Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you use Sentinel, you provide us with information including:

• Account Information: Email address, password (encrypted), and account preferences
• Entity Information: Business entity details (legal names, entity types, formation dates, states, EINs, registered agent information)
• Compliance Data: Action items, filing deadlines, tax obligations, compliance assessments
• Documents: Files you upload (operating agreements, formation documents, tax filings, etc.)
• Payment Information: Billing details processed securely through third-party payment processors (we do not store full credit card numbers)

1.2 Automatically Collected Information

When you access the Service, we automatically collect:

• Usage Data: Pages viewed, features used, time spent, interactions with the Service
• Device Information: Browser type, operating system, IP address, device identifiers
• Log Data: Access times, error logs, performance metrics
• Cookies: Session identifiers, authentication tokens, preferences (see Section 7 for details)

2. How We Use Your Information

We use your information to:

• Provide the Service: Calculate compliance scores, monitor deadlines, send notifications, store documents
• Improve the Service: Analyze usage patterns, identify bugs, develop new features
• Communicate with You: Send deadline reminders, account updates, service announcements
• Process Payments: Handle subscriptions, billing, and refunds
• Ensure Security: Prevent fraud, protect against unauthorized access, enforce our Terms of Service
• Comply with Legal Obligations: Respond to legal requests, protect our rights

3. How We Share Your Information

We only share your information in the following limited circumstances:

3.1 Service Providers

We work with trusted third-party vendors who help us operate Sentinel:

• Supabase: Database and file storage (encrypted)
• Vercel: Website hosting and delivery
• Email Service Providers: Transactional emails and notifications
• Payment Processors: Subscription billing (they do not share payment data with us)

These providers are contractually obligated to protect your data and only use it to provide services to us.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

3.3 Business Transfers

If Sentinel is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you before this happens.

3.4 With Your Consent

We may share information with other parties when you explicitly give us permission to do so (for example, if you authorize us to share data with your CPA or attorney).

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict authentication and authorization requirements
• Secure Infrastructure: Hosted on secure, audited platforms (Supabase, Vercel)
• Regular Security Audits: We monitor for vulnerabilities and apply patches promptly
• Employee Training: Our team is trained on data protection best practices

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide services to you
• Required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements)

When you delete your account, we will delete or anonymize your personal data within 30 days, unless we are required to retain it for legal reasons. Backup copies may persist for up to 90 days.

6. Your Rights and Choices

You have the following rights regarding your data:

6.1 Access and Portability

You can access, download, and export your data at any time through your account settings.

6.2 Correction

You can update or correct your information directly in the Service.

6.3 Deletion

You can request deletion of your account and all associated data by contacting info@compliantco.com.

6.4 Opt-Out of Communications

You can unsubscribe from marketing emails at any time. Note that we will still send transactional emails (e.g., password resets, deadline notifications) that are necessary for the Service.

6.5 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to request information about data collection, deletion, and to opt-out of sales (though we do not sell your data).

6.6 European Residents (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication, security, and core functionality
• Analytics Cookies: Help us understand how you use the Service (aggregated and anonymized)
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling certain cookies may limit functionality.

8. Third-Party Links and Services

Sentinel may contain links to third-party websites or services (such as registered agent services or legal consultations). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with information.

9. Children's Privacy

Sentinel is not intended for use by individuals under the age of 18. We do not knowingly collect information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using Sentinel, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through a notice on the Service. Your continued use of Sentinel after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: