Privacy Policy

1. Introduction

Global AI Sentinel LLC ("we", "us", or "our") operates Sentinel GPT. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and handling your data in an open and transparent manner.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, password (encrypted)
• Chat Messages: Conversations with the AI assistant
• Uploaded Documents: Files you upload for analysis (Pro/Enterprise only)
• Payment Information: Processed securely through Stripe (we don't store card details)

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, IP address
• Performance Data: Error logs, response times, service metrics

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process your AI chat requests and provide responses
• Manage your account and subscription
• Improve and personalize user experience
• Send service updates and security alerts
• Prevent fraud and abuse
• Comply with legal obligations
• Analyze usage patterns to improve the Service

3.1 User Input Data

We collect prompts, questions, and other text submitted through the Services ("User Input") solely for the purpose of providing and improving the functionality of the Service. User Input may be logged and retained for diagnostics, abuse monitoring, and performance optimization.

3.2 Training Use Disclosure

We may use aggregated, anonymized data to improve our own service quality, but your specific prompts and conversations are not shared with AI model providers for training purposes.

4. Data Sharing & Third Parties

We do NOT sell your personal information. We may share information with:

4.1 Service Providers

• OpenAI: AI model provider for chat responses (see OpenAI Privacy Policy)
• Stripe: Payment processing (see Stripe Privacy Policy)
• Vercel: Hosting and infrastructure
• Turso: Database hosting

4.2 Legal Requirements

We may disclose information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

5. Data Retention

User Input Retention: User Input is stored for up to 180 days unless a longer period is required by law, contract, or security needs. Users may request deletion at any time by contacting privacy@globalaisentinel.com.

Account Deletion: If you request account deletion, we delete your account and associated data within 30 days, except where retention is required by law or a legal hold applies.

Legal Holds: If we receive a valid preservation request or are otherwise required to preserve records, we may place a legal hold that suspends deletion of some or all related records until the hold is lifted.

6. Data Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Access controls and authentication
• PII detection and redaction in logs

See our Security page for detailed information.

7. Your Rights & Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your conversation history
• Opt-Out: Unsubscribe from marketing emails
• Restrict Processing: Limit how we use your data

To exercise these rights, contact us at privacy@globalaisentinel.com

8. Cookies & Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences (theme, settings)
• Analyze usage patterns
• Improve performance and security

You can control cookies through your browser settings, but some features may not work properly if disabled.

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Children's Privacy (COPPA Compliance)

We do not knowingly collect personal information from children under 13. If such information is collected, it will be deleted promptly.

Parental Notice: Parents or guardians who believe their child has provided personal information to us may contact support@globalaisentinel.com to request review and deletion.

Age Requirement: The Service is intended for users 18 years of age and older. Users between 13-17 should only use the Service with parental consent and supervision.

11. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to be informed about data processing
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

12. CCPA Compliance (California Users)

California residents have specific rights under the CCPA, including the right to know what personal information we collect, the right to delete information, and the right to opt-out of the sale of personal information. We do not sell personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance of the updated policy.