Data processing

Updated 9 October 2026. This page provides information; it is not a signed data-processing agreement and does not amend an existing client contract.

Website processing

Sengi AI AB determines the purposes of its website analytics and business enquiries. The current website uses the following services. This list describes website processing, not a blanket list of subprocessors authorised for every client project.

OpenAI: ChatGPT Sites

Provides the website hosting platform and, where applicable, platform access controls. Technical requests and security information may be processed to deliver and protect the site. The applicable agreement depends on the OpenAI account and service used. Links here do not establish that a particular business DPA applies to a personal account.

Cloudflare: delivery infrastructure

Provides underlying delivery and hosting infrastructure for the ChatGPT Sites deployment. Cloudflare operates an international network. Its role here is through the hosting arrangement, not a claim that Sengi has a separate direct hosting agreement with Cloudflare. OVH is not used to host this version of the website.

OpenAI: advertising measurement

The consent-gated Measurement Pixel is separate from hosting. Its Conversion Terms and Ad Tools DPA apply. Sengi and OpenAI generally act as independent controllers, except for Restricted Processing. This page does not verify the account’s contractual or retention settings.

Google Ads: advertising measurement

After advertising consent, the Google tag processes page visits, ad attribution and technical connection data. Google ad personalisation is disabled in this integration. See Google’s privacy policy and Google Ads data-processing terms. Applicable terms depend on the service and account configuration; this page does not establish that a particular agreement has been executed.

Lemlist: company identification

After separate visitor consent, Lemlist processes visit and network information for company identification and sales follow-up, using Snitcher. See Lemlist’s privacy policy. This is optional and can be disabled in Cookie settings.

PostHog: EU website analytics

PostHog Inc. provides EU Cloud analytics, with analytics storage in Frankfurt. Our integration sends limited pseudonymous usage events. Browser persistence, person profiles and session recording are disabled. Client IP data is discarded from stored events and IP-based geolocation is disabled. The service still receives network requests.

DPA and agreement process · Subprocessors · Storage information

Enquiry storage and email

Contact-form submissions are stored in the website’s Cloudflare database. SMTP2GO sends enquiry notifications, and Google Workspace handles email correspondence. When configured, a webhook also passes submissions to our enquiry-handling system for follow-up.

Google Calendar: consultation bookings

The website checks availability and creates consultation events directly through Google Calendar. During the transition, Morgen may continue to process existing bookings or act as the booking provider until direct Google access is configured. Booking details include the visitor’s name, email, selected time and optional note. Google Calendar manages the event and Google Meet supplies the video-call link. The website returns available slots to visitors without exposing existing calendar events.

OpenAI: ChatGPT for enquiries

Form submissions, including names, email addresses, selected interests and message contents, may be processed using ChatGPT to help us understand and summarise enquiries and prepare responses. This use is separate from ChatGPT Sites hosting and advertising measurement. The applicable terms and data-processing arrangements depend on the OpenAI account and service used.

Notion: enquiry records

Form submissions and related follow-up notes may be saved in Notion to organise enquiries and manage follow-up. These records can include contact details, selected interests and information provided in messages. This describes Sengi’s handling of website enquiries; it does not authorise Notion or ChatGPT for every client engagement.

Location and transfers

EU analytics storage does not establish EU-only processing across the provider chain. Hosting, support and security processing can involve countries outside the EEA. The applicable provider agreements describe locations, subprocessors and transfer safeguards. We do not represent the public links above as evidence that a particular agreement has been executed.

Client data-processing agreements

Where Sengi processes personal data on a client’s behalf, the processing instructions and applicable data-processing agreement belong to that engagement. Contact [email protected] to request or review the agreement and the project’s provider list before sharing client personal data.

The engagement documentation should identify the scope and duration, purposes, data and people concerned, authorised providers and processing locations, security measures, assistance with rights and incidents, and return or deletion arrangements. Adding analytics to Sengi’s marketing website does not itself authorise these providers to process a client’s operational data.

For website visitors, see the privacy notice and cookie notice.

Data processing.