Senify Privacy Policy
Effective date: 2025-01-01 Last updated: 2026-11-10
1. Who we are
Senify ("we") is operated by CENOQ CORPORATION (新諾資訊股份有限公司; company number 28004668; address: Rm. 1012, No. 205, Sec. 1, Dunhua S. Rd., Da'an Dist., Taipei City 106, Taiwan (R.O.C.)). We provide a cloud ERP system. This policy explains how we handle personal data when you visit senifyai.com, sign up for and use Senify, or connect a Shopline store through the Shopline app "Senify".
2. Our role
| Data | Our role |
|---|---|
| What you give us to create and use an account (email, company name, …) | We are the controller |
| Data you (the merchant) enter in Senify or sync from Shopline, including your shoppers' personal data | You are the controller; we are the processor. We act only on your instructions and never use it for our own purposes |
If one of your shoppers wants to exercise a data right, they should contact you first. We help you respond.
3. What we collect
3.1 Sign-up
Company name, contact name (optional), email address, the address name and language you choose, and the IP address and time of sign-up. Used to create the account, send confirmation and invitation emails, and prevent abuse (limits on sign-ups per source).
3.2 Data inside Senify
Your user accounts and the customers, products, orders, documents and files you enter or upload. Every customer has a separate database.
3.3 When you connect Shopline
- The store handle (e.g.
my-store), the access token and the permissions granted. - Orders: order number, status, payment and fulfillment status, amounts, discounts, line items (SKU, quantity, price), shipping and refunds, and the order's buyer name, email, phone, shipping and billing addresses, and notes.
- We request permission to read orders and products. Currently we only read and store orders; product data is not stored.
- We do not request or store shoppers' payment card data.
3.4 Technical data
For operation and security, logs may record IP address, requested URL, time and browser type. Our web server does not keep a per-request access log; it records errors (for example failed connections) only. Logs are kept for up to 30 days.
3.5 Cookies
Signing in to Senify uses one strictly necessary session cookie. We use no advertising, behavioural tracking or third-party analytics, and our pages load no third-party tracking code. The sign-up page sets no cookies.
4. How we use data
- To provide, maintain and secure the service, including automatically syncing the Shopline orders you authorize.
- To send the service emails you need (sign-up confirmation, account invitation, trial-end and data-deletion notices).
- For security, abuse prevention and debugging.
- To answer your support requests and to comply with the law.
We do not sell personal data, do not use it for advertising, and do not use merchants' shoppers' data for our own marketing or analytics.
5. Who we share data with (sub-processors)
| Provider | Purpose | Data |
|---|---|---|
Oracle Cloud Infrastructure (Singapore, ap-singapore-1) | Servers, databases, file storage, local backups, monitoring | All operational data |
Google Cloud (Taiwan, asia-east1) | Off-site copy of the nightly backups only | Backup files of the operational data |
| Resend (data stored in the United States; we choose to send from its Tokyo node) | Sending confirmation and invitation emails | Recipient email, message content (including company name and links), delivery logs |
| Cloudflare | Domain DNS; forwarding of support mailboxes | Messages you send to support@ or info@ |
| Shopline | Data source you authorize | As permitted by the scopes you grant |
We disclose data otherwise only when the law requires it.
6. Where data is stored
Operational data (databases and uploaded files) and local backups are stored in Oracle Cloud's Singapore region (ap-singapore-1); an off-site copy of the nightly backups is stored in Google Cloud's Taiwan region (asia-east1). Your data is therefore processed in Singapore and Taiwan. Email-related data (recipient address, message content, delivery logs) is processed and stored by Resend in the United States, even though messages are sent from its Tokyo node; this data is therefore transferred from Taiwan to the United States. For transfers from the EU, UK and Switzerland Resend relies on the EU Standard Contractual Clauses and is certified under the EU-US Data Privacy Framework. Resend keeps delivery logs according to its own policy. We use only the providers listed above.
7. Retention
| Data | Retention |
|---|---|
| Senify account and operational data | While you use Senify. After a trial ends the account is disabled and, 90 days later, the data is deleted for good. Before that we email you twice (on day 60 and day 83 after the trial ends); you can contact us before then to extend the trial or convert it to a paid account |
| Sign-up records (email, company, IP) | Deleted together with the account; sign-ups whose email was never confirmed are deleted after 30 days |
| Orders synced from Shopline | After a merchant uninstalls, Shopline notifies us within 48 hours; we then delete all synced data of that store and remove its access token |
| A shopper's deletion request | We anonymize the personal data of that shopper's orders (name, contact details, addresses, notes) and keep the amounts, statuses and items needed for accounting |
| Nightly backups | Expire automatically after at most 37 days and are never used to restore data that was deleted on request |
| System logs | At most 30 days |
8. Security
- All connections use HTTPS (TLS 1.2+); Oracle Cloud encrypts storage volumes at rest by default.
- Each customer has a separate database; administrative access to servers is only by SSH with a private key (no password sign-in).
- Shopline's app secret is kept only in a dedicated sign-in service and never appears in any customer's system; requests between that service and customer systems are signed and time-limited.
- Access tokens are available to system administrators only.
No system is perfectly secure. If a breach affects your personal data, we will notify affected customers within 72 hours of becoming aware of it.
9. Your rights
Under Taiwan's Personal Data Protection Act and the GDPR (which Shopline requires us to honour for all merchants' users), you may request access, a copy, correction, restriction, deletion, portability, and may object to processing.
To exercise a right, email support@senifyai.com; we reply within 30 days. If you are a shopper of a merchant, please contact that merchant first. You may also complain to your supervisory authority.
10. Children
Senify is not directed to people under 18.
11. Changes
We will announce material changes on this page and email registered users before they take effect.
12. Contact
CENOQ CORPORATION (新諾資訊股份有限公司)
Rm. 1012, No. 205, Sec. 1, Dunhua S. Rd., Da'an Dist., Taipei City 106, Taiwan (R.O.C.)
Phone: +886 (02) 2711-3356
Email: support@senifyai.com