Privacy Policy
. This policy is adapted from the Basecamp Open-Source Policies / CC BY 4.0
We collect personal data to provide and secure our services. We never sell it. This policy explains what we collect, how we use it, and your privacy rights.
Contents
- What we collect and why
- When we access or disclose your information
- Your privacy rights
- How we secure your data
- What happens when you delete account content
- Data retention
- Where data is processed
- Transfers of personal data from the EU
- Changes and questions
Who this policy covers
This policy covers all products built and maintained byProjckt, including SenseFolks. Job applicants should read our Recruitment Privacy Policy.
"You" means site visitors, prospective customers, customers, and authorized users whose information we handle in connection with obtaining services or managing their relationship with Projckt.
This policy excludes customer end-user information we receive or process on a customer's behalf under a services agreement, including end-user message content ("End User Communications"). The customer is the "data controller", "business", or equivalent under applicable privacy law. We process End User Communications under that customer's instructions. Our obligations as a "data processor" or "service provider" are set out in the services agreement and applicable data protection addendum, not this policy.
If you are a customer's end user, direct questions about data collection and processing to the organization that provided your information to us. California residents should also read ourCalifornia Notice at Collection.
What we collect and why
We collect only what we need to run SenseFolks:
Identity and access
When you sign up for a Projckt product, includingSenseFolks, we request identifying information such as your name, email address, country of residence, and optional company name. We use it to personalize your account, handle tax accounting, and send product updates and essential information.
We may send optional surveys to understand product use and make improvements. Newsletters and other updates require your consent. We never sell personal information or use your name or company in marketing statements without permission.
Billing information
SenseFolks offers only the Free plan. There is no checkout. We do not collect payment details, billing addresses, credit card information, or payment transaction records. We will update this policy before paid upgrades launch.
Product interactions
We store content you upload, receive, or maintain in your account: websites, survey configurations, responses from embedded surveys, and resulting insights. This data passes through our dashboard, APIs, and survey components to provide the Website → Survey → Insights flow. We keep it while your account is active and delete it within 60 days of account deletion.
General geolocation data
For most products, we log and retain the full IP address used at signup to prevent future spam signups. We also log full IP addresses for all account access to prevent fraud and protect security. Login data stays on file while your account is active.
Website interactions
We collect limited analytics about marketing and documentation visits to assess content and diagnose navigation or performance issues. This may include browser, operating system, approximate location, visited pages, load times, and referring website.
We do not link website analytics to SenseFolks accounts. Google Analytics runs only on the public marketing and documentation website. See "Advertising and cookies" below.
Webapp usage analytics
We use PostHogto improve usability and reliability across public and authenticated routes at
app.sensefolks.com, including signup and sign-in. With your consent, we send sanitized route pageviews and selected explicit product events using PostHog's cookieless mode.PostHog creates no browser identifier, cookie, local-storage analytics profile, or client-side session identifier. It may group a short anonymous stream of events using a privacy-preserving server-side hash. We do not link events to SenseFolks accounts or send raw account or user IDs, account names, email addresses, credentials, form-field values, survey content, respondent data, or raw application payloads.
Automatic click capture, form-interaction capture, and session replay are disabled. Allow or reject analytics in the consent card; change your choice later on the Account page. We store only that preference in your browser and do not send it to PostHog.
PostHog uses its European Union cloud region in Frankfurt, Germany. See its Data Processing Agreement. Google Analytics does not run on
app.sensefolks.com.Anti-bot assessments
We use rate limiting and origin validation on sensitive flows at
app.sensefolks.comand across Projckt products to prevent brute-force logins and spam. Our legitimate interest is protecting our apps and the broader Internet community from credential stuffing and spam.Advertising and cookies
Projckt occasionally advertises on third-party platforms such as Google. Clicking an ad takes you to our marketing site. Where lawful, we may load an ad-company script that sets a third-party cookie and reports which ad and keyword brought you here, and actions such as button clicks or form submissions, to measure ad effectiveness.
We use persistent first-party cookies for authentication and certain preferences. Marketing and documentation pages may also use analytics cookies. PostHog uses no cookies or similar browser storage for webapp analytics; the webapp stores only your choice to allow or reject anonymous analytics.
Cookies are text stored by your browser. They can remember logins and preferences or collect browser type, operating system, pages visited, visit duration, viewed content, and other click-stream data. You can change retention settings and allow or block cookies in your browser. Disabling cookies prevents our apps from working and may affect other services.
Voluntary correspondence
We keep emails sent to SenseFolks or Projckt, including your email address, to refer to if you contact us again. We also store information you volunteer, such as written survey answers. We may ask to record customer interviews for future reference or use, and record only with your express consent.
When we access or disclose your information
To provide requested services
We use subprocessorsto run our applications andprocessorsfor business functions such as newsletters, customer surveys, and our company storefront.
Employees view content only for limited purposes with your express permission, such as manually fixing a failed automated process. These cases are rare; we seek root-cause fixes to prevent recurrence. We may also access data to respond to legal process, as described below.
