Privacy Policy

This privacy policy describes how Sensomedia (hereinafter “we”) collects and processes the personal data of visitors to and customers of the sensomcp.com website, in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Article 1 — Data controller

The data controller is Sensomedia, publisher of the sensomcp.com website and the Senso MCP extensions. Its full contact details are provided in the website’s legal notice.

Contact for any questions relating to personal data: This email address is being protected from spambots. You need JavaScript enabled to view it.

Article 2 — Data we collect

Depending on how you use the website, we may collect:

• Account data: name, email address, login details and, where applicable, company details and contact information, created when you make your first purchase.
• Order and billing data: products or services ordered, amounts, billing address and order history.
• Payment data: processed directly by our payment service provider. We do not collect or retain your bank details.
• Licence data: the website domain or domains you declare to associate with your licences (Download ID), in order to authorise downloads and updates.
• Support data: the content of tickets and correspondence you send to us.
• Technical and browsing data: IP address, browser type, pages viewed and connection logs, for operational, security and audience measurement purposes (see Article 6).

Article 3 — Purposes and legal bases

• Managing your account, orders and licences — legal basis: performance of the contract (Article 6(1)(b) of the GDPR).
• Issuing and retaining invoices — legal basis: legal obligation (Article 6(1)(c)).
• Providing support — legal basis: performance of the contract and legitimate interest.
• Ensuring website security and preventing fraud — legal basis: legitimate interest (Article 6(1)(f)).
• Measuring website traffic — legal basis: legitimate interest (Article 6(1)(f)), under the consent exemption conditions established by the CNIL (see Article 6), with the right to object at any time.
• Sending you information where applicable — legal basis: your consent (Article 6(1)(a)), which may be withdrawn at any time.

Article 4 — Recipients and processors

Your data is intended for our internal teams responsible for order management and support. It may be disclosed to processors acting on our behalf and on our instructions, including:

• the payment service provider: Systempay, BPCE Payment Services’ online payment solution (BPCE Group), which alone processes your bank details on its secure platform;
• the provider hosting the website and audience measurement tool: OVHcloud (OVH SAS, Roubaix, France), on servers located in France and administered by Sensomedia;
• emails (order confirmations, invoices and support replies) are sent through our own email server, hosted by OVHcloud, and support is provided through a ticketing tool integrated into the website. No third-party provider is involved in these exchanges.

These processors are contractually required to guarantee a level of protection compliant with the GDPR. We do not sell or rent your personal data to third parties.

A community discussion space is available on Discord. Its use is optional and is governed by Discord’s privacy policy.

Article 5 — Retention periods

• Account data: for the duration of the relationship, then for up to three (3) years after the last contact, unless you request earlier deletion.
• Invoices and accounting records: ten (10) years, in accordance with the French Commercial Code.
• Support tickets: for the duration of the relationship, then archived for as long as necessary to handle any potential claims.
• Server technical logs (web access, email): seven (7) days, for security and diagnostic purposes.
• Logs of connections to your account and order steps: no more than thirty (30) days.
• Audience measurement data: raw visit data retained for four (4) months, then only in the form of aggregated statistics; opt-out cookie retained for no more than thirteen (13) months.

Article 6 — Cookies, trackers and audience measurement

The website uses cookies that are strictly necessary for its operation (session, basket and security), which do not require your consent. It does not set any advertising cookies or use any third-party trackers.

To measure its audience, the website uses Matomo, open-source software that we host ourselves on our servers in France. No data is sent to any third party. This measurement is configured in accordance with the CNIL’s recommendations so that it is exempt from the consent requirement: it is used solely to produce anonymous statistics about website traffic and use of the shop (pages viewed, products viewed, baskets and orders); it does not set any cookie or use any tracking script; your IP address is truncated before any recording; it does not allow us to track you across other websites or identify you; raw visit data is deleted after four (4) months. Your browser’s “Do Not Track” setting is respected.

You may object to this audience measurement at any time using the module below. Your choice is remembered by a cookie placed on your browser for no more than thirteen (13) months, whose sole purpose is to record your choice.

Article 7 — Transfers outside the European Union

Your data is hosted and processed within the European Union. If one of our processors were to process data outside the European Union, the transfer would be governed by the appropriate safeguards provided for by the GDPR, in particular the European Commission’s standard contractual clauses.

Article 8 — Data security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration (encryption of communications, access controls, backups and security updates).

Article 9 — Your rights

Under the GDPR, you have the following rights in relation to your data:

• the right of access and information;
• the right to rectification;
• the right to erasure (“the right to be forgotten”), subject to statutory retention obligations;
• the right to restriction of processing;
• the right to object, particularly to direct marketing;
• the right to data portability;
• the right to withdraw your consent at any time, for processing activities that rely on it;
• the right to set instructions regarding what happens to your data after your death.

Article 10 — Exercising your rights and making a complaint

To exercise your rights, contact us at the address given in Article 1, providing proof of your identity where necessary. We will respond within the time limits prescribed by applicable regulations.

If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the CNIL — Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy, 75007 Paris, www.cnil.fr.

Article 11 — The Senso MCP extensions and your website data

The Senso MCP extensions are installed and run on your own Joomla website, on your hosting. The MCP server operates within your installation: we do not access your website’s content or data through the extensions.

For commercial purposes, only the domain you declare is sent to us, in order to control the downloads and updates associated with your licence. The processing of data carried out by your AI assistant and by the extensions within your website is your own responsibility as data controller, in your capacity as the controller of your website.

Article 12 — Changes to this policy

We may update this policy to reflect changes in the law or in our services. The applicable version is the one published on the website; we encourage you to consult it regularly.

Article 13 — Contact

For any questions relating to this policy or the processing of your personal data, contact us at the address given in Article 1 or through your customer area.