Who we are
Sentivel Ltd is the data controller for the personal data described here. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For any privacy question, email privacy@sentivel.com.
What this policy covers
There are two kinds of data to keep separate:
- Your data, where we are the controller. Account and usage data about you and your team’s relationship with Sentivel. This policy covers it.
- Your customers’ data, where we are the processor. Anything your team enters into Sentivel about your own end users, for example a status-page subscriber’s email. We process that only on your instructions, under our DPA.
What we collect
Account data
Your name, email address, and an optional phone number you add so we can page you. Passwords are handled by our authentication provider and stored only as a secure hash: we never see them in the clear. We also hold the workspaces, roles and settings you create.
Technical and usage data
When you use the Service we collect basic technical data such as IP address, device and browser type, and timestamps, plus error and performance diagnostics. We use this to operate, secure and improve the Service. Where we only need to compare an IP or email address (rate limits, password attempts on a status page), we store a keyed hash of it, not the address.
Billing
If you pay, Stripe handles your card. We hold a customer reference, your plan and invoices, and, for a referred trial, the card's fingerprint (a token Stripe gives us that identifies a card without revealing it) so one card can't claim a referral reward twice.
Feedback
If you send us feedback from the app, we keep your message, its category and the page you sent it from. If you delete your account, the feedback stays without your name on it.
What we don’t do
We don’t run advertising trackers or sell your data, and we don’t build advertising profiles. Secrets you store (such as request credentials for a monitor) are encrypted at rest.
How we use it, and our legal bases
- To provide the Service: creating your account, running checks, sending alerts and rendering your status page. Legal basis: performance of our contract with you.
- To keep it secure and working: diagnostics, abuse and fraud prevention, and rate-limiting. Legal basis: our legitimate interests in a safe, reliable service.
- To communicate with you: service messages, and product news only where you’ve asked for it. Legal basis: legitimate interests, or your consent for marketing.
- To meet legal obligations: for example tax, accounting and responding to lawful requests. Legal basis: legal obligation.
Product analytics and attribution
We measure how Sentivel is used so we can improve it. None of this is used for advertising or shared with anyone for their own purposes.
- Where you came from. With your consent (the cookie banner), we record the first link or campaign that brought you to us and the page you landed on. If you sign up, that is saved on your account once and never updated. Legal basis: consent, which you can withdraw by clearing the cookie or emailing us.
- How far you got in onboarding. We store the last onboarding step you reached, so we can see where people stop. Legal basis: legitimate interests in improving the product.
- Product usage counts. Daily counts of actions per workspace (for example, monitors created), kept for 400 days. Legal basis: legitimate interests.
- Website analytics. Vercel Web Analytics counts page views on our own website and app without cookies and without identifying you. It does not run on our customers' status pages.
Visitors to status pages
Status pages belong to our customers, who decide what they say. When you visit one, we process the minimum needed to serve it safely: your IP address transiently, a keyed hash of it for rate limits and password attempts (kept for a day), the cookies listed below if you unlock or dismiss something, and error reports with no IP address, cookies or request bodies.
If you report an issue through a workspace's report link, we keep what you submit, including your email address if you give it, as part of that workspace's incident. If you use Sentivel's Slack commands or buttons, the workspace receives your Slack name with the action. In both cases the workspace is the controller and we process it for them.
Status-page email subscriptions
If a visitor subscribes to a status page for updates, we use a double opt-in: we email a confirmation link and only ever send updates to a confirmed address. An address that isn't confirmed within 48 hours is deleted. Every update includes a one-click unsubscribe, and a subscriber can leave at any time. We don’t use these addresses for anything other than the updates they asked for.
A workspace moving from another status-page provider can import its existing subscribers. They are added as confirmed on that workspace's instruction, as its processor: the workspace is responsible for having their consent, and every email still carries the unsubscribe link.
Text messages (SMS)
If you add and verify a mobile number in your account, we use it to send you operational text messages: one-time verification codes, and incident / on-call alerts when a service you’re responsible for needs attention. You opt in by adding and verifying your own number in account settings. We only ever text a number that has been verified, and you can remove it at any time. These are transactional service messages; we never send marketing texts.
Message frequency varies with your alerting activity, and message and data rates may apply. Reply HELP to any message for help, or STOP at any time to opt out and stop all SMS to your number. Full details are in our SMS Terms & Messaging Policy.
Your mobile information (including your number and opt-in) will not be sold or shared with third parties for promotional or marketing purposes. We disclose your number only to the messaging provider that delivers these texts on our behalf (see Sharing and sub-processors), solely to send the messages you’ve asked for.
International transfers
Your data is stored in the European Economic Area: our database is in Ireland and our application compute is pinned to Dublin. Some of our providers are based in the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards: the EU Standard Contractual Clauses together with the UK Addendum (and the Data Privacy Framework where a provider is certified), so it keeps an equivalent level of protection.
Monitoring probes. To check a site from more than one place, we run probes in Washington and San Francisco (United States), Tokyo (Japan) and Sydney (Australia) as well as Dublin. A probe receives the check itself: the address to check, the method, timeout and what counts as healthy, and sends back the result. A monitor's custom request headers and body (for example an API key) are sent only to the Dublin probe, unless the monitor is set to send them from every region.
How long we keep data
We keep personal data only as long as we need it for the purposes above. These are the windows our systems apply:
When you delete your account
Your account and sign-in identity are deleted, along with any workspace where you are the only member (with its monitors, incidents, status pages, uploaded images and screenshots, and the copies of its pages on our mirror). In workspaces you shared with others, the workspace's records stay, because they belong to that workspace: your name on incident updates is replaced with “Former member”, alert delivery records addressed to your email or phone are redacted, invitations to your address are deleted, and any Google Calendar connection is revoked. Feedback you sent stays without your name. Billing records are kept as long as tax law requires, and backups roll over within 7 days.
How we protect data
We use appropriate technical and organisational measures: encryption in transit and at rest for stored secrets, hashed credentials and API tokens, strict tenant isolation between workspaces, optional two-factor authentication, access controls and monitoring, and a hosting region pinned close to our database. No system is perfectly secure. We will notify you and the regulator of a personal-data breach where the law requires.
Your rights
Under UK and EU GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to processing, to data portability, and to withdraw consent where we rely on it. You can download a copy of the personal data we hold about you at any time from Account → Export. To exercise any of these rights, email privacy@sentivel.com. We may need to verify your identity, and we’ll respond within the time the law allows.
Children
Sentivel is a tool for professionals and isn’t directed at children. We don’t knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we’ll delete it.
Changes to this policy
We may update this policy as the Service or the law changes. We’ll update the “last updated” date and, for material changes, give you notice where we can. The current version always lives at this page.
Contact and complaints
Email privacy@sentivel.com with any privacy question. If you’re in the UK and think we’ve mishandled your data, you can also complain to the Information Commissioner's Office (ICO), though we’d appreciate the chance to put things right first.