This Notice explains how we process personal data when you visit our public website. It covers website visitors only — it does not cover your use of the authenticated Portal as a customer (see the Privacy Policy (Portal)) or our processing of end-users' data in the mobile App (see the App Privacy Policy).
1. Introduction
1.1 We are Seventh Sense Artificial Intelligence Private Limited, a company incorporated in Singapore with our registered office at 36 Robinson Road, #20-01, Singapore 068877 (“Seventh Sense AI”, “we”, “us” or “our”).
1.2 This Website Privacy & Cookie Notice (“Notice”) explains how we collect and use personal data when you visit our public website at sensecrypt.com (the “Website”) — for example, when you browse our pages, book a demo, or download a resource.
2. Legal and regulatory framework
This Notice is adopted in accordance with applicable privacy and data protection law, including:
- EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”);
- UK General Data Protection Regulation and UK Data Protection Act 2018 (“UK GDPR”);
- Singapore Personal Data Protection Act 2012 (“PDPA”);
- California Consumer Privacy Act 2018 as amended by the California Privacy Rights Act 2020 (“CCPA/CPRA”), for California residents; and
- Other applicable national and regional data protection laws.
3. Personal data we collect
A. Information collected automatically (analytics & cookies)
When you visit the Website — and only after you accept the relevant cookie category (see Section 5) — we collect:
| Data element | How it is collected / used |
|---|---|
| Usage & interaction data (pages viewed, clicks, navigation paths, scroll, referrer, approximate location) | Via Google Analytics 4 and Microsoft Clarity, to understand how visitors use the site and improve it. |
| Session analytics (session replays and heatmaps) | Via Microsoft Clarity — records on-page interactions (mouse movement, clicks, scrolling) to visualise usability. Text input is masked. |
| Device & technical data (IP address, browser type, device type, operating system) | Collected by our analytics providers as part of the above. IP is used for approximate geolocation and is not stored by us in identifiable form. |
| Advertising & remarketing identifiers | Via Google Ads (after you accept the “Marketing” category), to measure ad-campaign performance (conversions) and show relevant SenseCrypt ads to past visitors on other websites. |
B. Information you provide
| Data element | How it is collected / used |
|---|---|
| Demo booking details (name, email, selected time, any message) | When you book a demo through our embedded Calendly widget. Used to schedule and hold the meeting. |
| Resource / whitepaper requests (email address) | When you request a gated download. Used to deliver the resource you requested. |
| Contact / enquiry details | When you contact us via the Website. Used to respond to you. |
C. Security data
| Data element | How it is collected / used |
|---|---|
| Google reCAPTCHA Enterprise signals (device and behavioural signals) | Collected on forms to distinguish humans from bots and prevent abuse. Processed by Google. |
4. How we use your personal data and our legal bases
| Purpose | Data categories | Legal basis (GDPR) |
|---|---|---|
| Website analytics and usability improvement (GA4, Clarity) | Usage, interaction, session-replay, device data | Consent — Art. 6(1)(a) (given via the cookie banner “Statistics” category) |
| Responding to demo bookings and enquiries | Name, email, message, meeting details | Art. 6(1)(b) — steps prior to a contract; Art. 6(1)(f) — legitimate interests |
| Delivering requested resources (whitepapers) | Email address | Art. 6(1)(b); consent for any follow-up marketing |
| Advertising, remarketing and campaign measurement (Google Ads) | Advertising cookie ids, interaction data | Consent — Art. 6(1)(a) (given via the cookie banner “Marketing” category) |
| Security and bot/fraud prevention (reCAPTCHA) | Device and behavioural signals | Art. 6(1)(f) — legitimate interests |
CCPA/CPRA (California residents): we do not sell personal information for money. We do use advertising cookies (Google Ads) that may constitute “sharing” of personal information for cross-context behavioural advertising as defined under the CPRA. You can opt out at any time via the “Do Not Sell or Share My Personal Information” / cookie-settings link in our footer, and we honour Global Privacy Control (GPC) signals.
PDPA (Singapore residents): we collect, use, and disclose personal data for the purposes described in this Notice.
5. Cookies and similar technologies
5.1 We use cookies and similar technologies on the Website. On your first visit, our consent banner (Cookiebot) lets you accept or reject non-essential categories. Statistics/analytics cookies (Google Analytics 4 and Microsoft Clarity) and marketing cookies (Google Ads) load only after you consent, and you can change or withdraw your choice at any time via the cookie-settings link in the footer.
5.2 Cookie categories. The tables below are indicative. A live, always-current list is maintained by our consent tool and shown in the cookie declaration below.
