Privacy Policy

1. Introduction

Sentrieve (“we”, “our”, “us”) operates the Sentrieve platform. This Privacy Policy explains how we collect, use, and protect your personal data.

[REPLACE: Add your company legal name and registered address here.]

2. Data We Collect

• Account data: Email address, name, password hash (bcrypt).
• Organization data: Organization name, connected integration tokens (AES-256-GCM encrypted at rest).
• Usage data: Token counts, message timestamps, indexing activity (no message content is logged).
• Third-party data: File metadata and content from connected Google Drive and Dropbox accounts, used solely to answer queries from your team.

3. How We Use Your Data

• To provide and improve the Sentrieve service.
• To authenticate users and protect accounts.
• To answer AI queries using your connected knowledge base.
• To send transactional emails (verification, password reset, invites).

4. Data Retention

Your data is retained for as long as your account is active. You may request deletion at any time from Settings → Account → Delete Account. We delete all personal data within 30 days of a valid deletion request.

5. Third Parties

We use the following sub-processors: [REPLACE: list your hosting provider (Vercel), database provider, AI provider (OpenAI/Anthropic), email provider, Sentry]. We do not sell your data to third parties.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, export, or delete your personal data. Contact us at [REPLACE: your DPO/privacy email].

7. Contact

Questions? Email [REPLACE: privacy@yourdomain.com].