Privacy Policy

Effective October 21, 2026 · Version 2026-10-21

Senuly ("Senuly", "we", "us") is operated by Donghun Jang, an individual based in South Korea. We run senuly.com and app.senuly.com (the "Service"). This policy explains what personal information we collect, why, who we share it with, and the choices you have. It is part of our Terms of Service.

We are located in South Korea. Our customers are mainly in the United States, and your information is processed in the United States and in other countries where our providers operate (see "Where your information goes").

1. What we collect

Account information. When you sign in with GitHub or Google we receive your name, email address, profile picture and account identifier from that provider. We don't receive your password.

Product and repository information. When you connect a product, we read what you authorize: repository contents through the GitHub App you install (the files, structure and documentation of the repositories you choose), your landing page and the pages you point us to. We keep summaries and metadata we build from them, such as what the product does and how it is organized, and we process the files themselves while a task runs. When you ask for a pull request, Senuly writes the changes to a branch in your repository.

Your content. Messages in the team channel, proposals you approve or reject, files you upload, and the posts, carousels, videos and other Output made for you.

Connected social accounts. If you connect a social account to publish from, we store the access token we need (encrypted), the account's name and ID, and, after you post, the public performance numbers of posts we published for you, such as views, clicks and likes.

Google Search Console. If you connect Google Search Console, we receive read-only access to that Google account's Search Console properties and its email address. We store the access (encrypted) and, for the property you choose, the searches, pages, impressions, clicks, click-through rate and average position Google reports for the last 28 days, read about once a week. We use it only to show you and the team how your site does in Google Search and what to improve; parts of it may be sent to our AI provider to plan that work. We don't use it for advertising, don't sell it, and don't use it to train AI models. Disconnect in Settings or at myaccount.google.com/permissions to stop the readings. Senuly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Billing information. Payments are processed by Whop. We receive your plan, payment status, renewal dates and credit balance, not your full card number.

Usage and device information. Pages and features you use, your browser and device type, IP address, approximate location, and error logs. We collect this with cookies and similar technologies (see section 5) and in server logs. Pages load fonts from Google Fonts, so Google receives your IP address when a page loads.

Consent records. When you accept our Terms and this policy we record which version and when.

2. How we use it

• To provide the Service: connect your product, run the agents, produce Output, publish what you approve, measure results and suggest what to do next.
• To process payments, apply credits and prevent fraud and abuse.
• To keep the Service secure, fix bugs, and understand which features are used, so we can improve it.
• To contact you about your account, security, billing, and changes to our terms. We send product emails only to those who haven't opted out, and each one has an unsubscribe link.
• To comply with the law and enforce our terms.

AI processing. To do the work, we send the parts of your information a task needs to our AI provider (see section 3). This can include your product summary, your messages in the team channel, drafts, files you attach and, for code tasks, code from the repositories you authorize. We don't use your content to train AI models, and the agreement we use with our AI provider doesn't allow it to train on content sent through its service.

3. Who we share it with

We don't sell your personal information. We share it with:

We may also disclose information when the law requires it, to protect rights and safety, or in a merger or sale of the business (we'll tell you if your information is affected).

4. How long we keep it

We keep your information while your account is open. When you delete your account (Settings, or see our Data Deletion page) we delete your personal information and content from our systems promptly, and copies in backups are removed as the backups expire. We don't control our AI provider's own systems. Under its terms as currently published, inputs and outputs sent through its API are normally deleted within 30 days, and may be kept longer, up to 2 years, if its systems flag them as a possible violation of its usage policy, or if the law requires. We keep what the law requires or what we need for a legitimate purpose after that: records of payments and tax, records that you accepted our terms, and security and fraud logs.

5. Cookies and similar technologies

We use a cookie to keep you signed in (shared between senuly.com and app.senuly.com) and local storage to remember settings and what you have already read. We don't use advertising or analytics cookies.

6. Your choices and rights

You can see and change most information in Settings, disconnect any account at any time, and delete your account. You can also email [email protected] to ask us to:

• tell you what we hold about you and give you a copy,
• correct it,
• delete it,
• stop using it for a purpose, such as analytics.

We'll check that a request comes from you and answer promptly, within the time the law requires. If we turn you down, we'll tell you why.

7. Children

You must be at least 14 to use the Service. We don't knowingly collect information from anyone under 14. If you think we have, email [email protected] and we'll delete it.

8. Security

We protect information with encryption in transit, encryption of the access tokens of the accounts you connect, and row-level access controls on our database so that each account only reaches its own data. No system is perfectly secure. If a breach affects you, we'll tell you and the authorities as the law requires.

9. Where your information goes

We operate from South Korea and use providers who store and process information in the United States and other countries. By using the Service you understand that your information goes to those places, whose data protection laws may differ from yours. Where the law requires it, we use contracts and other safeguards for these transfers. These transfers happen when you use the Service, over encrypted connections, so that the Service can run and produce Output. If you don't want your information transferred, you can stop using the Service and delete your account.

10. Changes

We'll update this policy when our practices change. For material changes we'll tell you in the app or by email first. The version and date are at the top.

11. Contact

Donghun Jang
Privacy questions and requests: [email protected]