Privacy Policy

Last updated: August 2025

This Privacy Policy explains how Sentiwise collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. We are committed to processing your data transparently, securely, and only for the purposes stated here.

1. Information We Collect

• Information you provide: Your email address, encrypted password, and any reviews you submit.
• Automatically collected: Query logs, likes given, invalid search attempts, browser metadata, session activity, and general interaction logs to improve performance and prevent abuse.

Note: We do not store payment or credit card details. All transactions are securely processed via Stripe.

2. Purpose of Processing

• Authenticating and managing user accounts
• Tracking likes and query usage for rewards
• Detecting misuse and improving platform performance
• Handling support and data deletion requests

We do not sell or share your personal data for marketing purposes.

3. Cookies

We use secure, HttpOnly cookies (which cannot be accessed by JavaScript) to manage login sessions and protect against attacks such as XSS. These cookies are essential and cannot be disabled without affecting core functionality.

With your consent, we may also set optional analytics cookies (e.g., Google Analytics) to understand how users interact with the platform. These are only activated if you accept them via our cookie banner and can be withdrawn at any time using the “Withdraw Consent” option in the footer or by clearing browser storage.

We do not use your data for personalized advertising, retargeting, or remarketing. Google Ads is only used for conversion tracking with your consent.

For additional privacy, we self-host all fonts, scripts, and other assets — no external CDN requests are made to providers such as Google Fonts or Bootstrap CDN.

4. Data Retention & Deletion

Your data is retained while your account is active or until you request deletion via our contact form. All valid requests are processed within 14 days.

5. Data Sources

For Google Places, we analyze publicly available customer reviews to provide AI-generated sentiment insights. For Amazon products, we never retrieve or store real customer reviews. Instead, our AI generates predictions based solely on publicly visible product metadata (such as title and category). All AI-generated outputs are clearly labeled.

6. Third-Party Processors

• Stripe: Secure payment processing
• Google Analytics: Optional, consent-based analytics
• OpenAI: AI-powered summaries and insights

All processors are contractually bound to comply with GDPR and only receive the minimum necessary data.

7. Legal Basis (GDPR Article 6)

• Contract: Providing registered users with core services
• Legitimate interest: Maintaining security, preventing abuse, and improving user experience

8. Your Rights (EU Residents)

• Access, correct, or delete your data
• Request data portability or restrictions
• Withdraw consent at any time

To exercise your rights, please use our contact form.

9. How We Protect Your Data

• HTTPS & SSL Encryption: All data is transmitted securely
• Token-Based Authentication: Encrypted JWE tokens in HttpOnly cookies, with CSRF protection
• Role-Based Access Control: Users can only access their own data
• Secure Payments: Handled exclusively via Stripe’s PCI-compliant system
• Database Security: Data stored in an access-controlled PostgreSQL database

10. Changes to This Policy

We may update this policy. The revised version will be posted here with an updated date. Continued use of Sentiwise means you accept the changes.