Privacy policy

This policy explains how CloudLense (“we”) handles personal data in DataLense, available at my.datalense.app, and on this website. For the technical detail behind it, see Security and privacy.

This website

This site has no sign-up form and no advertising trackers, and it sets no cookies. We use PostHog in a cookieless mode to count page views and which parts of the site people use, such as which buttons are clicked. It stores nothing on your device, does not build a profile of you, and is switched off if your browser sends Do Not Track or Global Privacy Control. Our hosting provider keeps standard server logs, such as IP address and pages requested, to operate and secure the site.

What the app stores

• Your account: name, email address and sign-in details (Google, email code or passkey).
• Your workspace: business profile, members, roles and settings.
• Data from sources you connect: messages, contacts and files from WhatsApp or Telegram chats, and records from ERPNext or Odoo. Chats you set to Excluded are not kept.
• Usage counts for AI features: how many questions were asked and their cost, not the questions or answers.

How we use it

Only to provide DataLense to your workspace: to show your inbox and metrics, build records, answer your questions and send the webhooks you configure. We do not sell personal data or use it for advertising.

AI processing

AI is off for a new workspace until an owner turns it on, and only chats set to Full analysis are ever sent to a model. Phone numbers, emails, handles and links are masked first. Your workspace's data policy decides where models run: only on DataLense's own servers, on enterprise cloud models within DataLense's cloud account, or with any provider. Under the “any provider” policy, free third-party models may keep or train on what they receive.

Where it is stored

On Amazon Web Services, encrypted at rest. Credentials and keys are encrypted with a separate key per customer account.

Retention and deletion

Workspace owners choose how long messages are kept: forever, 1 year, 6 months, 90 days or 30 days. Removing a source deletes everything copied from it. Raw event payloads from providers are cleared after 30 days. To delete your account or workspace, write to us.

Your rights

You can ask to access, correct or delete your personal data, or withdraw consent, in line with the data protection laws that apply to you, such as the EU GDPR or India's Digital Personal Data Protection Act. If your business uses DataLense and you are one of its customers, please contact that business first; we will help them respond.

Contact

Questions or requests: contact@datalense.app.