Privacy Policy

Last updated: 18 March 2026

1. Introduction

Sentinel ("we", "our", or "us") operates the Sentinel Device Manager platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you register, we collect your name, email address, organisation name, and billing information. Passwords are managed by our authentication provider (Supabase) and are never stored in plaintext.

Device Data

When devices are enrolled, the Sentinel agent collects: hostname, hardware identifiers, operating system version, CPU model, memory and disk capacity, installed software inventory, network adapter information, and real-time performance metrics (CPU usage, memory usage, disk space).

Telemetry and Usage Data

We collect telemetry from enrolled devices including heartbeat signals, performance metrics, and software inventory reports. This data is used solely to provide the device management service to your organisation.

3. How We Use Your Information

To provide, maintain, and improve our device management platform
To monitor device health, security posture, and compliance
To execute software deployments and remote scripts as initiated by your administrators
To generate reports and analytics for your organisation
To process billing and manage your subscription
To communicate important service updates and security notices
To provide customer support

4. Data Isolation and Multi-Tenancy

Each organisation's device data is stored in a logically isolated database schema. Your data is never co-mingled with other organisations' data. Access to your data is restricted to authenticated members of your organisation based on their assigned roles.

5. Data Security

We implement industry-standard security measures to protect your data:

All data in transit is encrypted using TLS 1.2 or higher
Device authentication tokens are unique per device and hashed using SHA-256
On-device tokens are encrypted using Windows DPAPI (Data Protection API)
Administrative access is protected with JWT authentication and role-based access control
All administrative actions are recorded in an immutable audit log
Database backups are encrypted at rest

6. Data Retention

Device telemetry data is retained for the duration of your subscription plus 30 days. Upon subscription cancellation, we retain your data for 30 days to allow for reactivation, after which it is permanently deleted. You may request immediate deletion at any time by contacting our support team.

7. Third-Party Services

We use the following third-party services:

Supabase — Authentication and identity management
Stripe — Payment processing and subscription billing
PostgreSQL — Primary data storage (self-hosted)

We do not sell, trade, or otherwise transfer your data to any other third parties.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a machine-readable format
Withdraw consent for data processing

Depending on your jurisdiction, you may have rights under applicable data protection laws (such as the GDPR, CCPA, or other local regulations). You may lodge a complaint with your local data protection authority if you believe your privacy has been breached.

9. Children's Privacy

Sentinel is a business-to-business service intended for use by IT administrators. We do not knowingly collect personal information from children under 13. Device data collected from student-assigned devices is managed by and accessible only to your organisation's administrators.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@sentinel.webpress.solutions