Privacy Policy

SENTINEL ("we," "us," "our") is operated as a sole proprietorship by Craig Headlee in Woodinville, Washington. This Privacy Policy explains how we collect, use, and protect information when you use our web app at app.sentineliq.net and website at sentineliq.net.

1. Information We Collect

When you use SENTINEL, we collect:

• Account credentials — email address and a hashed password (we never see your raw password; authentication is handled by Supabase).
• Agent profile — name, brokerage, specialty, and farm ZIP codes you provide during onboarding.
• Chat content — messages you send in-app and the responses we generate.
• Optional contact data — if you use our Sphere of Influence tools, any contacts you add (name, phone, notes).
• Optional deal data — if you use our deal tracking, transaction details you provide.
• Usage analytics — which features you use, response latency, error rates. Aggregated and scoped to your account.
• Payment details — handled entirely by Stripe. We store a Stripe customer identifier but never see your card number.

2. How We Use Your Information

Your data is used solely to deliver SENTINEL’s services:

• Answer your chat queries with property data, market stats, and coaching.
• Maintain conversational context so responses are relevant to your prior messages.
• Calculate deterministic math (REET, net sheets, commissions, deadlines).
• Surface deadline alerts and optional morning action plans (Pro tier).
• Improve service quality and troubleshoot issues.

3. How We Share Your Information

We share limited data with infrastructure providers who process it on our behalf, bound by their own privacy commitments:

• Supabase — account authentication and database storage. Supabase Privacy Policy.
• Railway — application hosting. Railway Privacy Policy.
• Anthropic — processes message content via Claude AI to classify intent and generate responses. Anthropic does not use API-submitted content for model training. Anthropic Privacy Policy.
• Stripe — payment processing (only if you subscribe). Stripe Privacy Policy.
• Resend — transactional email delivery (trial welcome, weekly digest, deadline alerts). Resend Privacy Policy.
• Vonage (Nexmo) — phone-number verification on account signup. Phone numbers are never used for marketing. Vonage Privacy Policy.
• Cloudflare / Fastly — content-delivery network for our domains. Standard request logs (IP, user agent) only.

We do not share your data with ad networks, data brokers, or any third party for marketing purposes.

4. Data Retention

Account data is retained while your account is active. You can request deletion of your data at any time by emailing craig@sentineliq.net. We will delete your profile, contacts, deals, and chat history within 30 days of a verified request, except as required by law (e.g., records of payments subject to tax retention rules).

5. Your Rights

Washington residents have rights under Washington consumer privacy laws to:

• Know what personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information.
• Export your data in a portable format.

To exercise these rights, email craig@sentineliq.net with "Privacy request" in the subject line.

6. Security

We use industry-standard safeguards: encrypted transport (HTTPS/TLS), asymmetric JWT-based authentication (ES256 via Supabase JWKS), rate limiting, log redaction of sensitive fields, and prompt-injection defenses against adversarial inputs. No system is perfectly secure; we disclose breaches as required by law.

7. Children’s Privacy

SENTINEL is for licensed real estate professionals. We do not knowingly collect information from children under 13. If you believe we have, email us and we will delete it.

8. Changes to This Policy

We may update this policy occasionally. Material changes will be announced via an in-app notice and email to account holders at least 30 days before taking effect.

9. Contact

Questions about privacy? Email craig@sentineliq.net.