Privacy Policy
Last updated: July 19, 2026
1. Introduction
SentraMind, Inc. ("SentraMind," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect
Account Information
When you register, we collect your name, email address, organization name, and billing information. This is necessary to provide and manage your access to the Service.
Security Data
When you use our alert triage or code scanning features, we process security alerts, code snippets, and repository metadata. This data is processed in real-time and is not stored permanently unless you explicitly configure data retention.
Usage Data
We automatically collect usage patterns, feature interactions, and performance metrics to improve the Service. This data is aggregated and does not contain your security findings or source code.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process transactions and manage subscriptions
- Send security alerts and service notifications
- Respond to support requests and communications
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
4. Data Processing with AI
Our Service uses large language models (LLMs) provided by Anthropic (Claude) to analyze security alerts and code. When you submit code or alerts for analysis:
- Data is processed in-memory and is not retained by the LLM provider
- We do not use your data to train AI models
- Enterprise customers can use VPC deployment to keep all data within their infrastructure
- Code is scanned and results are stored in your SentraMind database; raw source code is not persisted
5. Data Sharing
We do not sell your personal information. We may share data with:
- Service providers who assist in operating the Service (hosting, payment processing)
- Anthropic for LLM processing (subject to their data processing agreement)
- Law enforcement when required by law or valid legal process
- In connection with a merger, acquisition, or sale of assets (with notice to you)
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, access controls, and SOC 2 Type II compliance. While no method of transmission or storage is 100% secure, we take reasonable measures to protect your information.
7. Data Retention
We retain your account information for as long as your account is active. Security scan results and alert data are retained according to your plan limits. You may request deletion of your data at any time by contacting support@sentramind.dev.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Data portability — receive your data in a structured format
- Withdraw consent at any time
9. Cookies
We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies or tracking pixels. You can manage cookie preferences through your browser settings.
10. International Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required by applicable law.
11. Children's Privacy
The Service is not intended for individuals under 18. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or prominent notice on the Service at least 30 days before they take effect.
13. Contact Us
For privacy-related questions or requests, contact us at support@sentramind.dev.
SentraMind Pvt. Ltd.
Balkhu, Kathmandu
Nepal