Privacy Policy

Sensra is operated by Wali Ahmed, an individual operating Sensra as a sole proprietor, based in Montréal, Québec, Canada. Wali Ahmed, as the operator, is the person in charge of the protection of personal information. Contact: hello@sensra.io.

• Account details: your name, email address and password (stored only as a secure hash by our sign-in provider).
• Workspace information: workspace names, members, roles and invitations.
• Your content: files you upload and their versions, annotations, comments, review decisions and the results of AI summaries or text recognition you request.
• Guest reviewers: the name a guest types when opening a review link, and their comments. Guest names aren't verified.
• Support requests: your subject, description, replies, contact details, optional workspace references and request history. Authorized Sensra support administrators can read requests and add private triage notes. Other workspace members cannot read your tickets automatically.
• Billing information: your plan, subscription status and Stripe customer identifiers. Payment card details are handled by Stripe.
• Technical and security information: sign-in session data, usage counts for plan limits, and security logs such as IP addresses and request times. Our logs are designed not to contain your document contents.

We use this information to provide Sensra: to store and show your files to the people you share them with, run the features you request, send account and billing emails, enforce plan limits, prevent abuse, keep the service secure and answer support requests. We don't use your content for advertising and we don't use it to train AI models. We don't send marketing emails without your consent.

Files are private by default. Only members of the workspace, according to their role, and guests holding a review link you created can open them. A review link can be limited to viewing or commenting, set to expire and revoked at any time. When a link is revoked, file links already issued to that guest stop working within about a minute, and copies a guest already downloaded can't be recalled.

We use these providers to run Sensra. Each one processes data on our behalf, only to provide its part of the service.

Your account data, database and files are stored in the United States (Oregon), and the Sensra application runs there too. Some providers, such as Stripe, OpenAI and Mistral AI, may process data in other countries. Information stored outside Québec and Canada is subject to the laws of those places. Each provider is bound by its agreement with us to protect the information it processes and to use it only to provide its service.

• Files and comments are kept until you or a workspace owner delete them. Deleted files disappear from Sensra right away and are permanently removed from storage after a safety period of about seven days.
• AI summaries and text recognition results are kept for up to 30 days after they're last used, then deleted.
• Accounts: you can ask to delete your account in your account settings. We complete deletion within 30 days. Comments you left in other people's workspaces stay, shown as from a former member, so their review history stays intact.
• Notifications are deleted 90 days after you read them, and after 180 days at most.
• Support history is kept while your account remains active or until 180 days after a ticket is closed. Unverified public support intake is removed after 30 days. Final account deletion also removes your authenticated ticket history. Automated retention requires the scheduled cleanup service; operators handle cleanup if it is unavailable.
• Billing records are kept as long as tax and accounting laws require.
• Backups made by our database provider are overwritten on a rolling basis, within about a week.

Data is encrypted in transit with HTTPS and stored encrypted at rest by our hosting providers. Access is checked on every request against your workspace role or review link, file downloads use short-lived links, and the database enforces access rules so one workspace can't read another's data. No system is perfectly secure; if a breach affecting your personal information creates a risk of serious harm, we'll notify you and the authorities as the law requires.

Sensra uses only the cookies it needs to keep you signed in and to keep guest review sessions working. A random, protected browser cookie helps prevent repeated Help Center article votes; feedback stores a keyed digest rather than your identity. Your theme choice (light or dark) is saved in your browser. We don't use advertising or analytics trackers.

You can ask to access, correct or delete your personal information, ask how it's used, or withdraw consent where we rely on it. You can change your name and email and delete your account directly in your account settings. For anything else, email hello@sensra.io. We'll confirm your identity before acting and reply within 30 days.

If you're not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

If we change this policy in a meaningful way, we'll update the date at the top and tell you by email or in the app before the change applies.