Privacy Policy

1. Introduction

Sentro ("we", "us", or "our") operates the Sentro uptime monitoring platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you authenticate via a third-party provider (e.g., Google, GitHub), we receive your profile information from that provider.

Monitor Configuration

We store the URLs, endpoints, check intervals, and alert settings you configure for your monitors. This may include custom HTTP headers you provide for authentication.

Monitoring Data

We collect and store response times, status codes, and availability data from the endpoints you monitor. This data is retained according to your plan's retention period.

Usage Data

We automatically collect information about how you interact with our service, including IP addresses, browser type, pages visited, and feature usage patterns.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number, expiration date, or CVC. We retain only the last four digits and card brand for your reference.

3. How We Use Your Information

To provide, operate, and maintain the uptime monitoring service
To send you alert notifications when monitors detect issues
To process your transactions and manage your subscription
To communicate with you about service updates, security alerts, and support
To detect, prevent, and address technical or security issues
To analyze usage patterns and improve our service and user experience

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers: Third-party services that help us operate (e.g., Stripe for payments, cloud infrastructure providers, email delivery services)
Team Members: Other members of your organization who have been granted access to shared monitors and data
Legal Requirements: When required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit, SSRF protection for monitoring requests, role-based access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure.

6. Data Retention

Monitoring data is retained for the period specified by your plan (7 days to 1 year). Account information is retained as long as your account is active. You may request deletion of your account and associated data at any time.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Object to or restrict certain processing of your data
Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@sentro.dev.

8. Cookies

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how our service is used. You can control cookie preferences through your browser settings.

9. International Data Transfers

Your data may be processed and stored in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers, including Standard Contractual Clauses where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@sentro.dev.