Privacy Policy

1. Introduction

Sentinel Gateway ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices you have in relation to your data. By using our Service you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: When you register we collect your name, company name, and email address. For paid plans we collect payment method details processed by Stripe, Inc.; we do not store raw card numbers.

Usage Data: We automatically collect request metadata — including timestamps, model names, token counts, latency, inferred cost, and routing decisions — for analytics, billing, and operational monitoring. We do not store the raw text content of your prompts or AI responses beyond a configurable short-term retention window.

Technical Data: IP addresses, browser type, and session identifiers collected automatically to operate and secure the Service.

3. How We Use Your Information

• To create and manage your account and authenticate you to the Service.
• To process payments and enforce plan-based quotas.
• To operate, maintain, and improve the Service.
• To send transactional emails (account confirmations, invoices, quota alerts).
• To comply with legal obligations and enforce our Terms of Service.

We do not use your prompt or response data to train AI models, nor do we sell your data to third parties for advertising purposes.

4. Cookies and Session Storage

We use a single HttpOnly, SameSite=Strict session cookie (sg_session) to maintain your authenticated session. This cookie is essential for the Service to function and cannot be opted out of while you are signed in. We do not use third-party tracking cookies or analytics cookies.

5. Data Retention

Account information is retained for the duration of your account and for up to 90 days after deletion. Request metadata (audit logs) is retained for up to 30 days by default. Paid subscribers may configure retention periods within their plan limits. Billing records are retained as required by applicable tax law.

6. Data Sharing

We share your data only with:

• LLM Providers (e.g. OpenAI, Anthropic) — your prompts are forwarded to the provider selected by your routing rules. Those providers' data-processing agreements apply.
• Stripe, Inc. — payment processing. Stripe's privacy policy governs payment data.
• Cloud Infrastructure Providers — hosting and database services operating under data processing agreements.
• Law Enforcement — only when required by a valid legal process (subpoena, court order).

7. Data Security

We implement industry-standard security measures including TLS in transit, encryption at rest for sensitive fields, and role-based access controls. API keys are stored as opaque tokens and are never logged in plaintext. Passwords are hashed using bcrypt with a work factor of 12 and are never stored or transmitted in plaintext.

8. International Transfers

Your data may be processed in data centres located outside your country of residence. Where applicable we rely on Standard Contractual Clauses or equivalent transfer mechanisms to protect your data when transferred internationally.

9. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete your personal data; object to or restrict processing; or request data portability. To exercise these rights, contact us at support@sentinelgateway.com. We will respond within 30 days.

10. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by sending an email to your registered address or by posting a prominent notice in the dashboard. The "Last updated" date at the top of this policy reflects the most recent revision.

12. Contact

For privacy-related questions or requests please contact us at support@sentinelgateway.com.