Privacy Policy
How Senaro Solutions handles account, commercial, enquiry and API information.
01Scope
This Policy explains how Senaro Solutions handles information from website visitors, developer accounts, commercial customers, contact enquiries and Cosmo API operations.
02Account and business information
We may process names, work email addresses, company names, login credentials in protected form, account settings, support messages, product interest, sales enquiries, licence records and administrative audit data.
03API data
Cosmo can process birth date, birth time, coordinates, timezone and requested analysis scope. Customers should avoid sending names, email addresses or unrelated identifying information when those details are not required for the calculation. API metadata may include request identifiers, licensed domain, response status, duration and privacy protective security identifiers.
04Contact enquiries
Information submitted through the Contact form is used to respond to product, licensing, integration, partnership or general enquiries and may be retained for follow-up, business records and security purposes.
05Billing and contracts
For paid customers we may process invoice details, transaction references, plan, quota, term, payment status and contract or order information. Payment providers, if enabled, process payment credentials under their own notices.
06Purposes
We use information to provide and secure accounts; provision trials and licences; authenticate API requests; enforce quotas and domains; provide Cosmo results; troubleshoot errors; prevent abuse; respond to enquiries; maintain accounting and audit records; and comply with applicable law.
07Service providers and international processing
Hosting, database, email, analytics, payment and security providers may process limited information on our behalf. Data may be processed outside your country subject to applicable legal requirements and safeguards.
08Retention
Records are kept only as long as reasonably needed for service delivery, security, billing, disputes, legal obligations and legitimate audit needs. Commercial customers should also apply lawful retention rules to information they send to the API.
09Security
We use protected sessions, server side secret storage, hash only API-key storage, access controls, rate limits, security headers, audit records and encrypted transport. No online service can guarantee absolute security.
10Customer responsibilities
Commercial customers are responsible for deciding what personal information they submit through their own integration, providing required notices to their users and maintaining a lawful basis for that processing.
11Rights and requests
Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing. Use the privacy contact listed on the Contact page.
