This Privacy Policy describes how Sentus.ai, Inc. ("Sentus", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use our property management platform, marketing website, and related services. It is intended to satisfy the disclosure requirements of the California Consumer Privacy Act / CPRA, the EU General Data Protection Regulation (GDPR), and other applicable privacy laws.

Sentus operates as a data processor on behalf of our property management customers (the "controller") under GDPR Article 28, and as a service provider under CCPA. Our customers are responsible for the lawful basis on which personal data is processed; Sentus is responsible for processing that data securely and only as instructed by the controller.

1. Information We Collect

Account information — name, email, phone, role, company affiliation.
Property and unit data — addresses, ownership, unit configurations.
Resident and applicant data — name, contact info, lease and application records, payment history.
Communication content — emails, SMS, chat, voice transcripts, and attachments processed through the platform.
Maintenance and workflow data — work orders, photo uploads, vendor activity.
Usage data — log timestamps, feature usage, device and IP information collected at standard request-handling layer.

2. How We Use Information

Deliver the contracted services to the property management customer.
Operate AI features (voice assistant, photo classification, drafting and summarization) — see ourAI Disclosure for the full description of how AI is used and your rights.
Process payments, screening, eSignature, tax filings, and other transactional workflows.
Communicate with users about their accounts and services.
Send marketing communications, with your consent and an unsubscribe option in every message.
Comply with legal obligations, respond to lawful requests, and protect the security of the platform.

3. AI Disclosure

Sentus uses AI in several parts of the product that customers and residents use. The full description, the consumer rights it triggers (including opt-out and appeal rights under applicable automated decision-making laws), and the risk-tier framing for each are published at/ai-disclosure.

4. Sub-Processors

A list of the third-party sub-processors that process personal data on Sentus's behalf is maintained at/sub-processors. Enterprise customers receive 30-day advance notice of new sub-processors as part of their Data Processing Addendum.

5. Your Privacy Rights

Depending on the jurisdiction in which you reside, you have one or more of the following rights with respect to your personal data. All requests are honored within 45 calendar days as required by CCPA and GDPR.

5.1 Right of Access / Right to Know

You may request a copy of the personal data Sentus holds about you. Authenticated users can initiate this request through the platform:

POST https://app.sentus.ai/api/v2/auth/data-export

Non-customer requests may be submitted toprivacy@sentus.ai.

5.2 Right to Deletion / Right to Erasure

You may request deletion of your personal data. Authenticated users can submit a deletion request through:

POST https://app.sentus.ai/api/v2/auth/data-request
{ "request_type": "deletion" }

Records subject to legal retention obligations (financial, SOX, regulatory) may be retained in redacted form; the retention basis is documented in this policy and in the sub-processor schedule.

5.3 Right to Opt Out of AI Profiling

You may opt out of any Sentus AI surface for your account. See theAI Disclosure for the opt-out flow and the surfaces it covers.

5.4 Right to Withdraw Electronic Delivery Consent

If you previously consented to receive lease documents electronically (ESIGN Act 15 U.S.C. § 7001), you may withdraw that consent at any time and request paper delivery of subsequent documents at no charge. Submit the request to privacy@sentus.ai or through your applicant portal.

5.5 Right to Appeal

If you believe Sentus has wrongly handled a privacy request, you have the right to appeal. Submit the appeal to legal@sentus.ai with the original request reference; we will respond within 30 calendar days.

6. Data Retention

Sentus retains operational records for 7 years for property management records. Voice call recordings are retained for up to two years. Audit logs are append-only. Records subject to legal hold or active litigation are retained until the hold is released. Deletion requests are honored consistent with these retention obligations.

7. Data Security

All data is encrypted in transit and at rest. Production processing runs on edge infrastructure with multi-region availability. Sentus maintains a SOC 2-aligned control framework (independent audit not yet started; certification planned) and limits employee access to customer data on a least-privilege basis.

8. International Data Transfers

Sentus's primary data residency is the United States. Where data is transferred outside the European Economic Area or United Kingdom, standard contractual clauses and other transfer mechanisms apply consistent with GDPR Chapter V.

9. Children

Sentus's services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected personal information from a child, please contact us and we will delete it.

10. Changes

Sentus may update this policy from time to time. The last-updated date appears at the top of the page. Material changes will be communicated to platform users through the platform or by email.

11. Contact Us

Privacy: privacy@sentus.ai
Legal: legal@sentus.ai