SenseCoreAI is an AI-powered energy intelligence platform developed and operated by Olajide Ayoola, trading as SenseCoreAI, based in London, United Kingdom. We provide energy forecasting, anomaly detection, fuel poverty risk scoring, and compliance automation services to public sector organisations and commercial businesses in the United Kingdom.
For the purposes of UK data protection law, SenseCoreAI is the data controller in respect of personal data collected through this website (sensecoreai.com) and the SenseCoreAI platform (app.sensecoreai.com).
If you have any questions about this Privacy Policy or how we handle your data, please contact us at: olajide@sensecoreai.com
We collect the following categories of data:
Website enquiry and demo request data: When you submit a demo request or contact form, we collect your name, work email address, organisation name, sector, and any message you provide. This data is processed by Formspree (a third-party form processing service) and delivered to us by email.
Platform account data: When you or your organisation creates a platform account, we collect your name, work email address, organisation name, job role, and any access credentials you create.
Building and meter data: When you upload energy consumption data to the platform, we process half-hourly electricity and gas readings associated with buildings you manage. This data is not personal data in most cases — it relates to buildings, not individuals. Where meter data could identify a specific person (for example, in a single-occupancy property), it is treated as personal data and handled accordingly.
Usage and audit data: We log all user actions within the platform to an immutable audit table. This includes login events, data uploads, report generation, and API calls. This data is retained for audit, security, and compliance purposes.
Technical data: We collect standard web server logs including IP addresses, browser type, and pages visited. This data is used for security monitoring and is not used for marketing purposes.
We use the data we collect for the following purposes:
To provide the SenseCoreAI platform and services — including generating energy forecasts, anomaly alerts, fuel poverty risk scores, and compliance reports for your organisation.
To respond to demo requests and enquiries — your contact details are used solely to respond to your request and arrange a demonstration.
To maintain the security and integrity of the platform — audit logs are used to detect unauthorised access and support investigation of any security incidents.
To improve the platform — aggregated, anonymised usage data may be used to improve platform features and performance. No individual user data is used for this purpose.
To comply with our legal obligations — we may be required to retain certain data to comply with UK law, including financial records and audit requirements.
We do not use your data for advertising, profiling, or marketing to third parties. We do not sell your data to any third party under any circumstances.
Under UK GDPR, we rely on the following legal bases for processing your personal data:
Contract performance — processing your account data and building data is necessary to provide the services you have contracted with us.
Legitimate interests — processing audit log data and technical logs is necessary for our legitimate interest in maintaining platform security and integrity.
Consent — where we process data for purposes beyond those described above, we will seek your explicit consent.
Legal obligation — we may process data where required to comply with UK law.
All SenseCoreAI platform data — including building data, meter readings, account data, and audit logs — is stored exclusively on Amazon Web Services (AWS) in the eu-west-2 (London) region.
Your data never leaves the United Kingdom. We do not use cloud services in other regions for the storage or processing of platform data.
Demo request and contact form data is processed by Formspree, whose privacy policy is available at formspree.io/legal/privacy-policy. Formspree processes form submissions on servers within the European Economic Area.
We do not transfer personal data to countries outside the UK or EEA.
Website enquiry data: Retained for 12 months from the date of submission, after which it is deleted from our email systems.
Platform account data: Retained for the duration of your contract with us, plus 12 months after contract termination to support any post-contract queries.
Building and meter data: Retained for the duration of your contract, plus 7 years to support compliance and audit requirements under UK law.
Audit log data: Retained for 7 years in an immutable format to support security investigations, compliance audits, and regulatory requirements.
You may request earlier deletion of your data where this is consistent with our legal obligations — see Your Rights below.
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may request that we correct any inaccurate personal data we hold.
Right to erasure — you may request that we delete your personal data, subject to our legal obligations to retain certain data.
Right to restrict processing — you may request that we restrict how we use your data in certain circumstances.
Right to data portability — you may request a copy of your personal data in a structured, machine-readable format.
Right to object — you may object to processing based on our legitimate interests.
To exercise any of these rights, please contact us at olajide@sensecoreai.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.
SenseCoreAI implements the following security measures:
All data in transit is encrypted using TLS 1.2 or higher. All data at rest is encrypted using AES-256 encryption on AWS.
Access to the platform requires JWT authentication. Every endpoint enforces seven-level role-based access control (RBAC) — users can only access data relevant to their role and organisation.
Every user action is logged to an immutable audit table. Audit logs cannot be modified or deleted by any user, including administrators.
All platform infrastructure is deployed within AWS eu-west-2 (London) under a multi-tenant architecture — your organisation's data is logically separated from other tenants at every layer.
We conduct regular security reviews and maintain a Data Protection Impact Assessment (DPIA) which is available to NHS organisations on request for DSP Toolkit compliance purposes.
SenseCoreAI uses the following third-party services in the operation of the platform and website:
Amazon Web Services (AWS) — cloud infrastructure provider. All data stored in eu-west-2 (London). AWS Data Processing Agreement in place.
Formspree — website form processing. Used for demo request and contact forms only. Data processed within the EEA.
Vercel — website hosting. The marketing website (sensecoreai.com) is hosted on Vercel. No platform data passes through Vercel.
We do not use Google Analytics, Facebook Pixel, or any other advertising or tracking technology on this website or platform.
We may update this Privacy Policy from time to time to reflect changes in our practices or UK data protection law. We will notify registered platform users of any material changes by email. The date of the most recent update is shown at the top of this page.
If you continue to use the platform after changes are made, you are deemed to have accepted the updated policy.
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact:
Olajide Ayoola SenseCoreAI London, United Kingdom Email: olajide@sensecoreai.com
For complaints, you may also contact the Information Commissioner's Office (ICO): Website: ico.org.uk Phone: 0303 123 1113