Legal

Privacy Policy

Last updated: June 2, 2026

Summary

Privacy by design

Seer's behavioral analytics are anonymous by default: mouse, scroll, and click patterns are not personally identifying on their own. To prevent fraud, classify automated traffic, and recognize returning visitors, we also use device and network signals (including a browser fingerprint and IP address). Contact data (name, email, phone) is collected only when a website visitor voluntarily provides it through the AI chat interface. It is stored securely, used to connect the visitor with the business they engaged with, and never sold or shared with third parties for advertising.

What we collect

Behavioral analytics (anonymous):

Mouse movements (X/Y coordinates, velocity, acceleration)
Scroll events (depth, speed, direction)
Click events (element type, timing, sequence)
Session metadata (session ID, viewport size, timestamp)
Page context (URL path only, no query parameters)
UTM parameters and referrer (the source that brought you to the site)

Device & network signals (for fraud prevention and visitor recognition):

Visitor ID: a device/browser fingerprint (derived from characteristics such as browser, screen, and rendering signals) used to recognize returning visitors and stored in a cookie. It is not random and may persist across sessions; clearing cookies and browser data resets it.
IP address: used to derive approximate city/state for geographic context and to classify traffic as human or automated. It is stored as part of session records and may be associated with other data we hold about a session.

Contact data (voluntary only):

Name, email address, and/or phone number (only when a visitor provides this information through the AI chat interface on a business's website)
When a visitor provides contact data, it may be associated with that visitor's behavioral and device signals so the business can recognize them as a returning shopper across visits. This is how we deliver the recognition service the business has engaged us to provide.
This data is stored securely, isolated per business tenant, and used solely to connect the visitor with that business

What we don't collect

Physical addresses or precise GPS location
Social Security numbers, dates of birth, income, or bank/financial information: we never capture finance-application or payment fields
Form field values or typed input from forms outside our chat interface
Cross-site tracking across unrelated third-party websites
Personal information sold to any third party, ever

Why we collect it

We analyze behavioral patterns to detect emotional states (frustration, confidence, confusion) and deploy real-time AI interventions to improve user experience and conversion rates for our business customers.

Legal basis (GDPR Article 6(1)(f)): Legitimate interest, for behavioral analytics, fraud and bot detection, and recognizing returning visitors. Contact data is processed under contractual necessity (Article 6(1)(b)), to deliver the service the visitor requested.

Data retention

Behavioral & device data: Retained as part of the analytics record. Because this data is used to recognize returning visitors and improve our models, it is not deleted on a fixed schedule, but it is held only in connection with an active business customer.

Contact data (name, email, phone): Retained while the business we collected it for remains an active customer. This includes keeping a record of a shopper whose interest went quiet, so the business can re-engage them if their situation changes later. It is deleted when that business is offboarded, and upon a verified deletion request.

Aggregated analytics: Retained in aggregated, non-identifiable form for model training and platform improvement.

CCPA · California residents

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information.

Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and any third parties it was shared with.

Right to delete: You may request deletion of personal information we hold about you, subject to certain exceptions.

Right to opt-out of sale: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm.

Right to non-discrimination: We will not discriminate against you for exercising any CCPA rights.

To exercise these rights, contact us at privacy@sentientiq.app. We will respond within 45 days as required by law.

GDPR compliance

We aim to align with GDPR principles:

Anonymous by default: Behavioral analytics are not personally identifying unless joined to contact data a visitor voluntarily provides
Data minimization: We collect only what's necessary for fraud prevention, visitor recognition, and the service the business engaged us for
Purpose limitation: Device and contact signals are used to recognize returning shoppers and connect them with the business, never for cross-site advertising or sale
Transparency: Clear documentation of what is collected and why
Security: Encryption in transit and at rest

Data security

✓ All data transmission uses TLS 1.3 encryption
✓ Data stored on encrypted AWS infrastructure
✓ Strict tenant isolation: no cross-customer data access
✓ Role-based access control for our team
✓ Real-time anomaly detection and security monitoring

Your rights

For contact data you have provided, and for the device signals associated with it:

Data deletion: Contact us and we will delete the personal data we hold about you upon verifying your request
Access: Request a copy of personal information we hold about you
Questions: Contact privacy@sentientiq.app

Third-party services

AWS: Infrastructure hosting (encryption at rest)

Cloudflare: CDN and DDoS protection

Anthropic: AI inference for conversation and emotional analysis

Supabase: Database hosting, row-level security enforced, tenant isolation

All third-party processors are bound by data processing agreements.

Contact

For privacy-related questions, data requests, or to exercise your rights:

privacy@sentientiq.app