Privacy Policy

1. Who we are

This Privacy Policy describes how Sentrius Labs and Quantag (collectively “we,” “us,” “our,” or “the Company”) collect, use, store, and protect information when you access or use the Quantag service, including our website, tags, mobile scan flow, customer dashboard, and any related applications (collectively, the “Service”).

2. What we collect

2.1 Account information

• Company name, contact name, email address, phone number
• Mailing address (for hardware shipments)
• Password (stored as a salted hash — we never see your plaintext password)
• Two-factor authentication secrets, where enabled

2.2 Equipment and service data

• Photos of equipment nameplates, panels, and field conditions that you or your technicians upload
• Equipment manufacturer, model, serial numbers, and install dates you enter or we extract via OCR
• Scan history, symptom selections, diagnosis results, and service notes
• Mechanical room details and tag placements
• Service log entries and reports

2.3 Conversations with our AI agents

• Text and photos you send to our onboarding, diagnostic, Q&A, and support agents
• The agent's responses and the inputs/outputs logged to our internal training store (see Section 4)

2.4 Payment information

Payments are processed by Stripe. Card numbers and banking details are entered directly on Stripe's servers and never touch ours. We store only the Stripe customer and subscription identifiers and the billing status needed to run your subscription.

2.5 Usage and technical data

• Session cookies (to keep you logged in) and minimal server logs (IP address, user agent, request timestamps)
• Aggregate analytics about which features are used (Google Analytics, where your browser permits it)

3. How we use your data

• To operate the Service — authenticate you, serve your scans, process your subscription, deliver reports
• To communicate with you about your account, service issues, and product updates
• To protect the Service against abuse, fraud, and unauthorized access
• To improve and train our in-house AI agents, so diagnoses get more accurate, parts suggestions get more relevant, and Q&A answers get more useful. See Section 4.
• To generate aggregate, de-identified statistics about how the Service is used
• To meet our legal, tax, and regulatory obligations

4. Using your data to train our agents

Quantag runs its own AI models on its own infrastructure. When you interact with an agent (to diagnose a piece of equipment, look up parts, ask a follow-up question, etc.), the inputs and outputs are logged to our internal store and may be used to:

• Evaluate and improve the quality of agent responses
• Fine-tune and evaluate our models on real-world HVAC, plumbing, and heating scenarios
• Build curated knowledge bases and failure-pattern datasets that power future diagnoses

Before any data is used for training that could surface in responses to other customers, we remove personally identifying information — names, phone numbers, street addresses, email addresses, and the internal identifiers that tie a record to a specific customer or site.

We do not use data from your account to train AI models owned or operated by any third party. We do not license your data to AI developers.

If you would prefer your data not be used for training at all, contact us at Aaron@sentriuslabs.com. Opting out will not affect your ability to use the Service.

5. What we do NOT do with your data

• We do not sell your data to any third party, for any price, in any form.
• We do not share your data with advertisers or ad networks to build profiles about you.
• We do not send your photos, transcripts, or service data to external AI providers (OpenAI, Anthropic, Google Gemini API, Cohere, etc.). All AI inference happens on infrastructure we control.
• We do not expose one customer's data to another customer's dashboard. Per- account isolation is enforced on every request.
• We do not store your payment card numbers. Stripe handles that.

6. Third-party processors we use

We rely on a small number of vendors to run the Service. Each has access only to the data necessary to do its job:

• A major US cloud provider — hosts our application and database
• Stripe — processes payments and stores payment credentials
• A transactional email provider — delivers system emails from our domains
• Google Analytics — aggregate website usage statistics (when permitted by your browser)

Each processor is bound by its own contractual obligations regarding the handling of your data. We do not permit any of them to use your data for their own marketing or model-training purposes.

7. Your rights

You can, at any time:

• Access the account, equipment, and scan data we hold about you through your customer dashboard
• Correct account information through your account settings
• Export your service history and reports (Pro plan and above, or upon request to Aaron@sentriuslabs.com)
• Cancel your subscription from your Account page. Cancellation preserves your data so you can reactivate; it does not delete it.
• Request deletion of your account and all associated data by emailing Aaron@sentriuslabs.com. We will act on verified deletion requests within 30 days.
• Opt out of having your data used for agent training (see Section 4)

If you are a resident of the European Economic Area, the United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, and the CCPA/CPRA respectively — including the right to object to processing, request portability, and lodge complaints with a supervisory authority. Canadian residents have equivalent rights under PIPEDA. Contact us to exercise any of these rights.

8. How we protect your data

• All traffic between you and Quantag is encrypted in transit (HTTPS)
• Passwords are stored using an industry-standard salted key-derivation function — we never see the plaintext
• Administrative access to production systems requires multi-factor authentication
• Every request is authenticated, and access to customer data is restricted to the account that owns it
• AI inference runs on infrastructure we operate — your data does not leave Quantag's servers for AI processing

No system is perfectly secure. If we become aware of a breach that affects your personal information, we will notify you without undue delay and in accordance with applicable law.

9. Data retention

We keep your account data for as long as your account is active. If you cancel your subscription, your data is retained (but access is restricted per the Terms) so you can reactivate without loss. If you request deletion under Section 7, we remove your personal information from our live systems within 30 days.

De-identified, aggregated training data derived from your interactions may be retained beyond account deletion in order to preserve the quality of models already trained on it. This data contains no personally identifying information about you.

10. Cookies and tracking

We use a small number of cookies that are strictly necessary to run the Service (for example, the cookie that keeps you logged in). We use Google Analytics to understand site usage in aggregate; this sets additional cookies that your browser can block without affecting your ability to use Quantag.

We do not use cross-site tracking pixels, advertising cookies, or social media retargeting cookies.

11. Children

Quantag is a B2B service intended for professional use by licensed contractors and their technicians. It is not directed to children under 16, and we do not knowingly collect information from them.

12. International users

Quantag's servers are located in the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to that transfer.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top and, for significant changes, notify account holders by email. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. Contact us

Questions, opt-out requests, deletion requests, or complaints:

Sentrius Labs / Quantag
Privacy: Aaron@sentriuslabs.com
General: Aaron@sentriuslabs.com
Website: sentriuslabs.com