Privacy Policy

1. Overview & Purpose

Senslyy ("Senslyy", "we", "us", or "our") operates the Market Research and field survey platform available at senslyy.com. This Privacy Policy explains how we collect, use, process, and safeguard your personal information when you register, access our web console, use our mobile Computer-Assisted Personal Interviewing (CAPI) applications, or respond to surveys created on our platform.

2. Information We Collect

• Account Credentials & Authentication Metadata: When you register via email, Google OAuth, or single-sign-on (SSO), we process your name, corporate email address, profile picture/avatar URL, and assigned tenant role.
• Survey Responses & Qualitative Media: Answers, text transcriptions, audio recordings, and file attachments uploaded during fieldwork surveys.
• Fieldwork Verification Data (CAPI GPS & Audits): Geolocation data (latitude, longitude, accuracy radius) collected during offline/online survey completions to satisfy Supervisor QC requirements.
• Technical & Session Data: IP address, device model, operating system, browser type, and time-stamped activity logs.

3. How We Use Information

We process collected information strictly for legitimate operational purposes:

• Provisioning tenant organization accounts and enforcing multi-tenant Row Level Security (RLS).
• Executing real-time survey logic rules, quota counting, and qualitative auto-coding.
• Validating field interviewer integrity via Supervisor Quality Control (QC) reviews.
• Maintaining audit trails, security monitoring, and account verification.

4. Data Security, Sub-Processors & Storage Sovereignty

Senslyy implements enterprise-grade security controls including TLS 1.3 encryption in transit, AES-256 encryption at rest, Enterprise Row Level Security (RLS), and isolated tenant storage buckets. We maintain system audit and ICT logs in accordance with applicable CERT-In directives.

Approved Technical Infrastructure Categories & Sub-Processing Roles:

• Cloud Database & Identity Infrastructure — Managed PostgreSQL relational database clustering, authentication engine, and row-level tenant data isolation.
• Enterprise Encrypted Object Storage Vault — AES-256 encrypted cloud storage infrastructure for respondent audio recordings, media files, and fieldwork verification attachments.
• Edge Delivery Network & Application Hosting Platform — Secure global edge delivery network, server-side compute execution, and TLS 1.3 terminated application gateways.

5. Data Principal Rights under India's DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025, you have enforceable rights regarding your digital personal data:

• Right to Access (Section 11): Right to obtain a summary of personal data being processed and identities of third parties with whom data has been shared.
• Right to Correction & Erasure (Section 12): Right to correct inaccurate personal data, complete incomplete data, and request erasure of personal data that is no longer necessary.
• Right of Grievance Redressal (Section 13): Right to have complaints resolved by our designated Grievance Officer within statutory timelines.
• Right to Nominate (Section 14): Right to nominate an individual to exercise rights on your behalf in the event of death or incapacity.
• Right to Withdraw Consent (Section 6(4)): Right to withdraw consent at any time with ease comparable to giving consent.

To understand how we handle technical tokens, read our dedicated Cookie Policy.