Short version: Senticly is built around a zero-knowledge encryption model. Your email content and credentials are encrypted with AES-256-GCM using a key derived from your password. We cannot read your emails — not because of policy, but because the decryption key never reaches our servers.
Senticly is an AI-powered email intelligence service operated by Stagi Servizi Tecnici. For privacy matters, contact us at software@stagiservizitecnici.com.
| Data | Purpose | Stored as |
|---|---|---|
| Username & email address | Account identity, password reset notifications | Plaintext in database |
| Password | Authentication | bcrypt hash only — never plaintext |
| PBKDF2 salt | Key derivation input (not the key itself) | Plaintext in database |
| Recovery key hash | Backup access verification | bcrypt hash only |
| Email credentials (IMAP/POP3) | Connecting to your mailbox | AES-256-GCM ciphertext |
| Cached email content | AI retrieval and search | AES-256-GCM ciphertext |
| Support ticket messages | Customer support | Plaintext (submitted by you) |
| Usage metrics | Plan limit enforcement (weekly AI message count) | Aggregate counts only |
We do not collect analytics, tracking pixels, advertising identifiers, or any data beyond what is listed above.
We are technically unable to read your email content or your email credentials. Both are encrypted with AES-256-GCM before being written to our database. The decryption key is derived from your password via PBKDF2 and lives only in your PHP session while you are logged in. It is never stored anywhere on our infrastructure.
This means:
We do not sell your data. We do not use your data for advertising. We do not profile you.
Your data is stored in an SQLite database on our server infrastructure. The following technical controls are in place:
The encryption key is held in memory only for the duration of your authenticated session and is never written to disk or database.
Your data is retained for as long as your account is active. You may request account deletion at any time by:
Upon deletion, all associated data — including encrypted email cache, credentials, usage records, and support tickets — is permanently removed. There is no recovery after deletion.
Support ticket content is retained for 12 months after ticket closure for legal and quality purposes, then deleted.
If you are located in the European Economic Area, you have the following rights under GDPR:
Note: Due to the zero-knowledge encryption model, we cannot provide the content of your encrypted emails in readable form — only the ciphertext, which is meaningless without your key.
To exercise any of these rights, contact software@stagiservizitecnici.com. We will respond within 30 days.
Senticly uses a single session cookie (aiescan_sess) to maintain your authenticated session. This cookie is:
We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
For any privacy-related requests, questions, or complaints:
You also have the right to lodge a complaint with your national data protection authority (e.g., Garante Privacy in Italy).