Privacy Policy

Sen is a service operated by CNG Software LLC ("Sen", "we", "us", or "our"). In these documents, "you" and "your" mean the business or individual that creates an account and uses the service.

This Privacy Policy explains how we collect, use, share, and protect information in connection with the Service. It applies to our websites and dashboard and to the calling and messaging features we provide. By using the Service, you agree to this Policy.

We handle two broad kinds of information, and our role differs for each:

• Account information about you and your business. For this information, we act as the controller — we decide how it is used to run and improve the Service.
• End-customer information you provide or that is generated when we answer your calls and send your messages (for example, the phone numbers, names, call recordings, transcripts, and the fields you upload from your point-of-sale export such as last-visit, spend, visit count, and birthday). For this information we act as a processor acting on your instructions. You are the controller and are responsible for having a lawful basis and any required consent to collect and use it, and for responding to your end-customers' privacy requests.

Information you provide

• Account and business details: your name, email, business name, and the settings, hours, services, and knowledge-base documents you enter.
• Contact lists you upload or import (for example, phone numbers, names, and related fields from a point-of-sale export). We do not store the uploaded file itself for reminders; we store the extracted customer records and a summary of each send.
• Support communications you send us.

Payment information

• We use Stripe to process payments. We do not collect or store full payment-card numbers; Stripe handles card data directly. We receive limited billing details such as your plan, subscription status, and renewal date.

Information generated through the Service

• Call data: caller phone number, call time and duration, status, AI-generated summaries, recordings, and transcripts.
• Message data: the messages we send on your behalf, recipient number, timestamp, type, and delivery-related status, including opt-out (STOP) events.

Technical information

• Basic technical and device data needed to operate and secure the Service, and cookies as described below.

We use information to:

• provide, operate, maintain, and secure the Service, including answering calls and sending your messages;
• process payments and manage subscriptions;
• provide support and communicate with you about your account and service-related notices;
• monitor usage against plan allotments and prevent abuse, fraud, and violations of these terms;
• comply with legal obligations and enforce our agreements; and
• maintain and improve the Service.

We do not sell your personal information or your end-customers' personal information, and we do not use it for third-party advertising.

To answer calls, the Service streams call audio to speech-to-text, language-model, and text-to-speech providers, and it may record and transcribe calls so you can review call history and so we can secure and improve the Service. Recordings and transcripts are associated with your account and are accessible to you in the dashboard. You control call recording for your account and are responsible for any caller notice or consent your jurisdiction requires.

When you send messages through the Service, you are the sender and are responsible for obtaining recipient consent (see the Terms). We honor opt-outs: recipients who reply STOP are unsubscribed and suppressed from future reminder sends, and reminder sends are limited to daytime hours in the recipient's local time. We retain records of messages sent and opt-out events to operate the Service and support compliance.

Mobile information and opt-in data are not shared with third parties for their own marketing, and phone numbers collected for messaging consent are not sold.

We use a small number of strictly necessary and functional cookies to run the Service, including:

• an authentication/session cookie that keeps you signed in;
• a language-preference cookie that remembers your chosen interface language; and
• a cookie that remembers which of your businesses is active in the dashboard.

We do not use third-party advertising or cross-site tracking cookies. Because we use only essential and functional cookies, no separate cookie-consent banner is presented; you can control cookies through your browser, but disabling essential cookies will break sign-in.

We share information with vendors that process it on our behalf to run the Service, under agreements that limit their use of the information. Our key providers include:

• Supabase — application database, authentication, and file storage.
• Twilio — telephone numbers, voice connectivity, and SMS delivery.
• Vapi — real-time voice-call orchestration for the AI assistant.
• Deepgram — speech-to-text transcription during calls.
• ElevenLabs — text-to-speech voice generation during calls.
• OpenAI — the language model that powers the in-call assistant.
• Anthropic — automated column detection for reminder-list imports.
• Stripe — payment processing and subscription billing.
• HubSpot — our own customer-relationship records for account owners.
• Resend — transactional and notification email.
• Sentry — application error monitoring and diagnostics.

This list may change as the Service evolves. We will update this Policy to reflect material changes.

We share information only: with the service providers above to operate the Service; when required by law or to respond to lawful requests; to protect our rights, users, or the public, or to prevent fraud or abuse; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will seek to ensure the recipient honors this Policy. We do not sell personal information.

We retain account and business information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Call recordings, transcripts, message logs, and uploaded customer records are retained to provide the Service and are deleted or de-identified within a reasonable period after they are no longer needed or upon a valid deletion request, unless retention is required by law.

We use technical and organizational measures designed to protect information, including encryption in transit, row-level access controls that scope data to the owning account, and least-privilege access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights regarding information for which we are the controller, contact us at hello@cngsoftware.com. You can also update much of your account information directly in the dashboard.

If you are an end-customer of a business that uses the Service and you want to access or delete information that business holds about you, please contact that business directly — they are the controller of that information. We will assist the business as their processor.

Residents of California and certain other U.S. states may have specific rights, including the right to know the categories of personal information collected, the right to delete, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under applicable state law, and we do not use sensitive information for purposes requiring an opt-out. To exercise applicable rights, contact us at hello@cngsoftware.com. We will not discriminate against you for exercising your rights.

The Service is operated in the United States, and information is processed and stored in the United States and in the regions used by our service providers. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

The Service is a business tool intended for use by adults (18+) on behalf of a business. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example, by updating the date below or by email). Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Questions about this Policy or your information? Contact CNG Software LLC at hello@cngsoftware.com.