To exclude you from our ads
Where lawful, we may share a one-way hash of account holders' email addresses with ad companies so they do not see our ads.
To resolve support requests
We ask for consent before accessing your content to troubleshoot a problem or fix a software bug.
To address restricted uses
Account access is a last resort when investigating potential abuse. We balance the privacy and safety of customers and people reporting issues. If we discover restricted use, we take necessary action, including notifying authorities where warranted.
Aggregated and de-identified data
We may aggregate or de-identify information collected through the Services and use it for any purpose, including marketing and analytics.
When required by law
SenseFolks is an Indian company with its main data infrastructure in Europe.
Government requests: We respond only when compelled by legal process or in limited emergency circumstances. We must comply with Indian law enforcement warrants, criminal subpoenas, or court orders requiring disclosure. For authorities outside India, we respond only when the Indian government compels us through a mutual legal assistance treaty or agreement. We notify affected users before disclosure unless legally prohibited or in some emergencies.
Preservation requests: We preserve data only when compelled by the Indian government or a properly served Indian civil subpoena. We disclose preserved data only when required by law or a court order we choose not to appeal. Unless we receive a proper warrant, court order, or subpoena before the required preservation period ends, we destroy preserved copies at its end.
If SenseFolks is acquired or merges with another company, we will notify you well before personal information is transferred or becomes subject to a different privacy policy.
Your privacy rights
We offer the same data rights to all customers, wherever they live:
Know: Learn what personal information we collect, use, share, or sell. This policy describes the categories and specific data we collect and how we use it.
Access: Access your personal information and details about its sharing, storage, security, and processing.
Correction: Request corrections to your personal information.
Erasure ("to be forgotten"): Request deletion of personal information held by us and our service providers, subject to limits under applicable law. Some deletions may prevent the apps from working and require us to close your account.
Complain: Raise a complaint about our handling of your personal information with the appropriate supervisory authority.
Restrict processing: Request limits on how and why we use or process personal information, including opting out of its sale. We have never sold personal data and never will.
Object: In certain situations, object to how or why your personal information is processed.
Portability: Receive your personal information and transmit it to another party.
Automated decisions: Object to and prevent decisions made solely by automated processes that have legal or similarly significant effects on you. This right is limited where the decision is necessary to perform a contract between us, allowed by applicable law, or based on your explicit consent.
Non-discrimination: We will not change your price, discounts, or level of customer service because you exercise privacy rights. Exercising certain rights may, however, prevent use of the Services.
You can exercise many rights by signing in and updating your account. Some information is exempt under applicable law; for example, information needed to provide the Services.
We may take reasonable steps to verify your identity before responding. Depending on the request and sensitivity of the information, this may include verifying at least your name and email address. If verification fails, we may be unable to respond. An authorized agent needs the account holder's signed written consent.
For help or rights requests, email[email protected].
How we secure your data
We encrypt all data sent from our servers to your browser usingSSL/TLSand encrypt database backups. We also take extensive measures to protect stored data. See ourSecurity Overview.
What happens when you delete account content
Many applications let you trash content. In active accounts, trashed content stays accessible for about 25 days, depending on the product. It then becomes inaccessible in the app, and we cannot retrieve it for you. It may remain on active servers for another 30 days and in database backups for up to a further 30 days. It should be purged from all systems and logs within 90 days of being trashed.
Account cancellation makes content inaccessible immediately. It should be fully purged within 60 days. This applies both when an owner deletes an account and when we terminate it under our Terms. We do not automatically cancel inactive accounts. See ourCancellation Policy.
Data retention
We retain information as long as needed for its processing purposes, based on why we collected and use it and your choices. Afterward, we may delete or aggregate it. We may retain and use information to meet legal obligations, resolve disputes, or enforce agreements. Specific retention periods appear throughout this policy.
Where data is processed
Our main production infrastructure is in Europe. Depending on the service and your location, approved processors and subprocessors listed in this policy may process data elsewhere.
PostHog processes analytics for public and authenticated routes atapp.sensefolks.com in its European Union cloud region in Frankfurt, Germany. If we change the region or use a first-party analytics proxy, PostHog's applicable terms will still govern processing. We will update this policy if the change materially affects where personal data is processed.
Transfers of personal data from the EU
European Data Protection Board guidance requires personal data transferred outside the EU to retain the protection provided by EU privacy law. UK law provides similar safeguards for transfers outside the UK. OurData Processing Addendumincludes Standard Contractual Clauses to help provide that protection.
Occasional transfers of EU personal data to India may occur duringProjckt operations, such as newsletter signups or survey participation. These transfers rely on theArticle 49(1)(b) derogationunder GDPR and UK GDPR.
Changes and questions
We may update this policy to meet regulations or reflect new practices. For significant changes, we update the date above. Read the updated policy before using SenseFolks.
Send questions, comments, or concerns about this policy, your data, or your rights to [email protected].
By using SenseFolks, you agree to the Terms of Service, Privacy Policy, and related policies. For questions, contact us