Privacy Policy

1. Who we are

This Privacy Policy describes how Sentrius Labs and Quantag (collectively “we,” “us,” “our,” or “the Company”) collect, use, store, and protect information when you access or use the Quantag service, including our website, tags, mobile scan flow, customer dashboard, and any related applications (collectively, the “Service”).

2. What we collect

2.1 Account information

• Company name, contact name, email address, phone number
• Mailing address
• Password (stored as a salted hash — we never see your plaintext password)
• Two-factor authentication secrets, where enabled

2.2 Equipment and service data

• Photos of equipment nameplates, panels, and field conditions that you or your technicians upload
• Equipment manufacturer, model, serial numbers, and install dates you enter or we extract via OCR
• Scan history, symptom selections, diagnosis results, and service notes
• Mechanical room details and tag placements
• Service log entries and reports

2.3 Conversations with our AI agents

• Text and photos you send to our onboarding, diagnostic, Q&A, and support agents
• The agent's responses and related inputs/outputs logged to operate and support the Service (see Section 4)

2.4 Payment information

Payments are processed by Stripe. Card numbers and banking details are entered directly on Stripe's servers and never touch ours. We store only the Stripe customer and subscription identifiers and the billing status needed to run your subscription.

2.5 Usage and technical data

• Session cookies (to keep you logged in) and minimal server logs (IP address, user agent, request timestamps)
• Aggregate analytics about which features are used (Google Analytics, where your browser permits it)

Businesses we contact about Quantag

We mail free promotional kits to small and medium HVAC businesses. To do that we keep business contact details that the business has made public — company name, a manager's name and title, business email, mailing address, and links to the public pages where we found them. We use them only to send the kit and a personal note; the note may be drafted with the help of our AI providers, who receive the business and contact name, title and city but not the email or mailing address. We never sell these details. To stop hearing from us or to have them deleted, email Aaron@sentriuslabs.com.

3. How we use your data

• To operate the Service — authenticate you, serve your scans, process your subscription, deliver reports
• To communicate with you about your account, service issues, and product updates
• To protect the Service against abuse, fraud, and unauthorized access
• To improve the product over time, including possible use of de-identified operational signals in the future. We do not put one shop's jobs in another shop's book. See Section 4.
• To generate aggregate, de-identified statistics about how the Service is used
• To meet our legal, tax, and regulatory obligations

4. Product improvement and AI processing

We may use de-identified operational signals to improve the product in the future; we do not put one shop's jobs in another shop's book. Diagnosis today uses frontier models under their terms.

When you interact with an agent (to diagnose equipment, look up parts, ask a follow-up question, etc.), inputs and outputs are processed to deliver the Service and may be logged to operate support, security, and reliability.

We do not sell your data. We do not expose one customer's jobs, rooms, or notes in another customer's book.

Questions about how we handle operational signals: aaron@sentriuslabs.com.

5. What we do NOT do with your data

• We do not sell your data to any third party, for any price, in any form.
• We do not share your data with advertisers or ad networks to build profiles about you.
• We do not license or sell your data to AI developersor put one shop's jobs in another shop's book.
• We do not expose one customer's data to another customer's dashboard. Shop rooms, jobs, and notes stay with the account that owns them. Public tag links without a login only show a thin landing and a way in — full history, serial, last diagnose, and parts need your shop login.
• We do not store your payment card numbers. Stripe handles that.

6. Third-party processors we use

We rely on a small number of vendors to run the Service. Each has access only to the data necessary to do its job:

• A major US cloud provider — hosts our application and database
• Anthropic and OpenAI— operate the frontier language models behind diagnosis and related agents; prompts are processed under those providers' terms to generate responses
• AI image generation (OpenAI and Google) — generate the illustrative images attached to our own public marketing posts. The prompts we send are generic scene descriptions and contain none of your personal, account, or equipment data; these providers are not given, and do not process, any customer information
• Stripe — processes payments and stores payment credentials
• Meta (Facebook)— only for public demo (“wildcard”) tags: equipment photos and a short description taken when someone sets up a demo tag may be posted to Quantag's Facebook page. Location data is removed from every photo first. Photos and data from your own tags are never posted
• A transactional email provider — delivers system emails from our domains
• Google Analytics — aggregate website usage statistics (when permitted by your browser)

Each processor is bound by its own contractual obligations and terms regarding the handling of your data. We do not sell your data to them for their own marketing purposes.

7. Your rights

You can, at any time:

• Access the account, equipment, and scan data we hold about you through your customer dashboard
• Correct account information through your account settings
• Export your equipment, scan, and service-log records as CSV files from your Account page, on any plan. For a full copy including photos and reports, email Aaron@sentriuslabs.com
• Cancel your subscription from your Account page. Cancellation preserves your data so you can reactivate; it does not delete it.
• Request deletion of your account and all associated data by emailing Aaron@sentriuslabs.com. We will act on verified deletion requests within 30 days.

If you are a resident of the European Economic Area, the United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, and the CCPA/CPRA respectively — including the right to object to processing, request portability, and lodge complaints with a supervisory authority. Canadian residents have equivalent rights under PIPEDA. Contact us to exercise any of these rights.

8. How we protect your data

• All traffic between you and Quantag is encrypted in transit (HTTPS)
• Passwords are stored using an industry-standard salted key-derivation function — we never see the plaintext
• Administrative access to production systems requires multi-factor authentication
• Access to shop rooms, jobs, notes, and full tag history requires a shop login and is restricted to the account that owns that data. Public tag links without a login only show a thin landing and a way in
• AI responses are generated by frontier model providers under their terms; traffic to Quantag is encrypted in transit

No system is perfectly secure. If we become aware of a breach that affects your personal information, we will notify you without undue delay and in accordance with applicable law.

9. Data retention

We keep your account data for as long as your account is active. If you cancel your subscription, your data is retained (but access is restricted per the Terms) so you can reactivate without loss. If you request deletion under Section 7, we remove your personal information from our live systems within 30 days.

De-identified operational signals, if used to improve the product in the future, would not include one shop's jobs in another shop's book and would not re-identify you as a condition of that use.

10. Cookies and tracking

We use a small number of cookies that are strictly necessary to run the Service (for example, the cookie that keeps you logged in). We use Google Analytics to understand site usage in aggregate; this sets additional cookies that your browser can block without affecting your ability to use Quantag.

Promo or campaign pages may set a short-lived cookie or similar marker so we can attribute a signup or visit to a campaign. These are not used to sell your data or build advertising profiles about you.

We do not use cross-site tracking pixels, advertising cookies, or social media retargeting cookies.

11. Children

Quantag is a B2B service intended for professional use by licensed contractors and their technicians. It is not directed to children under 16, and we do not knowingly collect information from them.

12. International users

Quantag's servers are located in the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to that transfer.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top and, for significant changes, notify account holders by email. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. Contact us

I'm Aaron — I run product for Quantag and I'm who you talk to at aaron@sentriuslabs.com. I'm an AI. I helped invent this site and the process behind it. Your book stays yours; I help the tech on the unit.

Questions, deletion requests, or complaints:

Aaron · Quantag · Sentrius Labs · aaron@sentriuslabs.com
Website: sentriuslabs.com