Privacy Policy

Effective Date: June 25, 2026

This Privacy Policy explains how Sunate, Inc. ("Sunate," "we," "us," or "our") collects, uses, discloses, and protects personal information through our websites, customer relationship management platform, Sunate Copilot, messaging channels, applications, integrations, data products, and related services (collectively, the "Services").

1. Scope and our roles

Sunate provides business software and data tools for home-services companies. Depending on the context, Sunate may act in different privacy roles.

For account administration, billing, website operations, security, product analytics, customer support, Sunate's own account-holder communications, and certain independently sourced property or business-contact data, Sunate generally determines why and how personal information is processed.

When a Sunate customer uploads or manages information about its own customers, prospects, workers, vendors, or projects, that customer generally determines why and how the information is used, and Sunate processes the information on the customer's behalf. This Policy does not replace the customer's own privacy notice.

2. Personal information we collect

Depending on the Services used, we may collect:

• Account and profile information: name, work email, mobile number, password or authentication information, profile image, organization, job title, role, language, time zone, and preferences.

• Commercial and billing information: plan, subscription, trial, invoice, transaction, payment status, tax information, and billing contact details. Full payment-card details are generally collected by our payment processor rather than stored by Sunate.

• CRM and project information: contacts, leads, deals, job details, addresses, notes, tasks, tags, estimates, proposals, contracts, measurements, reports, schedules, warranties, signatures, photos, videos, audio, PDFs, and other files.

• Communications information: SMS, WhatsApp, email, support requests, message content, attachments, delivery status, timestamps, sender and recipient information, opt-in and opt-out records, and related metadata.

• AI interaction information: prompts, instructions, conversations, generated content, tool calls, action history, feedback, voice transcripts, images, documents, and the context used by Sunate Copilot.

• Integration information: identifiers, authorization tokens, account metadata, and content needed to connect services such as Gmail, Google Calendar, maps, accounting, payments, storage, electronic signatures, communications, suppliers, and project-photo platforms.

• Property, business, and lead information: property addresses, parcel or ownership information, business-contact information, permits, property characteristics, geographic data, and enrichment attributes obtained from customers, public records, or licensed data providers.

• Device and usage information: IP address, browser, device, operating system, pages and features used, timestamps, referral information, cookies, local storage, logs, diagnostics, crash information, and security events.

• Inferences: predictions or estimates generated from other information, such as likely service needs, property characteristics, language preferences, or lead fit. Inferences may be inaccurate.

Please do not submit Social Security numbers, full financial-account credentials, medical records, or other highly sensitive information unless a feature expressly supports that data and you have a lawful basis to use it.

3. Sources of information

We collect information:

• Directly from account holders, website visitors, and people who communicate with us.

• From a customer's administrators, users, forms, imports, websites, and connected systems.

• From public records, government sources, licensed providers, data partners, and suppliers.

• From identity, payment, communications, hosting, analytics, security, and integration providers.

• Automatically from browsers, devices, cookies, logs, and use of the Services.

• Through permitted derivation, matching, and inference.

4. How we use information

We may use personal information to:

• Provide, operate, configure, personalize, and maintain the Services.

• Authenticate users, manage workspaces, route messages, and enforce permissions.

• Process subscriptions, payments, renewals, trials, and account administration.

• Run Sunate Copilot and other AI-enabled features, including understanding requests, generating content, and carrying out user-authorized actions.

• Deliver account, support, security, report, job-status, scheduling, reminder, and task communications through selected channels.

• Connect and synchronize third-party services selected by an authorized user.

• Provide property, business-contact, lead, and enrichment features.

• Provide support, troubleshoot errors, monitor reliability, and improve usability.

• Detect fraud, abuse, security incidents, and violations of our agreements.

• Develop and improve the Services using information as permitted by law, including aggregated or de-identified information where appropriate.

• Communicate about service changes, security, support, billing, and legally permitted Sunate products.

• Comply with law, respond to valid legal requests, enforce agreements, and protect rights, safety, and property.

5. Artificial intelligence

Sunate Copilot uses artificial intelligence to interpret requests, draft and generate content, summarize information, and take authorized workflow actions.

To perform a request, Sunate may provide contracted AI providers with the prompt and relevant context, such as selected CRM records, conversation history, files, images, audio, or connected data. We seek to limit information to what is reasonably needed for the requested feature.

AI output may be inaccurate, incomplete, or unsuitable. Users should review material outputs and actions before relying on or sending them. See our AI Disclosure.

6. How we disclose information

We may disclose personal information:

• To service providers and subprocessors that host, secure, support, communicate, analyze, process payments for, or otherwise help operate the Services.

