Privacy and data use

Privacy Policy

This policy explains what Sentinal handles when you create an account, connect a service, use AI features, or manage a subscription.

Effective September 21, 2026

01

Information Sentinal handles

Sentinal handles information you provide and information needed to operate your account, including:

  • Your email address, name, sign-in information, and account identifier.
  • Your selected use cases, AI model preference, notification choices, and demo-mode setting.
  • Subscription records such as customer and subscription identifiers, plan status, trial and renewal dates, and cancellation status. Payment card details are entered with and handled by Stripe; Sentinal does not store full card numbers.
  • Connection details such as the service connected, account label, granted scopes, status, last sync time, and connection or sync events.
  • Recent information retrieved from services you authorize, such as email subjects, senders, dates, snippets and unread status; calendar event titles, descriptions, times, locations and guest counts; file, page, repository, issue, or message titles and limited preview information supported by each connection.
  • Your questions to the AI assistant and the assistant's responses.
02

How Sentinal uses information

Sentinal uses this information to:

  • Authenticate you, maintain your account, and apply your settings.
  • Connect to services you select and synchronize the recent information supported by each connection.
  • Build your overview, priorities, calendar, email, notes, statistics, and daily briefing.
  • Answer assistant questions using information retrieved from your own connected accounts.
  • Operate subscriptions, respond to payment status changes, and provide billing access.
  • Detect connection failures, show reauthorization status, and maintain connection event records.

Sentinal does not use connected-service data for advertising or sell that data.

03

Google OAuth and Google user data

Google connections use Google's OAuth authorization screen. You choose whether to authorize access, and Sentinal does not collect your Google password.

Depending on the Google service you connect, Sentinal requests these read-only permissions:

  • Gmail: basic profile and email identity, plus read-only Gmail access. A sync retrieves a limited recent set of inbox messages and stores message identifiers, subject, sender, date, snippet, unread status, and a link to the message. Sentinal does not send or modify email.
  • Google Calendar: basic profile and email identity, plus read-only calendar access. A sync retrieves a limited set of upcoming events from the primary calendar, including titles, descriptions, times, locations, guest counts, and event links. Sentinal does not create or modify events.
  • Google Drive: if this connection is made available and you authorize it, basic profile and email identity plus read-only Drive access. A sync retrieves a limited recent set of file metadata, including file name, type, modified time, owner display name, and viewing link. It does not retrieve file contents through the current implementation or edit Drive files.

Sentinal accesses Google data only after you authorize the relevant connection and only through the scopes displayed during authorization. The connection service manages the Google authorization credentials; Sentinal stores an encrypted connection handle used by its server to make authorized requests.

04

AI processing

When you ask the assistant a question or generate a briefing, Sentinal sends your prompt and relevant synchronized context to an AI gateway, which routes the request to the model provider you selected. The currently available models are provided by OpenAI or Google. That context may include email snippets, calendar details, file or page metadata, and other synchronized items relevant to the request.

Sentinal instructs the model to answer only from the supplied context. AI output may still be incomplete or incorrect, so it should not be treated as professional advice or as a substitute for checking the original source.

05

Service providers and disclosures

Sentinal uses service providers to operate the product. Information is disclosed to them as needed for:

  • Account authentication, hosted data storage, and application infrastructure.
  • OAuth connection brokering and authorized requests to connected services.
  • AI processing through the AI gateway and the selected model provider.
  • Payment processing and subscription management through Stripe.

Sentinal may also disclose information when required by law, to protect rights or safety, or in connection with a business reorganization, subject to applicable legal requirements.

06

Storage, retention, and your controls

Sentinal stores account records, settings, subscription status, connection records, synchronized items, connection-event records, and assistant conversations in its hosted backend. Access controls limit each signed-in account to its own user-facing records. Connection requests and AI requests are performed by server-side functions rather than exposing service credentials in the browser.

Sentinal does not currently apply a fixed automatic deletion period to these records. Information may remain until it is replaced by a later sync, removed through an available product action, or removed in response to an account or privacy request.

When you use the current disconnect control, Sentinal attempts to revoke access through the connection service, removes its stored connection handle, and is configured by default to remove synchronized items from that source. Connection-event records may remain. You may also revoke Sentinal directly from your Google Account permissions. Revoking access stops future access but does not itself delete your Sentinal account.

The current app does not provide a self-service account deletion control. To request access, correction, a copy, or deletion of account data, contact the Sentinal service owner through the support or purchase channel through which your account was provided. Requests may require identity verification and are handled subject to applicable law.

07

Browser storage and security

Sentinal uses browser storage and cookies needed to keep you signed in and remember interface state. The current app does not include advertising trackers.

Sentinal uses technical and access-control measures intended to protect information, but no online service can guarantee absolute security. Keep your sign-in credentials secure and disconnect a service if you no longer want Sentinal to access it.

08

Children and policy changes

Sentinal is not directed to children under 13, and the service is not intended for their use.

This policy may change as Sentinal's features and data practices change. The effective date on this page will be updated when a revised policy is posted.

Google account controls

You can review or revoke third-party access from your Google Account at any time.

Open Google connections