--- title: "Privacy Policy" url: "https://www.sensomcp.com/en/privacy-policy" lang: "en-GB" description: "Senso MCP Privacy Policy: data collected, purposes and legal bases, processors, retention periods, cookies and your GDPR rights." category: "Legal" author: "Fred Oliver" published: "2026-09-11T06:27:51+00:00" modified: "2026-10-11T12:16:13+00:00" --- # Privacy Policy This privacy policy describes how Sensomedia (hereinafter “we”) collects and processes the personal data of visitors to and customers of sensomcp.com, in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. ## Article 1 — Data controller The data controller is Sensomedia, publisher of the sensomcp.com website and the Senso MCP extensions. Its full contact details are provided in the website’s legal notices. Contact for any questions relating to personal data: This email address is being protected from spambots. You need JavaScript enabled to view it. ## Article 2 — Data we collect Depending on how you use the website, we may collect: - **Account data**: name, email address, login credentials, and, where applicable, company details and contact information, created when you make your first purchase. - **Order and billing data**: products and services ordered, amounts, billing address, order history. - **Payment data**: processed directly by our payment service provider. We do not collect or retain your banking details. - **License data**: the domain or domains you declare in order to associate your licenses (Download ID), and thereby authorize downloads and gated updates. - **Support data**: the content of tickets and correspondence you send us. - **Technical and browsing data**: IP address, browser type, pages viewed, connection logs, for operational and security purposes and to measure site traffic (see Article 6). ## Article 3 — Purposes and legal bases - **Manage your account, orders and licenses** — legal basis: performance of the contract (Article 6.1(b) of the GDPR). - **Issue and retain invoices** — legal basis: legal obligation (Article 6.1(c)). - **Provide support** — legal basis: performance of the contract and legitimate interest. - **Ensure website security and prevent fraud** — legal basis: legitimate interest (Article 6.1(f)). - **Measure website traffic** — legal basis: legitimate interest (Article 6.1(f)), under the consent exemption conditions established by the CNIL (see Article 6), with the right to object at any time. - **Where applicable, send you information** — legal basis: your consent (Article 6.1(a)), which may be withdrawn at any time. ## Article 4 — Recipients and processors Your data is intended for our internal departments responsible for order management and support. It may be disclosed to processors acting on our behalf and on our instructions, including: - the payment service provider: **Systempay**, BPCE Payment Services’ online payment solution (BPCE Group), which alone processes your banking details on its secure platform; - the hosting provider for the website and traffic measurement tool: **OVHcloud** (OVH SAS, Roubaix, France), on servers located in France and administered by Sensomedia; - emails (order confirmations, invoices and support replies) are sent through our own mail server, hosted by OVHcloud, and support is provided through a ticketing tool integrated into the website. No third-party provider is involved in these exchanges. These processors are contractually required to guarantee a level of protection compliant with the GDPR. We do not sell or rent your personal data to third parties. A community discussion space is available on Discord. Its use is optional and is governed by Discord’s privacy policy. ## Article 5 — Data retention periods - **Account data**: for the entire duration of the relationship, then for up to three (3) years after the last contact, unless you request earlier deletion. - **Invoices and accounting records**: ten (10) years, in accordance with the French Commercial Code. - **Support tickets**: for the duration of the relationship, then archived for as long as necessary to handle any potential claims. - **Server technical logs** (web access and email): seven (7) days, for security and diagnostic purposes. - **Log of connections to your account and order steps**: no more than thirty (30) days. - **Traffic measurement data**: raw visit data retained for four (4) months, then only in the form of aggregated statistics; opt-out cookie retained for no more than thirteen (13) months. ## Article 6 — Cookies, trackers and traffic measurement The website uses cookies that are strictly necessary for its operation (session, shopping cart and security), which do not require your consent. It does not place any advertising cookies or third-party trackers. To measure website traffic, the website uses **Matomo**, open-source software that we host ourselves on our servers in France. No data is transmitted to any third party. This measurement is configured in accordance with the CNIL’s recommendations so that it is exempt from the consent requirement: it is used solely to produce anonymous statistics on website traffic and use of the online store (pages viewed, products consulted, shopping carts and orders); it does not place any cookies and does not use any tracking script; your IP address is truncated before any recording; it cannot be used to track you across other websites or identify you; raw visit data is deleted after four (4) months. Your browser’s “Do Not Track” setting is respected. You may object to this traffic measurement at any time using the module below. Your choice is remembered by a cookie placed in your browser for no more than thirteen (13) months, whose sole purpose is to record that choice. You may choose to prevent this website from aggregating and analysing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users. ## Article 7 — Transfers outside the European Union Your data is hosted and processed within the European Union. If one of our processors were to process data outside the European Union, the transfer would be governed by the appropriate safeguards provided for by the GDPR, including the European Commission’s Standard Contractual Clauses. ## Article 8 — Data security We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure or alteration (encrypted communications, access controls, backups and security updates). ## Article 9 — Your rights Under the GDPR, you have the following rights regarding your data: - the right of access and information; - the right to rectification; - the right to erasure (“the right to be forgotten”), subject to statutory data retention obligations; - the right to restriction of processing; - the right to object, particularly to direct marketing; - the right to data portability; - the right to withdraw your consent at any time, for processing activities that rely on it; - the right to define instructions concerning what happens to your data after your death. ## Article 10 — Exercising your rights and complaints To exercise your rights, contact us at the address specified in Article 1, providing proof of your identity where necessary. We will respond within the time limits required by applicable regulations. If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the CNIL — Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy, 75007 Paris, www.cnil.fr. ## Article 11 — The Senso MCP extensions and your website data The Senso MCP extensions are installed and run on **your own Joomla website**, on your hosting service. The MCP server operates within your installation: we do not access your website’s content or data through the extensions. For commercial purposes, only the **domain you declare** is transmitted to us, in order to control the downloads and gated updates associated with your license. The processing of data carried out by your AI assistant and by the extensions within your website is your own responsibility as data controller, in your capacity as the person responsible for your website. ## Article 12 — Changes to this policy We may update this policy to reflect changes in the law or in our services. The applicable version is the one published on the website; we encourage you to review it regularly. ## Article 13 — Contact For any questions concerning this policy or the processing of your personal data, contact us at the address specified in Article 1 or through your customer area.