California Privacy Notice

Effective date: April 3, 2026 · Last updated: June 30, 2026 · Applies to California residents

This Notice is for California residents who use the SentRate™ website at sentimentratings.com, documentation surfaced next to our brand, storefront distributed Clients, support correspondence, and other contact pathways described collectively as the Services. Sentiment Ratings Group LLC is referred to here as Company, we, or our.

We provide this Notice next to our general Privacy Policy because the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), calls for a California specific summary of categories of personal information collected, business purposes, disclosures, and rights. The Privacy Policy contains the fuller operational narrative, including information we collect, how we use personal information, who receives personal information, retention, and statutory rights that apply more broadly. If an older copy of this Notice ever disagrees with the Privacy Policy, rely on the document with the later “Last updated” date or email privacy@sentrate.com for clarification.

What we actually record depends on how you interact with us. Visiting a few static pages differs from sending long email threads or diagnostics. The chart below therefore describes realistic subsets. Even minimal records can still belong to a CPRA category.

Across the Services as currently operated:

We do not sell personal information for money.
We do not display third party advertisement units on sentimentratings.com for behavioral marketing, and our native apps do not include advertising SDKs.
We do not combine your app content with purchase or ad profiles from data brokers.
We do not operate third party web analytics or tag management services, packaged analytics SDKs, or similar end user behavioral measurement on the marketing site at this time, and our apps do not embed analytics SDKs used to track engagement across installations.
On launch our apps check a third-party service for a newer or minimum required version and any launch notices, sending a pseudonymous installation identifier, IP address, and basic app and device information. We use this only to keep the app current and secure and to show launch notices, never for advertising, profiling, or cross-app tracking.
Our apps do include a third-party crash diagnostics service we use to fix defects. This is diagnostic data, not analytics, advertising, or cross-app tracking, and it is not sold. The Privacy Policy describes what a crash report contains.
If we introduce other measurement or optional telemetry in the future, we will update this Policy before collection begins, revise dependent pages (such as our California disclosures), refresh consent mechanisms where legally required, and document data flows for app store questionnaires.

1. California collection purpose disclosure matrix

The table reflects categories of personal information Californians may share with us during a typical twelve month period. It is intentionally minimal. If we expand processing materially, we update the Privacy Policy, this Notice, storefront disclosures, and supporting documents first.

Chart 1. CPRA style summary of categories, purposes, disclosures, and sale or sharing
Category referenced	Representative examples past twelve months	Business or commercial purposes	Operational recipients	Sold or shared for cross context behavioral ads
Identifiers plus Cal Civ 1798.80(e) customer record overlap when volunteered	IP addresses inside hosting logs. Email headers when you write us. Names, phone numbers, or postal fragments in voluntary messages. Device model strings inside diagnostics or crash snippets testers forward voluntarily. A pseudonymous app installation identifier and IP address sent by Clients to an app update service provider when they check for an app update, launch notices, or configuration. When a Client crashes it sends a crash report (the error and stack trace, app version, device model, operating system version, and a pseudonymous installation identifier) to our third-party crash diagnostics provider.	Deliver static pages, answer mail, comply with law, defend claims, secure hosting, and improve reliability without using data for behavioral ads.	Hosting, DNS, content delivery, security vendors, cloud infrastructure subcontractors, an app update service provider, a crash diagnostics provider, advisers, insurers, regulators, courts, acquiring parties, internal staff with strict need	Not sold. Not shared for cross context behavioral advertising today.
Internet or electronic network activity	Requested URLs, referrers, timestamps, HTTPS outcomes, user agent strings, and other request metadata our hosting surfaces for delivery and troubleshooting.	Operate, troubleshoot, secure hosting, detect abuse, and keep TLS healthy.	Hosting security subprocessors advisers regulators auditors counterparties diligence teams narrowly scoped operators	Not sold. Not shared for cross context behavioral advertising today.
Geolocation coarse	Coarse regional context may appear where hosting logs include abbreviated IP-derived geography typical of content delivery routing. SentRate does not request device location permissions or collect precise location or location history through the Services described here.	Operate, secure, troubleshoot incidents, and fulfill lawful requests.	Hosting security advisers regulators auditors acquiring parties internal narrowly scoped responders	Not sold. Not shared for cross context behavioral advertising today.
Commercial or employment related information volunteered	Business context from signatures, procurement references, beta questionnaires, attachments, or similar snippets you choose to send.	Respond to inquiries, manage vendor relationships, satisfy legal duties, and keep operations safe without reselling data for ads.	Mail hosting advisers counterparties regulators diligence teams narrowly scoped responders	Not sold. Not shared for cross context behavioral advertising today.
Sensitive personal information	Typically not collected through the Services beyond what you voluntarily send. Clipboard, pickers, and device biometrics are governed by your platform unless you share content with us directly.	Operate securely, follow instructions you give us, and supervise vendors under contract.	Hosting, security partners, professional advisers, insurers, regulators, courts, diligence teams, and internal staff with a need to know.	Not sold. Not shared for cross context behavioral advertising today.

