Privacy Policy

1. Introduction

Pensorix ("Pensorix", "we", "us", or "our") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use our platform, website, and related services (the "Service").

2. Roles and Responsibilities

Pensorix acts in different roles depending on the type of data:

• •For account, billing, and usage data, Pensorix acts as a data controller.
• •For Customer Data processed through the Service, Pensorix acts as a data processor on behalf of the customer. The customer is the data controller and is responsible for determining the purposes and legality of processing such data.

3. Information We Collect

4. How We Use Information

We use personal data to:

• •Provide and operate the Service
• •Authenticate users
• •Process payments
• •Improve functionality and performance
• •Provide customer support
• •Ensure security and prevent fraud
• •Comply with legal obligations

We do not use Customer Data for purposes unrelated to providing the Service.

5. Data Access and Use of Customer Data

Pensorix accesses and processes Customer Data only as necessary to provide, maintain, and improve the Service.

• •We do not access Customer Data for independent analysis, marketing, or resale.
• •Pensorix does not use Customer Data to train generalized machine learning or AI models.

6. Data Sharing

We may share personal data with:

• •Service providers acting as sub-processors: Twilio/SendGrid (email delivery, USA), PayPal (subscription billing, USA), Amazon Web Services (cloud infrastructure and secrets management, USA)
• •Legal authorities where required by law
• •Affiliates under common control

Sub-processors are authorized to process personal data only as necessary to provide services to Pensorix. We do not sell personal data. A full sub-processor list is available at pensorix.com/sub-processors.

7. Data Security

Pensorix implements appropriate technical and organizational measures designed to protect personal data.

These measures may include encryption in transit, access controls, and system monitoring. However, no system can be guaranteed to be completely secure.

8. Data Retention

We retain personal data for the following periods:

• •Account data (name, email, company): retained for the lifetime of the account and deleted within 30 days of an erasure request or account closure
• •Analysis results (schema, CLV, cohort data): retained while the account is active and deleted within 30 days of account deletion
• •Password reset tokens: automatically expire after 20 minutes
• •Rate-limiting data (IP addresses): automatically expire after 15 minutes
• •Application logs (may contain IP addresses and email addresses): retained for 30 days on a rolling basis
• •Billing records (PayPal subscription identifiers): may be retained longer where required by applicable financial regulations

Customer Data is retained according to customer instructions and applicable agreements. Upon termination, Customer Data is deleted or anonymized within 30 days unless retention is required by law.

9. International Transfers

Data may be processed in countries outside your jurisdiction, including through cloud infrastructure providers. Where required, Pensorix implements appropriate safeguards such as standard contractual clauses.

10. Your Rights

Depending on applicable law, you may have the right to:

• •Access your personal data
• •Correct inaccuracies
• •Request deletion (right to erasure)
• •Restrict processing
• •Object to processing
• •Request data portability

You can exercise your right to data portability and erasure directly in your account Settings. For other requests, contact us at privacy@pensorix.com. We will respond within 30 days.

11. Cookies and Tracking

Pensorix uses cookies and similar technologies to operate and improve the Service, including analytics and performance monitoring.

Users may manage cookie preferences through their browser settings.

12. Children's Privacy

The Service is not intended for individuals under 18 years of age.

13. Third-Party Links

The Service may contain links to third-party websites. Pensorix is not responsible for the privacy practices of such websites.

14. Changes to this Policy

Pensorix may update this Privacy Policy from time to time. Updates will be posted at https://pensorix.com with a revised effective date.