Privacy Policy

1. Who we are

Senrub Insights is operated by Senrub Consulting Pty Ltd (ABN 17 659 370 671), based in Melbourne, Victoria, Australia. For any privacy question or request, contact us at support@senrub.com.

2. Information we collect

• Account information: your name, email address and a securely hashed password.
• Company profile: company name, industry, company size, annual revenue and preferred currency.
• IT spend data: the spend figures, categories, vendors, periods and any files (CSV/Excel) you enter or upload for analysis.
• Payment information: handled by our payment processor (Stripe). We do not store your full card details on our servers; we retain a subscription/transaction reference and status.
• Usage & analytics: anonymous page-view data (pages visited, referring site, an anonymous visitor identifier, timestamp and approximate technical information such as browser type and IP address) to understand how the Service is used.
• Support communications: messages you send us.

3. How we use your information

• To provide the Service — authenticate you, store your data, generate dashboards, benchmarks and reports.
• To generate AI-driven insights on your spend data (see "AI processing" below).
• To process subscriptions and payments.
• To send transactional emails (e.g. password resets) and, where relevant, service notices.
• To secure, maintain, troubleshoot and improve the Service.
• To comply with legal obligations.

4. AI processing of spend data

When you request AI Insights, the relevant spend data is sent to a third-party large language model provider (accessed via the Emergent platform, which currently routes to providers such as OpenAI) to generate a written analysis. This processing is used solely to produce your insights and is not used by us to build advertising profiles.

5. Service providers (sub-processors)

We share information with trusted providers only as needed to run the Service:

• Emergent — application hosting, database and AI routing infrastructure.
• Stripe — payment processing and subscription management.
• Resend — delivery of transactional emails (e.g. password resets).
• AI provider(s) — generating spend insights, as described above.

We do not sell your personal information.

6. Where your data is stored

The Service, including its database and uploaded files, is hosted on cloud infrastructure provided by Emergent, our platform and hosting provider. Depending on your location, your information may be transferred to and processed in the region(s) where Emergent operates. We take steps to ensure appropriate safeguards are in place for such transfers. We will update this section with the specific hosting region once confirmed.

7. Data retention

• We keep your account and associated data for as long as your account remains active.
• When you delete your account, it is immediately deactivated and kept in a suspended state for a 30-day grace period (in case of accidental deletion), after which your account and all associated data are permanently erased.
• Residual copies may persist in routine backups for a limited period before being overwritten.
• Anonymous analytics data may be retained in aggregate for reporting purposes.
• We may retain limited records where required to meet legal, tax or accounting obligations.

8. Your rights

Depending on your location (including under the Australian Privacy Act, the EU/UK GDPR and the CCPA), you may have rights to access, correct, export or delete your personal information, and to object to or restrict certain processing. You can delete your account and data at any time from your Company profile page, or by emailing support@senrub.com. We will respond within the timeframe required by applicable law.

9. Cookies & local storage

We use strictly necessary cookies and browser local storage to keep you signed in (authentication tokens) and to operate core features, plus anonymous analytics to measure usage. We do not use third-party advertising cookies.

10. Security

We protect your information using industry-standard measures, including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Service is intended for business use and is not directed to children under 16.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above and, where appropriate, by notice within the Service.

13. Contact

Questions or requests: support@senrub.com.