Privacy Policy
Last updated: February 2025
Zero Data Retention
Sentinel Proxy never stores, logs, or persists your prompt content or LLM responses.
All content flowing through Sentinel is processed entirely in memory for real-time threat analysis and is discarded immediately after the request completes. There is no database table, log file, or queue that holds your prompts. This is a core architectural decision, not a policy toggle.
What We Collect
We collect only what is necessary to operate the Service and provide your dashboard analytics:
- Account data — name, email address, and OAuth profile info (managed by Clerk)
- Billing data — payment method and subscription status (managed by Stripe; we never see your full card number)
- Usage metadata — per-request action taken (clean/neutralized/blocked), threat score, and latency in milliseconds
- API key metadata — key hint (last 8 characters), optional name label, creation date, and last-used timestamp
What We Do NOT Store
The following data is never written to disk, logged, or persisted in any form:
- Prompt content or messages sent through the proxy
- LLM responses returned to your application
- Request or response bodies of any kind
- IP addresses of end users making requests through your integration
Third-Party Services
The Service relies on the following third-party providers, each with their own privacy policies:
- Clerk — authentication and identity management. Clerk Privacy Policy
- Stripe — payment processing and subscription billing. Stripe Privacy Policy
- Vercel — frontend hosting and edge delivery. Vercel Privacy Policy
Cookies
Sentinel Proxy uses only essential cookies required for authentication (Clerk session cookies). We do not use analytics cookies, advertising trackers, or any third-party tracking scripts.
Data Retention
Account and billing data is retained while your account is active. Usage metadata (request counts, threat scores, latency) is retained for dashboard reporting purposes. If you delete your account, all associated data will be removed. Prompt content is never retained, as described above.
Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us. Since we do not store prompt content, there is no content data to request or delete.
Contact
Questions about this policy? Reach us at support@skyblue-soft.com. See also our Terms of Service.