Privacy Policy

Last updated: October 10, 2026

Sentria Inc. ("CargoLens," "we," "us," or "our") operates the CargoLens mobile application and web platform. This Privacy Policy explains how we collect, use, disclose, and protect your information.

1. Information We Collect

Account Information: Name, email address, company name, role, and site assignment when you create an account.

Inspection Data: Photos, signatures, notes, damage assessments, workflow responses, and timestamps associated with inspections. The app does not record device GPS location.

Device Information: Device type, operating system version, app version, and connection status for service delivery and troubleshooting.

Usage Data: Feature usage patterns, inspection counts, and workflow preferences to improve our service.

2. Device Permissions

  • Camera: Used to capture inspection photos and scan barcodes. Photos are attached to your organization's inspection records.
  • Storage: Saves inspection photos and data on the device so they can upload when the connection returns.
  • Network: Required to sync inspection data and photos to the cloud when connectivity is available.

3. How We Use Your Information

  • Provide, maintain, and improve our inspection management services
  • Process, store, and sync inspection data across your organization
  • Provide optional AI features when you choose to use them (see Section 4)
  • Send service-related communications and support responses
  • Generate analytics and reports for your organization
  • Monitor system health, prevent abuse, and ensure security

4. Third-Party Service Providers

We use the following third-party services to operate CargoLens:

  • Supabase (Supabase Inc., hosted on AWS us-east-1): Database, authentication, file storage for photos and signatures, and server functions. Data is stored in the United States.
  • Vercel (Vercel Inc.): Hosts the web management portal and this website, including anonymous page view analytics. United States.
  • OpenAI (OpenAI, L.L.C.): Optional AI photo damage analysis. An inspection photo is sent only when a user requests analysis. Under OpenAI's API terms, API data is not used for model training by default.
  • Anthropic (Anthropic, PBC): Optional AI assist that drafts custom inspection workflows. Only the workflow description text a user types is sent, not inspection records or photos. Under Anthropic's commercial terms, API data is not used for model training by default.
  • Sentry (Functional Software, Inc.): Mobile crash and error reporting, configured not to send IP addresses or user emails.
  • Resend (Resend, Inc.): Transactional email such as team invitations (invitee email, inviter name, organization code).

Service providers that do not process customer inspection data: Expo (app builds and update delivery, which receives device metadata such as OS and app version), Apple App Store and Google Play (distribution), and Cal.com (demo booking).

5. Data Security

  • Encryption in transit (TLS 1.2 or higher) and encryption at rest provided by our infrastructure providers
  • Auth tokens stored in OS-level secure storage (Keychain/Keystore)
  • Role-based access controls (admin, manager, inspector)
  • Sentria Inc. does not have its own SOC 2 report. Our infrastructure providers (AWS, Supabase, Vercel) maintain their own SOC 2 reports.

6. Data Retention

We retain your inspection data and photos for the duration of your active subscription. Upon account cancellation, data is retained for 30 days to allow reactivation, then permanently deleted. You may request earlier deletion at any time.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data and account.
  • Portability: Request your data in a structured, machine-readable format.
  • Restriction: Request that we limit processing of your data.
  • Objection: Object to processing of your data for certain purposes.
  • Withdraw Consent: Withdraw consent for optional features like AI analysis at any time.

To exercise any of these rights, contact us at privacy@cargolens.app. We will respond within 30 days.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To make a request, contact privacy@cargolens.app.

9. International Data Transfers

Your data is processed and stored in the United States. If you are located outside the US, your information will be transferred to and processed in the US. By using CargoLens, you consent to this transfer.

10. Children's Privacy

CargoLens is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact Us

For privacy-related questions or to exercise your rights:

← Back to home