This Privacy Policy explains how iSkale Group (“iSkale Group”, “we”, “us”, or “our”), a company based in Dubai, United Arab Emirates, collects, uses, shares, and protects information in connection with the Senna platform and related services (the “Services”). It should be read together with our Terms of Service.
For most Customer Content you process through the Services on behalf of your own clients, you act as the controller of that data and iSkale Group acts as your processor. For account and platform usage data, iSkale Group acts as the controller. This Policy describes both roles.
1. Information We Collect
Account information
When you register or are provisioned an account, we collect information such as your name, email address, password (stored in hashed form), organization name, role, and (for paid plans) billing and contact details.
Customer Content
We process the content you and your users submit to or generate using the Services, including text, images, video, brand materials, prompts, client records, and uploaded files. We process Customer Content on your behalf to provide the Services.
Usage and device information
We automatically collect information about how the Services are used, such as log data, IP address, browser and device type, pages and features accessed, timestamps, and diagnostic data. We and our service providers use cookies and similar technologies to operate, secure, and improve the Services.
2. How We Use Information
- To provide, operate, maintain, and secure the Services and your account.
- To generate AI Output and deliver the features you request, including transmitting content to the third-party processors described below.
- To process payments and manage subscriptions.
- To communicate with you about your account, security, support, and service-related matters.
- To monitor, troubleshoot, analyze, and improve the Services and develop new features.
- To detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms.
- To comply with legal obligations and enforce our agreements.
We do not sell your personal information, and we do not use Customer Content to train our own general-purpose AI models.
3. Third-Party Processors
We share information with trusted third-party providers who process it on our behalf to deliver the Services. These include:
- AI providers — such as KIE.ai and OpenAI, to generate text, images, and video from the prompts and content you submit.
- Social publishing & analytics partners — Ayrshare, to connect the social accounts you choose, publish the content you approve, and retrieve its performance data. Social media capabilities provided by Ayrshare.
- Infrastructure & storage — Supabase, which provides our database, authentication, and file storage.
- Payment processors — to handle billing for paid plans.
- Operational tooling — such as analytics, error monitoring, and email delivery providers used to run and support the Services.
These providers are permitted to use the information only to perform services for us and are bound by appropriate confidentiality and data-protection obligations. We may also disclose information to comply with law, enforce our rights, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy.
4. Data Storage & International Transfers
Information is stored and processed using Supabase and other infrastructure providers, and may be hosted on servers located outside the United Arab Emirates, including in jurisdictions whose data-protection laws may differ from your own. Where we transfer personal data internationally, we take steps to ensure an appropriate level of protection consistent with applicable law.
5. Security
We implement technical and organizational measures designed to protect information against unauthorized access, loss, misuse, and alteration, including encryption in transit, access controls, and tenant isolation. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
6. Data Retention
We retain account information for as long as your account is active and as needed to provide the Services. Customer Content is retained while your account is active; after account closure or deletion of content, we delete or anonymize it within a reasonable period, except where we are required to retain it to comply with legal, accounting, or security obligations, or to resolve disputes and enforce our agreements. Backups containing residual copies are deleted on a rolling basis.
7. Your Data-Protection Rights (GDPR & Similar Laws)
Depending on your location and applicable law (including the EU/UK General Data Protection Regulation and comparable UAE data-protection laws), you may have the following rights regarding your personal data:
- Access — to request a copy of the personal data we hold about you.
- Rectification — to correct inaccurate or incomplete data.
- Erasure — to request deletion of your personal data, subject to legal exceptions.
- Restriction & objection — to restrict or object to certain processing.
- Portability — to receive your data in a structured, commonly used, machine-readable format.
- Withdraw consent — where processing is based on consent, to withdraw it at any time.
- Complain — to lodge a complaint with a competent data-protection authority.
Where iSkale Group processes Customer Content on your behalf as a processor, requests from individuals (data subjects) should generally be directed to you as the controller, and we will assist you in responding as required by law. To exercise your own rights, or for assistance, contact us using the details below. We may need to verify your identity before acting on a request.
8. Children’s Privacy
The Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can take appropriate action.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by posting the updated Policy with a new “Last updated” date or notifying you within the Services. Your continued use of the Services after the changes take effect constitutes acceptance of the revised Policy.
10. Contact
For privacy questions or to exercise your rights, contact us at info@iskale.ai.