Legal
Senova Privacy Notice
Last updated 8 November 2026
This notice covers Senova's chat, developer API and console, run by Senova Systems LLC (New Jersey, USA). The short version: we keep what we need to run your account, your chats until you delete them, and usage for billing; your prompts go to a model provider only to produce the reply; we don't sell your data, use it for ads, or train models on it. The website's own Privacy Policy covers the rest of senovasys.com.
1. What we collect and why
| Data | Why | Kept for |
|---|---|---|
| Account: name, email, password hash, Google account id if you use Google, two-factor secret, terms version and acceptance time | Run your account and keep it secure | Until you delete your account |
| Sessions: IP address, browser, times | Keep you signed in; show your devices; security | Expire after 7 days of inactivity; deleted a day later |
| Organizations, members, roles, invitations | Teams and permissions | Until the organization or account is deleted |
| Chats: your messages, replies and files you attach | Show your history; give the model context | Until you delete the chat or your account; unattached uploads after 1 day |
| Usage: model, tokens, time, API key used, cost | Limits, billing, abuse prevention, statistics | As long as needed for billing, tax and legal duties |
| API request logs (only if your organization turns them on) | Debugging for your developers | 1 to 30 days, as your organization sets |
| Plan and API credit: your assigned plan, credit balance and its movements (we don't take payments yet) | Limits and accounting | As long as needed for accounting and legal duties |
| Security and audit records: sign-ins, setting and permission changes, staff actions, with IP | Security, fraud prevention, accountability | Kept for security; reviewed periodically |
| Emails we send you (verification, reset, invitations, billing notices) | Deliver them and retry failures | Message text removed once sent; record kept 30 days |
| Webhook delivery records and API keys (prefix and a one-way hash only) | Run the developer features | Deliveries 30 days; keys until deleted with the organization |
| Feedback and bug reports you send (see below) | Fix problems and improve Senova, and reply to you | Until you delete them; 18 months after we close them; screenshots 90 days after |
2. AI processing
When you chat or call the API, your message, the recent conversation and any attached files are sent to the model provider serving that model (see subprocessors) to generate the reply. We don't use your content to train models, and we choose providers whose API terms say they don't either. Staff can see usage totals but not your chat content, except when you share it with us for support or when the law requires.
3. Feedback, bug reports and suggestions
When you rate a reply, report a bug or send a suggestion, we keep what you write (and any reasons you pick), up to three screenshots if you add them, and some details about where you were: the page address without anything after it, the part of the app, your browser's name and version, the app version and, for a reply, the Senova model name. We re-save screenshots when they arrive, which removes their location and camera details, so crop out anything private first.
The conversation is shared only if you tick “Include this conversation”, which is off unless you turn it on. Then our staff can read the recent messages of that chat (up to the reply you rated, if you rated one) for as long as the chat exists; we don't make a copy, so deleting the chat ends their access. Each time staff open a shared conversation, it's recorded.
We use your report to find and fix problems, decide what to improve and reply to you. Only Senova staff see it, through accounts protected by two-factor sign-in; it isn't sent to an AI model or anyone else. When we reply, you see our message in Settings → My reports, and we may also email it to you. The email has our reply and a link, not your report.
You can delete any of your reports, with its screenshots, at any time in Settings → My reports, or email hello
6. Your choices and rights
Download your data from Account → Your data, delete chats at any time, and delete your account in Account settings. Depending on where you live (for example California and other US states, the EU or the UK) you may also have rights to correct data, object to or restrict processing, and complain to a regulator. Email hello
7. Security, age and changes
Data is encrypted in transit; access is limited by role and enforced in the database; passwords and API keys are stored as one-way hashes. The Services are for people 18 and over. Data is stored in the United States. We'll tell you about material changes to this notice before they take effect.
Questions? Email hello