Privacy Policy

What we collect

Behavioral analytics (anonymous)

• Mouse movements, scroll events, and click events
• Session metadata (session ID, viewport size, timestamp)
• Page context (URL path only, no query parameters)
• UTM parameters and referrer domain (traffic source)

Device and network signals (fraud prevention and visitor recognition)

• Visitor ID: a device/browser fingerprint used to recognize returning visitors, stored in a cookie. It is not random and may persist across sessions; clearing cookies and browser data resets it.
• IP address: used to derive approximate city/state and to classify sessions as human or automated. It is stored as part of session records.

Contact data (voluntary only)

• Name, email address, and/or phone number, only when a visitor provides them through the AI chat interface on a dealer's website.
• When provided, contact data may be associated with that visitor's behavioral and device signals so the dealership can recognize them as a returning shopper.
• This data is stored securely, isolated per tenant, and used solely to connect the visitor with the dealership they engaged with.

Facebook and Messenger data (only where a dealership connects its Page)

• Some dealerships connect their Facebook Page to SentientIQ so that messages sent to the Page are answered through our platform. When a dealership has done this, we receive from Meta the content of your Messenger conversation with that Page and the profile information Meta provides with it, such as your name and profile picture.
• We use this data only to respond to your inquiry on the dealership's behalf and to keep a record of the conversation for that dealership, the same way we handle a chat on its website.
• We do not use Messenger data for advertising, we do not sell or share it, and we do not combine it with data from other sources except to recognize you as the same shopper across the channels you used to reach that dealership.

What we do not collect

• Physical addresses or precise GPS location
• Social Security numbers, dates of birth, income, or bank/financial information; we never capture finance-application or payment fields
• Form field values or typed input from forms outside our chat interface
• Cross-site tracking across unrelated third-party websites
• We do not sell personal information

Why we collect it

Behavioral data is analyzed to understand visitor experience and to deploy real-time assistance that improves user experience and conversion for our customers. Legal basis under GDPR: legitimate interest (Article 6(1)(f)) for behavioral analytics, fraud and bot detection, and recognizing returning visitors; contractual necessity (Article 6(1)(b)) for contact data, to deliver the service the visitor requested.

Data retention

• Behavioral and device data: retained as part of the analytics record, held only in connection with an active customer.
• Contact data: retained while the dealership we collected it for remains an active customer, including records of shoppers whose interest went quiet so the dealership can re-engage them. Deleted when that dealership is offboarded, and upon a verified deletion request.
• Facebook and Messenger data: kept on the same terms as contact data, while the dealership you messaged remains an active customer, and deleted when that dealership is offboarded or upon a verified deletion request. Removing SentientIQ's access in your Facebook settings stops new messages from reaching us. See Data deletion.
• Aggregated analytics: retained in aggregated, non-identifiable form for platform improvement.

Facebook and Messenger

Where a dealership connects its Facebook Page to SentientIQ, we act as that dealership's service provider for the Page's Messenger conversations. We receive conversation content and the profile information Meta provides with it, use it only to answer inquiries on the dealership's behalf and to keep the dealership's record of the conversation, keep it only while that dealership remains a customer, and delete it on a verified request. We handle this data in accordance with Meta's Platform Terms and Developer Policies. You can remove SentientIQ's access at any time in your Facebook account under Settings & privacy, Settings, Apps and websites; to have data we already hold deleted, follow the steps on our Data deletion page.

CCPA (California residents)

• Right to know: request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purpose, and any third parties it was shared with.
• Right to delete: request deletion of personal information we hold, subject to certain exceptions.
• Right to opt out of sale: we do not sell or share personal information for cross-context behavioral advertising.
• Right to non-discrimination: we will not discriminate against you for exercising any CCPA rights.

To exercise these rights, contact info@sentientiq.app. We respond within 45 days as required by law.

GDPR (European residents)

• Anonymous by default: behavioral analytics are not personally identifying unless joined to contact data a visitor voluntarily provides.
• Data minimization and purpose limitation: we collect only what is necessary, and device and contact signals are used to recognize returning shoppers and connect them with the dealership, never for cross-site advertising or sale.
• Transparency and security: clear documentation of what is collected and why; encryption in transit and at rest.

Data security

• TLS encryption for all data in transit; encrypted storage
• Strict tenant isolation with no cross-customer data access
• Role-based access control and security monitoring

Third-party services

Infrastructure hosting (AWS), CDN and DDoS protection (Cloudflare), AI inference (Anthropic), and database hosting (Supabase). All third-party processors are bound by data processing agreements. Meta Platforms (Facebook and Messenger) is a source of conversation data where a dealership connects its Page; Meta is not our processor, and the only data we send to Meta about you is the dealership's replies to your messages.