Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email, company details)
• Security monitoring data from your infrastructure
• Usage data and analytics
• Communication preferences and support interactions

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our security services
• Process and complete transactions
• Send technical notices, updates, security alerts
• Provide customer support
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent security incidents

3. Data Security

We implement industry-leading security measures to protect your data:

• End-to-end encryption for data in transit (TLS 1.3)
• AES-256 encryption for data at rest
• Multi-factor authentication (MFA)
• Regular security audits and penetration testing
• SOC 2 Type II compliance
• GDPR and CCPA compliant data handling

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With your consent
• To comply with legal obligations
• To protect rights, property, or safety
• With service providers bound by confidentiality agreements
• In connection with a merger, sale, or asset transfer (with notice)

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Security monitoring data is typically retained for 90 days unless otherwise specified in your service agreement.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent at any time

7. Cookies and Tracking

We use cookies and similar technologies to provide and improve our services. You can control cookies through your browser settings. Essential cookies are required for the platform to function properly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by relevant authorities.

9. Children's Privacy

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact:
Data Protection Officer
privacy@sentrynix.com

For GDPR-related inquiries:
dpo@sentrynix.com