Privacy policy

This Privacy Policy explains how Sun Data Corporation LLC (“ENTUM”, “we”, “us”) collects, uses, and protects personal data when you visit entum.ai (the “Site”) or interact with us. It applies to the Site and our marketing activities.

Customer content processed through the ENTUM platform is not covered by this Policy — it is governed by our customer agreements and Data Processing Agreement (DPA), under which we act as a processor/service provider, follow our customers' instructions, and never use customer content to train machine-learning models available to others.

1. Who we are

Sun Data Corporation LLC, registered at 340 Frunze St., Bishkek, Kyrgyz Republic. Contact for privacy matters: privacy@entum.ai.

2. What we collect and why

We deliberately collect very little on the Site:

• Name, work email, company, role, and answers you provide when booking a demo (via Cal.com) or emailing us — to respond to you, schedule and hold the meeting (Google Meet), and follow up as you'd reasonably expect. Legal basis: steps prior to a contract; legitimate interest.
• Email address, if you subscribe to updates — to send product updates; every email includes unsubscribe. Legal basis: consent.
• Aggregated, cookie-free site analytics (page views, referrers, country, browser) via Cloudflare Web Analytics — to understand Site usage. No cookies, no fingerprinting, no individual tracking. Legal basis: legitimate interest.
• Technical logs (IP address, request metadata) processed by our hosting/CDN provider Cloudflare — for security, abuse and DDoS prevention. Legal basis: legitimate interest.
• Careers applications (name, email, CV and message) — for hiring only; stored for 6 months after the process ends, then deleted. To request earlier deletion, email privacy@entum.ai. Legal basis: steps prior to a contract; legitimate interest.
• Vulnerability reports sent to security@entum.ai — for triage and remediation under our Vulnerability Disclosure Policy. Legal basis: legitimate interest.

We do not sell or share personal data for advertising, do not run third-party ad trackers, and do not make automated decisions with legal effect about you.

3. Service providers

We use a small number of providers to run the Site: Cloudflare (hosting, CDN, cookie-free analytics), Cal.com (demo scheduling), Google Workspace / Google Meet (email, calendar, video calls). Each processes data on our behalf under its own data protection terms.

4. International transfers

Our providers may process data in the United States and the European Union. Where personal data of EEA/UK/Swiss residents is transferred to countries without an adequacy decision, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework certifications of our providers.

5. Retention

Demo and contact correspondence: up to 24 months after last contact. Subscription data: until you unsubscribe. Analytics: aggregated, not tied to you. Security logs: up to 12 months. We delete or anonymize data when it is no longer needed.

6. Your rights

EEA/UK residents (GDPR): you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; where processing is based on consent, you may withdraw it at any time. You may lodge a complaint with your supervisory authority.

California residents (CCPA/CPRA): you have the right to know, delete, correct, and opt out of “sale”/“sharing” of personal information. We do not sell or share personal information. We will not discriminate against you for exercising your rights.

To exercise any right, email privacy@entum.ai. We respond within 30 days (GDPR) / 45 days (CCPA).

7. Security

We protect data with encryption in transit (TLS 1.2+) and at rest (AES-256), least-privilege access with MFA, and logging — see our Security page. If a breach affects your personal data, we will notify you and regulators as required by law.

8. Cookies

The Site itself does not set advertising or analytics cookies (our analytics is cookie-free). Strictly necessary cookies may be set by third-party tools you choose to open from the Site (e.g., Cal.com when you book a demo) — details in that tool's own notice. Embedded videos load third-party content only after you press play.

9. Children

The Site is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We will post any changes on this page and update the “Last updated” date; material changes will be highlighted on the Site.