Privacy Policy

Effective Date: April 5, 2026

Senzor Platforms Inc. ("Senzor", "we", "us", or "our") is committed to protecting the privacy and security of the data entrusted to us. This Privacy Policy outlines our practices regarding the collection, processing, and disclosure of information when you use our observability platform, agents, and APIs (collectively, the "Service").

1. Dual Capacity: Controller & Processor

To comply with global data protection frameworks, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), Senzor operates in two distinct capacities:

  • Data Controller: For the administrative data you provide to create a Senzor account, manage billing, and interact with our support teams.
  • Data Processor: For the operational telemetry data (logs, traces, metrics, RUM data) generated by your applications and transmitted to our ingestion APIs. You, the Customer, remain the Data Controller for this information.

2. Information Collection

A. Account & Administrative Data

When you register, we collect necessary administrative data, including your email address, name, and authentication credentials (secured via Firebase Auth). If you upgrade to a paid tier, your financial information is collected and processed securely by our Merchant of Record, Dodo Payments. Senzor does not store, process, or transmit full credit card numbers on our infrastructure.

B. Operational Telemetry Data

We ingest data generated by your integrated systems. This may include IP addresses, user agents, API performance metrics, server resource utilization, and application logs.

Strict Prohibition: You are contractually prohibited from transmitting Personally Identifiable Information (PII), Protected Health Information (PHI), or Payment Card Industry (PCI) data within your custom telemetry payloads, logs, or traces to the Senzor platform.

3. Utilization of Information

Senzor utilizes collected data strictly for the following purposes:

  • To provision, maintain, and secure the Senzor observability platform.
  • To meter ingestion usage and enforce applicable subscription quotas.
  • To detect, prevent, and mitigate unauthorized access or malicious network activity.
  • To communicate operational alerts, security advisories, and administrative updates.

4. Data Sharing & Subprocessors

Senzor does not sell personal information or telemetry data. We share data solely with vetted, enterprise-grade subprocessors required to deliver the Service. Our primary subprocessors include:

  • Cloud Infrastructure: Core database and compute hosting.
  • Dodo Payments: Merchant of Record for subscription management and global tax compliance.
  • Google Firebase: Identity and access management (IAM).

A complete, up-to-date list of subprocessors is available to Enterprise customers upon request.

5. Data Retention & Lifecycle

Administrative Data: Retained for the duration of your active account lifecycle. Upon account deletion, administrative data is purged within 30 days, excluding data required for legal or tax compliance.

Telemetry Data: Operational telemetry is strictly ephemeral. It is automatically and permanently expunged from our databases on a rolling basis, dictated by your subscription tier's retention policy (3, 15, 30, or 90 days for Starter, Pro, Business, and Enterprise respectively), applied uniformly across all telemetry types. Once the retention window lapses, data is unrecoverable.

6. International Data Transfers

Senzor operates globally. If you reside in the European Economic Area (EEA), the UK, or Switzerland, your data may be transferred to, and processed in, the United States. We ensure such transfers are protected by appropriate safeguards, including the execution of Standard Contractual Clauses (SCCs) as approved by the European Commission.

7. Security Posture

We employ defense-in-depth security methodologies. All telemetry and administrative data is encrypted in transit using TLS 1.3. Database volumes, credentials, and API keys are encrypted at rest using AES-256. Access to production infrastructure is strictly audited and limited to authorized personnel via zero-trust network access controls.

8. Contact & Data Subject Rights

Depending on your jurisdiction, you maintain the right to access, rectify, erase, or restrict the processing of your personal data. To exercise these rights, or to contact our Data Protection Officer (DPO), please email:

privacy@senzor.dev