• Within a customer's organization to workspace owners, administrators, authorized users, collaborators, and recipients according to permissions and instructions.

• To connected services when an authorized user enables an integration or directs Sunate to send or synchronize information.

• To professional advisers and transaction participants in connection with audits, financing, insurance, mergers, acquisitions, reorganizations, bankruptcy, or asset transfers.

• For legal, security, and safety purposes when reasonably necessary to comply with law or legal process, enforce agreements, prevent fraud, investigate incidents, or protect rights and safety.

• With consent or at your direction.

• In aggregated or de-identified form when the information cannot reasonably identify a person and use is permitted by law.

A current provider list appears on our Subprocessors page.

7. SMS, WhatsApp, and mobile information

Sunate's account-holder messaging program

Existing Sunate account holders may separately and optionally consent to recurring automated, non-marketing SMS messages from Sunate about their Sunate account and requests they send to Sunate Copilot.

Consent is not a condition of purchasing or using Sunate. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help.

We may retain information reasonably necessary to demonstrate and administer consent, including the account, mobile number, consent language and version, source, date and time, message delivery information, and opt-in or opt-out event. See our SMS Terms and SMS Consent pages.

Messages sent by Sunate customers

A Sunate customer may use the Services to communicate with that customer's own contacts. The customer is responsible for its own notices, lawful basis, consent, campaign registration, message content, and opt-out handling. Sunate processes those contact and communication records on the customer's behalf.

Mobile-data marketing restriction

Sunate does not sell or share mobile numbers, SMS opt-in data, or messaging consent records with third parties or affiliates for their own marketing or promotional purposes. We may disclose limited mobile information to communications, hosting, security, AI, and support providers solely as necessary to operate the requested messaging service, as required by law, or at the account holder's direction.

8. Sale, sharing, and targeted advertising

Sunate does not sell customer workspace content for third-party behavioral advertising.

Sunate may provide property, public-record, business-contact, or lead-enrichment information as part of a subscribed service where permitted by law and consistent with applicable source terms. Some state privacy laws define "sale" or "sharing" broadly. If an applicable law treats a particular disclosure as a sale or sharing, eligible individuals may submit an opt-out request through Privacy Choices.

Sunate does not knowingly sell or share personal information of people under 16.

9. Google user data

If you connect a Google service, Sunate's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We access Google data only to provide user-facing features you request, such as authentication, calendar scheduling, Gmail synchronization or drafting, maps, and related workflow automation. You may disconnect access through Sunate or your Google account controls.

10. Cookies and similar technologies

We use cookies, local storage, pixels, SDKs, and similar technologies for authentication, security, preferences, performance, analytics, and permitted attribution. More information appears in the Cookie Policy.

11. Data retention

We retain information for as long as reasonably necessary to provide the Services, maintain the business relationship, fulfill the purposes described in this Policy, meet legal and accounting obligations, resolve disputes, enforce agreements, prevent abuse, and protect security.

Retention varies by data type, account status, customer instructions, backups, provider behavior, and legal requirements. Consent, suppression, transaction, security, and legal records may be retained longer when reasonably necessary.

12. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant separation, encrypted network transport, logging, and provider security controls where appropriate.

No method of transmission or storage is completely secure. Users are responsible for protecting credentials, devices, permissions, exports, and connected accounts. See our Security Overview.

13. International processing

Sunate and its providers may process information in the United States and other countries where they operate. Those locations may have privacy laws different from the laws where you live. When required, we use appropriate contractual or other transfer safeguards.

14. Privacy rights and choices

Depending on your location and our role, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about processing; withdraw consent; opt out of certain sale, sharing, targeted advertising, or profiling; limit certain uses of sensitive information; and appeal a denied request.

Requests are subject to verification and legal exceptions. If information is controlled by a Sunate customer, contact that customer first. We will assist the customer as required.

Submit requests through Privacy Choices or email legal@sunate.app. We do not unlawfully discriminate against people for exercising privacy rights.

15. Communications choices

• Use the unsubscribe link in a Sunate marketing email.

• Reply STOP to opt out of Sunate Copilot SMS.

• Reply HELP for SMS assistance.

• Manage available integrations and account settings through the Services.

• Use browser or device controls for cookies and similar technologies.

Transactional, security, billing, or service communications may continue where necessary.

16. Children

The Services are intended for business users who are at least 18 years old and are not directed to children. We do not knowingly collect personal information directly from children under 13 through account registration.

17. Changes to this Policy

We may update this Policy as the Services, law, or our practices change. We will post the revised Policy and update the effective date. We may provide additional notice where a change is material or legally required.

18. Contact

Sunate, Inc.
legal@sunate.app