Privacy Policy

SentinelIQ collects only the minimum data necessary to provide the service. We do not sell your data, run advertising, or share your information with third parties except as required to operate the platform. This policy describes what we collect, why, and how long we keep it.

Account information. When you register, we collect your email address, a display name, and a hashed password. We never store your password in plain text.

Analysis history. We record which companies you have analyzed, the resulting scores, red flags, and generated reports. This data is associated with your account and is used to enforce the free-tier usage limit (5 fresh analyses per calendar month) and to let you revisit past results.

Watchlist. If you add companies to your watchlist, we store that list under your account.

Error feedback. If you submit a flag issue report via the "Report an issue" feature, we log the analysis ID, the flag ID, and the message you wrote. This is stored in server logs and is not attached to a permanent database record.

We do not run third-party analytics (no Google Analytics, no Meta Pixel, no tracking cookies). We do not collect IP addresses beyond what is incidentally captured in server access logs (which rotate automatically). We do not collect payment information — there is currently no paid tier.

We do not use cookies beyond the JWT session token required to authenticate your requests. There are no tracking, advertising, or preference cookies.

Google Gemini. Governance and narrative analysis sends news text to Google's Gemini API. This means excerpts of recent news coverage about a company you analyze are transmitted to Google. We do not send your personal information or account details to Google. Google's data use is governed by its API terms of service.

Yahoo Finance (via yfinance). Financial data is fetched from Yahoo Finance using the open-source yfinance library. Ticker lookups are transmitted to Yahoo. No personal data is shared.

RSS news feeds. News headlines are fetched from public RSS feeds (Google News). No personal data is included in these requests.

Infrastructure. The backend runs on Render and the frontend runs on Vercel. Both providers may retain server access logs. Their respective privacy policies apply to infrastructure-level data.

Analysis results and associated red flags and reports are retained indefinitely to support the trend history feature (which lets you see how a company's Integrity Score changes over time across multiple runs). Watchlist data is retained until you remove items or delete your account.

In-memory caches (financial data, news) expire automatically after 2–24 hours and are not persisted to the database.

You may request deletion of your account and associated data at any time by contacting us through the feedback mechanism in the application. We will process deletion requests within 30 days. Analysis results that do not contain personally identifiable information may be retained in aggregate or anonymized form.

Passwords are stored as bcrypt hashes. Authentication uses short-lived JWT tokens. All data in transit is encrypted via TLS. We apply rate limiting on authentication and analysis endpoints to reduce abuse risk. No security measure is perfect — if you discover a vulnerability, please report it through the feedback mechanism.

This policy may be updated from time to time. The effective date above reflects the most recent revision. Material changes will be noted here. Continued use of SentinelIQ after a policy update constitutes acceptance of the revised terms.

Questions about this privacy policy can be directed to the team via the feedback mechanism available within the application.