Strictly necessary (always on — no consent required):
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| CookieConsent | Cookiebot (Usercentrics) | Stores your cookie-consent choices | ~1 year |
| _GRECAPTCHA | Bot/fraud prevention on forms | ~6 months |
Statistics / analytics (set only after consent):
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_<id> | Google Analytics 4 | Distinguish visitors, measure usage | up to 2 years (or as configured) |
| _gid | Google Analytics 4 | Distinguish visitors | ~24 hours |
| _clck | Microsoft Clarity | Persistent Clarity user id | ~1 year |
| _clsk | Microsoft Clarity | Links session page views | ~1 day |
| CLID, MUID, ANONCHK | Microsoft (clarity.ms / bing.com) | Clarity/Microsoft analytics identifiers | up to ~1 year |
Marketing / advertising (set only after consent):
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _gcl_au | Google Ads (Conversion Linker) | Measure ad conversions | ~90 days |
| IDE | Google (doubleclick.net) | Ad targeting, remarketing & measurement | ~1 year |
| NID | Google (google.com) | Ad personalisation | ~6 months |
5.3 You can withdraw or change your cookie consent at any time using the cookie-settings link in the footer.
6. Analytics providers — what they do
- Google Analytics 4 (Google LLC). Aggregate website analytics — pages, sessions, events, approximate location. We do not use GA4 for advertising and have not enabled Google Signals for cross-context advertising.
- Microsoft Clarity (Microsoft Corporation). Session replay and heatmaps to see how visitors interact with pages. Clarity masks text input; we do not use it to capture the content you type. It runs on the marketing site only.
- Google Ads (Google LLC). Conversion tracking and remarketing — measures which ads led to visits or enquiries and lets us show SenseCrypt ads to past visitors on other websites. Advertising cookies load only after you accept the “Marketing” category.
- Cookiebot / Usercentrics A/S. Our consent-management platform — records and enforces your cookie choices.
You can withdraw analytics consent at any time via the footer cookie-settings link; you may also use the Google Analytics opt-out browser add-on.
7. Third-party service providers (recipients)
| Provider | Service | Data involved | Location |
|---|---|---|---|
| Google LLC — Google Tag Manager & Google Analytics 4 | Tag management + website analytics | Usage, device, IP, cookie ids | United States / Global |
| Microsoft Corporation — Clarity | Session replay + heatmaps | Interaction data, masked page content, device, IP | United States / Global |
| Google LLC — Google Ads / DoubleClick | Ad conversion tracking + remarketing | Advertising cookie ids, interaction data | United States / Global |
| Usercentrics A/S — Cookiebot | Consent management | Consent record, IP (truncated) | European Union |
| Calendly LLC | Demo scheduling widget | Name, email, meeting details | United States |
| Google LLC — reCAPTCHA Enterprise | Bot/fraud prevention | Device and behavioural signals | United States / Global |
We do not sell personal data for money. Where you consent to the “Marketing” category, advertising cookies (Google Ads) may involve “sharing” of personal information for cross-context behavioural advertising under the CPRA — you can withdraw consent at any time (Section 5 / footer cookie settings). We do not otherwise share personal data with third parties for advertising or data-brokerage purposes.
8. Cross-border data transfers
8.1 Some providers above process data in the United States (Google, Microsoft, Calendly). Where personal data is transferred from the EEA or UK to a country without an equivalent level of protection, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, and the UK International Data Transfer Agreement (IDTA) for UK transfers. For Singapore transfers we rely on contractual provisions consistent with the PDPA transfer-limitation obligations.
8.2 You may request a copy of the relevant transfer mechanism by contacting dpo@seventhsense.ai.
9. Data retention
- Analytics data (GA4): retained up to 14 months, then aggregated.
- Session analytics (Clarity): retained in line with Microsoft's Clarity retention policy (rolling ~13 months).
- Advertising data (Google Ads): retained per Google's policy and the cookie durations above; remarketing audience membership typically expires within 540 days.
- Cookie-consent records: ~12 months, after which we re-ask.
- Demo-booking and enquiry data: retained only as long as needed to handle your request and any resulting relationship.
- Resource-request emails: retained until you unsubscribe or object.
10. Your rights
Subject to applicable law you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent to analytics and marketing at any time (via the footer cookie-settings link, with no effect on prior lawful processing). California residents have CCPA/CPRA rights, including the right to opt out of “sharing”; Singapore residents have PDPA access/correction rights. To exercise any right, contact dpo@seventhsense.ai — we respond within 30 calendar days.
11. Children's privacy
The Website is intended for business audiences and is not directed to children under the age of 16. We do not knowingly collect personal data from children.
12. Changes to this notice
We may update this Notice from time to time. When we make changes we will update the Effective Date and post the revised Notice on this page.
13. Contact information and complaints
For any queries, rights requests, or complaints, please contact our Data Protection Officer:
Seventh Sense Artificial Intelligence Private Limited
36 Robinson Road, #20-01, Singapore 068877
Email: dpo@seventhsense.ai | Website: www.seventhsense.ai
- EEA and UK Users: you may lodge a complaint with your local supervisory authority. The UK supervisory authority is the ICO at ico.org.uk (telephone: 0303 123 1113).
- Singapore Users: you may lodge a complaint with the PDPC at pdpc.gov.sg.
- California Users: you may contact the CPPA at cppa.ca.gov or email dpo@seventhsense.ai.