Important. Content you create in storefront Clients ordinarily stays on your device unless you choose to export it or use optional cloud services described in that product’s notice.

2. Sensitive personal information

When sensitive personal information appears, we apply the heightened safeguards described in the Privacy Policy. You may request additional use limitations where the CPRA allows.

Selling. We do not sell personal information consistent with how we use that term in our policies today.

Sharing for cross context behavioral advertising. We do not share personal information for cross context behavioral advertising as the CPRA defines that phrase for the Services we operate today.

4. Financial incentives

We do not operate a financial incentive or loyalty program that asks you to trade CPRA privacy rights for a price discount or similar benefit today.

5. Profiling that produces legal effects

We do not use profiling to make solely automated decisions about California residents with legal or similarly significant effects in housing, employment, benefits, or comparable areas. If we ever do, we will describe the logic in advance and honor the opt outs the law requires.

6. Sources

Information you voluntarily send via email, support tickets, diagnostics, or crash bundles.
Technical data collected automatically by our hosting and security stack, as summarized above.
Client environments when testers voluntarily share crash artifacts through platform or vendor feedback tooling.
Automatic crash diagnostics from Clients via a third-party crash diagnostics service.

7. Retention

Log retention can be up to many months.
Crash reports and the app update and configuration check requests are retained by the third-party providers only as long as needed to investigate defects and operate the update and version service, under each provider's own retention terms.
Legal correspondence persists as needed to demonstrate compliance.
Application data persists on your device until you delete it or uninstall clears sandbox storage unless you opt into backups you control.

8. California privacy rights

Right to know the categories of personal information we collected, disclosed, sold, or shared, including specific pieces and portability where feasible.
Right to delete personal information, subject to lawful exceptions described in our Privacy Policy.
Right to correct inaccurate personal information we retain, where feasible.
Right to opt out of sale or sharing for cross context behavioral advertising. See How to submit requests below, including when we do not sell or share today.
Right to limit use and disclosure of certain sensitive personal information where the CPRA allows.
Right to be free from retaliation for exercising your privacy rights, except where the law permits a narrow exception.

9. How to submit requests verification timing appeals

You may submit a California privacy request through either channel below so we can confirm your identity and scope of the request.

Primary. Email privacy@sentrate.com with subject line California Privacy Request, and describe the right you want to exercise with enough detail that we can match records.
Alternate. Email support@sentrate.com referencing California Privacy Request in the first lines so frontline staff route the thread to privacy counsel.

We aim to respond within forty five days and may take up to an additional forty five days when reasonably necessary telling you why and how to contact us about the extension.

Appeals. If you disagree with our decision, email privacy@sentrate.com with subject California Privacy Appeal, summarizing what you believe was wrong. We will respond within the timeframes the law requires.

Because behavioral advertising is not part of these Services today, industry alliance opt-out tools you may use on other publishers’ sites are informational for broader web browsing outside SentRate.

10. Authorized agents

Authorized agents must provide signed authorization or other proof the CPRA recognizes, plus enough information about the consumer, so we can verify the request and avoid fraud.

11. Global Privacy Control

We do not process or act on Global Privacy Control (GPC) signals through our marketing website or native Clients because we do not track you or collect personal information for cross-context behavioral advertising. California residents may submit opt-out and other privacy requests using How to submit requests above.

12. Non discrimination

We will not deny you goods or Services, charge different prices, or provide a different level or quality of goods or Services solely because you exercised a privacy right, unless applicable law expressly allows a permitted difference.

13. Users under eighteen

We do not knowingly sell or share personal information at all as those terms are used under the CPRA, and this includes consumers under 16. If you believe a minor has provided information to us improperly, email privacy@sentrate.com promptly.

14. Shine the Light

California Civil Code § 1798.83 permits California residents to request, once per calendar year, certain information about disclosures of categories of personal information we may have made to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes as described in that statute. To make a Shine the Light request, email privacy@sentrate.com with Shine the Light Request in the subject line and enough detail for us to process your inquiry.

15. Contact

Sentiment Ratings Group LLC
California privacy requests
privacy@sentrate.com

General Privacy Policy and commercial terms Terms of Service.