal information. We may share data only in the following circumstances:

• Service Providers — trusted third parties that help us operate the platform (hosting, payment processing, analytics), bound by data processing agreements.
• Legal Requirements — when required by law, regulation, or valid legal process.
• Safety — to protect the rights, safety, or property of Sensax, our users, or the public.
• Business Transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users.

Our servers are located in the United States. If you access Sensax from outside the U.S., your data will be transferred to and processed in the U.S.

For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms, to ensure your data receives an adequate level of protection.

We retain your account data and conversation history for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized, aggregated data may be retained indefinitely for analytics.

Device and connection signals (hashed IP address, country, user-agent, preferred language, and device fingerprint) are retained for up to 24 months from the last time we observed them, after which they are automatically deleted.

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

• Right of Access — request a copy of the personal data we hold about you.
• Right to Rectification — request correction of inaccurate or incomplete data.
• Right to Erasure— request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing — request that we limit how we use your data.
• Right to Data Portability — receive your data in a structured, machine-readable format.
• Right to Object — object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent — withdraw consent at any time for processing based on consent, without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint — file a complaint with your local data protection authority (e.g., the ICO in the UK, CNIL in France, or the relevant supervisory authority in your country).

We will respond to all GDPR requests within 30 days. Contact us at privacy@chatsensax.com to exercise any of these rights.

If you are a resident of California or another U.S. state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others), you have the following rights:

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the third parties with whom we share it.
• Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing — we do not sell your personal information and do not share it for cross-context behavioral advertising. No opt-out is needed, but you may contact us to confirm.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

We use the following types of cookies:

• Essential Cookies — required for login, session management, and age verification. These cannot be disabled.
• Analytics Cookies — we use PostHog to understand how users interact with our platform. These are only loaded after you provide consent via our cookie banner.

You can manage your cookie preferences at any time using the cookie consent banner or by contacting us.

Sensax requires users to meet the minimum age requirement in their jurisdiction (13 years or older). We do not knowingly collect information from anyone under the applicable minimum age. If we discover that a user below the minimum age has created an account, we will terminate it and delete associated data immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the platform or sending an email. Continued use after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: