Sencivo privacy policy

What we collect in Sencivo

• Your account details: the email address and name you sign in with.
• Your onboarding answers and the voice, topics, and preferences Sencivo learns from them, plus the drafts, posts, and notes you create in your workspace.
• If you leave “Learn from my edits” on (it is on by default), Sencivo keeps the text it generated next to the version you approved, so it can learn style preferences from your edits. You can turn this off in Settings, Brand & Voice, which also deletes the style notes and draft comparisons learned so far.
• LinkedIn data you choose to connect or import, such as your own posts and profile details, so Sencivo can learn your voice and publish what you approve.
• Access-request form data: if you request an invite on sencivo.com, we store your name, email, and whatever you choose to add (LinkedIn profile URL, role and company, what you want help with), plus a hashed form of your IP address and your browser’s user agent to limit abuse. We use it to decide on and send invites, and to email you about Sencivo access. You can ask us to delete it at any time.

Who processes your data

We use a small set of service providers to run Sencivo. They process data only to provide their service to us:

• Anthropic, to generate and analyse text with AI (your content is sent to it when you use AI features). By default Sencivo uses your own Anthropic API key, which we store encrypted and use only to make those requests on your behalf; Anthropic bills the usage to your account. Some workspaces are granted access to Sencivo’s own key instead.
• Resend, to send email such as sign-in links, invites, and notices.
• Vercel and Railway, for hosting the website, application, and database. Vercel also provides the page analytics described under “Monitoring, analytics and AI tracing” below.
• PostHog Inc., for product and website analytics and masked session recordings. We use PostHog’s EU Cloud, hosted in Frankfurt, Germany. See “Cookies and similar technologies” below for exactly what it receives.
• Google, if you choose to sign in with Google.

We don’t sell your data and we don’t use it for advertising.

Monitoring, analytics and AI tracing

To keep Sencivo working and to understand what it costs to run, we use the monitoring and analytics tools below. Two of them we run ourselves.

• AI request tracing (Langfuse). Langfuse is open-source software that we run ourselves on our own Railway infrastructure, so no other company receives this data. When an AI feature runs, it records the text we send to the AI provider and the answer that comes back, so we can fix problems and see what each feature costs. Email addresses and phone numbers in that text are masked before it is stored, but other text you write, such as names or the content of a draft, can appear in it. Each trace is tied to a pseudonymous user id (a scrambled, one-way code made from your email address), never to the address itself. A daily clean-up job deletes traces once they are older than 90 days.
• Error reports (GlitchTip). GlitchTip is also self-hosted. When Sencivo hits an error, it sends us a report with the technical details: what went wrong, which page or request, and the browser type. We set it up not to attach IP addresses, cookies or user profiles. Error reports are kept for 90 days.
• Page analytics (Vercel Web Analytics and Speed Insights). These count visits to sencivo.com and measure how fast pages load. They use no cookies, do not track you across other websites, and report aggregated page statistics only. Vercel Inc. provides them.
• Product analytics (PostHog). PostHog Inc. (EU Cloud, hosted in Frankfurt) helps us see which parts of Sencivo are used and where people get stuck. It records named events such as “draft created” or “sign-in started”, page views, and, only if you accept, masked session recordings. Events carry codes and counts only. They never include what you write, your prompts, drafts, email address, name or API keys. Details are under “Cookies and similar technologies” below.

Cookies and similar technologies

Here is exactly what Sencivo stores in your browser and when.

• Always, because the service needs it: a sign-in session cookie (set when you sign in), a language preference cookie, and the spam-protection check (Cloudflare Turnstile) on the sign-in and access-request forms. We also keep your analytics choice itself (sencivo_consent) and a few interface preferences, such as your active workspace, in your browser’s local storage. None of these is used for analytics or advertising.
• Only if you accept analytics: PostHog stores a cookie and a local storage entry (named ph_ followed by our project key and _posthog) holding a random anonymous id and session id, kept for up to one year. After you sign in it is linked to your Sencivo user id (a random identifier, not your email address) and your workspace id, plus a yes/no flag saying whether you are on our own team. We also record masked sessions: every piece of text and everything you type is hidden before it leaves your browser, and images are blocked, so what you write is never recorded. Page addresses are sent without query strings.
• If you decline, or have not chosen yet: on our public pages we measure visits and interactions, such as button clicks, form submissions and errors (for example a failed spam check), without cookies and without storing an identifier in your browser, and accepting cookies enables fuller analytics. To get a daily visitor count, PostHog uses your IP address and browser details only to compute a number that rotates every day, and does not keep the IP address with the event. Declining stores no analytics identifier and records no sessions; only a small marker remembering your choice stays in your browser. Inside the signed-in app nothing is sent to PostHog from your browser. If you accept and later decline, the fuller analytics stop at once.
• Our servers also send PostHog a small number of outcome events, such as “post published”, tied to your workspace id. They contain no content and no IP-based location.

You choose with the banner shown on your first visit, and you can change your mind at any time with the Cookie settings link in the site footer or the account menu. Vercel Web Analytics and Speed Insights use no cookies and need no consent.

What the extension reads

• The LinkedIn pages you have open — posts, comments, and your own profile feed — so it can suggest comments and post ideas in your voice, right where you're already reading.
• Your own posts on your own LinkedIn profile, when you choose to import them, so they can be added to your workspace as source material.
• A LinkedIn session cookie, only to keep your Sencivo panel session signed in across the extension and the site — never your LinkedIn password or LinkedIn account credentials, which the extension never sees.
• The names and headlines shown on the posts you have open, because they are part of the post — kept with the saved post so you know whose idea you are responding to. Nothing is looked up beyond what the page already shows you.
• Replies and comments on your own posts, when you use Triage replies, so it can suggest responses.
• Your reposts and your own comments, from your own LinkedIn activity pages (Posts and Comments tabs), when you have one open. For each repost, Sencivo stores the reposted post’s text (written by the original author, not you), the original author’s name, the post link when LinkedIn shows one, and the date label on the card. For each comment, it stores your comment text, the name of the author of the post you commented on, the link to that post, and the date label.
• Only if you connect Substack yourself: your Substack session cookie, which is sent to your Sencivo workspace and stored there so Sencivo can create draft newsletter posts for you. Nothing is ever published for you, you choose whether to connect, and you can disconnect at any time.

Where it goes

Everything the extension reads or drafts is sent to your own Sencivo workspace over an encrypted HTTPS connection. It is not sent anywhere else, and no other Sencivo workspace can see it.

What we don’t do

• We don’t read other people’s profiles beyond what LinkedIn already shows on the page you have open.
• We don’t sell your data, and we don’t share it with third parties.
• We don’t use your data for ads, and there are no ads in Sencivo.
• We don’t read your LinkedIn messages or any private conversation — the extension has no access to your inbox.
• The extension never posts, comments, or takes any action on LinkedIn on its own — every send is something you click.

Data retention

Content the extension captures stays in your Sencivo workspace until you delete it. Deleting a saved item or draft removes it from your workspace. Reposts and comments (see above) have no delete button yet: they stay until the workspace itself is deleted, and you can ask us to delete them sooner at any time.

Your rights (UK GDPR)

Under the UK GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to object to or restrict how we use it, and to receive it in a portable format. To exercise any of these, email support@sencivo.com. We’ll respond within one month.

If you’re unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We’d appreciate the chance to put it right first.

If you are located in the United Arab Emirates, you also have rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), including access, correction and deletion of your personal data; contact support@sencivo.com to exercise them.

International transfers

Your data is processed in the United Kingdom, the European Union, and the United States by the processors listed above. Where data leaves your country we rely on appropriate safeguards, such as the processors’ contractual data-protection terms.

Questions

Email support@sencivo.com with anything about this policy or your data.