Last updated: September 4, 2026
This notice explains what Sentys Inc. does with personal information collected through this website. It covers the Funding Newsletter, the contact form, and the record we keep of visits to the site. It is written to meet the EU and UK General Data Protection Regulation (GDPR), Canada's Anti-Spam Legislation (CASL), Brazil's Lei Geral de Proteção de Dados (LGPD) and the California Consumer Privacy Act (CCPA). It does not create any contractual obligation beyond applicable law.
Who we are
Sentys Inc., 584 Castro St #245, San Francisco, CA 94114, USA, is the data controller for information collected here. For any question about this notice, or to exercise the rights described below, write to privacy@sentys.com or use our contact page. We answer within one month; where the law allows a longer period we will tell you why.
The Funding Newsletter
When you subscribe, the sign-up form collects:
- Your name and email address — so we can address and deliver the newsletter.
- Your institution and its country, and your state where applicable — some programs are restricted to certain institutions or states, and we use this to leave out calls you could not apply for.
- Your preferences — the funding regions you want covered, your topics, your career stage and your language. These decide what each edition contains for you.
- Whether you would like to hear about instruments — a separate, optional tick box. Subscribing to the newsletter is not permission for us to contact you about products; only that box is.
- A record of your consent — the date and time you subscribed, the IP address and browser your request came from, and the date you confirmed. We keep this as proof that you asked for the newsletter.
Purpose and legal basis. We use this information for one purpose: to send you the Funding Newsletter, filtered to opportunities you can apply for. The legal basis is your consent (GDPR Article 6(1)(a); LGPD Article 7, I). You can withdraw it at any time, and withdrawing it does not affect what we did while you were subscribed. We do not sell your information and we do not share it for anyone else's marketing.
Confirmed opt-in. After you sign up we email you a confirmation link. You are not added to the list until you click it.
Leaving or changing your subscription. Every edition carries an Unsubscribe in one click link that takes effect immediately, and an Edit subscription link where you can change your name, institution, regions, topics, career stage and language. The links carry a private token that identifies your subscription, so do not forward them. You can also unsubscribe by writing to us; you never need to give a reason.
How long we keep it. For as long as you are subscribed. When you unsubscribe we keep your email address, the fact that you unsubscribed and the date, so that we never email you again by mistake, together with the consent record for the time the law gives us to demonstrate that we had your consent. Everything else about the subscription is removed on request.
Where your data is stored and who processes it
Sentys is a US company and your information is stored in the United States. The following providers process it on our instructions under written data-processing terms:
- Salesforce, Inc. — our customer relationship management system, where subscriptions, preferences and consent records are kept and from which the newsletter is sent. Salesforce is certified under the EU-US Data Privacy Framework, its UK Extension and the Swiss-US Data Privacy Framework.
- Intuition Machines, Inc. (hCaptcha) — the sign-up form uses hCaptcha to tell people from automated scripts. hCaptcha receives the technical information it needs for that assessment and is governed by its own privacy policy.
- Google LLC — this website uses Google Analytics to count visits and see which pages are read. It sets cookies and receives a pseudonymous identifier and your IP address; we do not link analytics data to your subscription.
- Microsoft Corporation (Clarity) — we use Microsoft Clarity to see how pages are used, through heatmaps and recordings of anonymised sessions. It sets cookies and receives your interactions with the page, device and browser details and a truncated IP address. Form fields are masked in recordings.
- DB-IP (Ilmatic Group) — we hold a copy of its public IP-address-to-country table on our own server to tell which region you are visiting from. Your address is looked up locally and is not sent to DB-IP.
Our record of your visits
Besides the two analytics services, the site keeps its own log of visits. When it is active, your browser receives a first-party cookie (sentys_vid) that identifies it for 13 months, and each page you open is recorded with the time, the page, the page you came from, any campaign tags in the address, your browser language and browser type. Your IP address is not stored; it is used once to look up the network you are connecting from (for example a university domain), and that network name is kept instead. Where the network belongs to an institution, the record is transferred to Salesforce, our customer relationship management system, so that our sales engineers can see which institutions are interested in which instruments.
If you later give us your email address — by writing through the contact form or subscribing to the Funding Newsletter — that address is added to the record and the visits are linked to your contact or lead record in Salesforce. Until then the record is anonymous to us.
Legal basis and your region. If you visit from the European Economic Area, the United Kingdom or Switzerland, none of this — the analytics services or our own log — starts before you accept it in the banner (consent, GDPR Article 6(1)(a) and the ePrivacy rules); declining leaves the site fully usable. Elsewhere the log and the analytics services run on the basis of our legitimate interest in understanding who uses the site (GDPR Article 6(1)(f) where it applies), you see a notice on your first visit, and you can switch everything off at any time through “Cookie settings” in the footer. Switching off removes the sentys_vid cookie and stops both analytics services.
How long we keep it. Visit records are deleted 13 months after the last visit, on the website and in Salesforce. Declining sets a single cookie-free preference in your browser so we do not ask again. The site sets no other cookies except those needed for hCaptcha on the sign-up form.
If you are in the European Economic Area, the United Kingdom or Switzerland, your information leaves that area when it reaches us. The transfer to Salesforce rests on its Data Privacy Framework certification; the transfer to Sentys itself rests on your explicit consent to receive a newsletter from a US company (GDPR Article 49(1)(a)), which you give when you subscribe.
The contact form
Information you submit through the contact form — your name, email address, message and any file you attach — is used to answer your enquiry and is recorded against your enquiry in the same CRM system. The legal basis is the steps you ask us to take before a possible contract (GDPR Article 6(1)(b)) and our legitimate interest in answering people who write to us (Article 6(1)(f)). We keep enquiries for as long as needed to deal with them and with any business relationship that follows.
Your rights
You may ask us to tell you what personal information we hold about you, to correct it, to delete it, to restrict how we use it, or to give it to you in a portable form. To have your visit record deleted before the 13 months are up, send us the identifier shown under “Cookie settings” in the footer, or simply switch tracking off there. You may object to processing based on our legitimate interests, and you may withdraw consent at any time. We do not make automated decisions about you. Write to privacy@sentys.com or ask through our contact page; we may ask you to confirm your identity first.
If you are in the EEA or the UK and believe we have not handled your data lawfully, you may complain to your national supervisory authority (in the UK, the Information Commissioner's Office). If you are in Brazil, you may complain to the Autoridade Nacional de Proteção de Dados. California residents have the right to know what we collect and to have it deleted; we do not sell or share personal information within the meaning of the CCPA.
Changes
If this notice changes materially we will update this page and, for subscribers, mention it in the next edition of the newsletter.