Privacy Policy

The owner of the Senbi service acts as the data operator. All data-related requests can be sent through the “Contacts” section of senbi.org or to the channels listed there.

This Policy applies to senbi.org, its subdomains and all Senbi products: CRM, the first-line AI agent, the online store builder, and related development and support services.

We only collect the minimum data required to contact you, fulfill the agreement, and operate the services:

• Contact details you submit in forms: name, phone, e-mail, messenger, company name, request text.
• Account data and the data of employees you add to the CRM (full name, role, contacts, login).
• Customer and request data you enter or that arrives via connected channels (website, messengers, forms, telephony, AI agent).
• Conversation content processed by the AI agent and your team, including dialog history and attachments.
• Technical data: IP address, device and browser type, OS, language, referrers, in-app actions, cookies and similar tags.
• Payment data: amounts, periods, statuses, legal-entity details. We do not store bank-card details — payments go through payment providers.

We use data only for clear, declared purposes:

• Communicating about your requests, agreeing terms, issuing invoices, and signing documents.
• Providing and supporting the Senbi services: CRM, AI agent, online store, and related modules.
• Processing your customers’ requests in connected channels via the AI agent and your team.
• Analytics on service usage, detecting and fixing errors, improving interfaces and models.
• Notifying you about important updates, pricing or terms changes.
• Complying with the laws of the Republic of Kazakhstan and signed agreements.

We process data on the following grounds:

• Your consent, expressed when submitting a form, signing up, or starting to use the services.
• An agreement or public offer whose performance requires data processing.
• Senbi’s legitimate interests: anti-fraud, security and reliability of services, dispute resolution.
• Direct requirements of the laws of the Republic of Kazakhstan.

Retention depends on data type and purpose, but in general it is limited and never exceeds what is reasonably necessary.

• Data from requests, conversations and messages submitted via forms, messengers, the AI agent and CRM is stored for no longer than 6 (six) months from the last interaction, unless law, contract or your explicit request requires longer.
• Data of active agreements and related records is kept for the entire term of the agreement and within the periods set by accounting, tax and archival regulations.
• Technical logs needed for security and incident investigation are kept in anonymized or aggregated form for the period reasonably necessary for those purposes.
• Cookies and analytics tags are stored according to your browser settings and the policies of those systems.
• After the retention period, data is deleted or anonymized. If a client asks in writing to keep their data longer for operational needs, we continue to process it as a technical processor.

We do not sell personal data and do not share it with third parties for marketing.

Sharing is only possible in the following cases:

• Subcontractors and services that power Senbi (hosting, cloud infrastructure, telephony, messengers, AI model providers, payment systems, analytics and email tools) — to the extent necessary to provide the services.
• Authorities of the Republic of Kazakhstan and other jurisdictions — upon lawful and reasoned requests.
• In case of reorganization, sale or merger — to Senbi’s successor while preserving the terms of this Policy.
• With your separate consent — to other parties expressly named in such consent.

We work with subcontractors on terms aimed at maintaining a comparable level of data protection.

The Senbi AI agent processes customer messages to answer questions, qualify leads and hand over to humans. To do that, message content and dialog context may be sent to external model providers.

We do not use the content of your customer conversations to train public models without separate consent. We may use anonymized and aggregated data to improve the service.

The Senbi site and services use cookies and similar technologies for authentication, settings, traffic measurement and UI improvements.

You may disable cookies in your browser; in that case some site features may not work properly.

We apply technical and organizational measures reasonable for the scale of the service: transport encryption (HTTPS), access controls, action logging, regular infrastructure updates and backups.

Despite this, no online service can guarantee absolute protection. Senbi is not liable for incidents caused by reasons beyond its reasonable control (provider breaches, third-party actions, the client’s breach of security rules, etc.).

At any time you can:

• Request which of your data we process.
• Ask to correct or update incorrect data.
• Withdraw consent and request deletion of data, unless storage is required by law or contract.
• Object to specific kinds of processing.

Send requests via “Contacts.” We respond within a reasonable time, usually within 30 days.

Senbi services are intended for legal entities and entrepreneurs. We do not knowingly collect data of minors. If such data reaches us by mistake, it will be deleted upon a reasoned request.

We may update this Policy. The current version is always available at senbi.org/en/privacy. Material changes will be communicated through agreed channels.

Continued use of the site and services after a new version is published means acceptance of its terms.

Send data-processing requests, consent withdrawals, account deletion requests and any other privacy questions through the “Contacts” section of senbi.org or to the channels listed there.