PRIVACY POLICY

What we collect

The data we collect

We collect only the data we need to operate the Services. This includes:

• Waitlist applications. When you apply for beta access, we collect your email address and, optionally, your Telegram handle, a description of your trading activity, the tools you use, and your reason for joining.
• Partnership inquiries. When you submit a partnership request, we collect your name or handle, email address, Telegram handle, community type and size, and your message.
• Communications. If you contact us by email or through our community channels (Discord, Telegram), we receive the information you choose to share.
• Questionnaire responses. If you answer our trader questionnaire, we collect your answers and, only if you choose to leave them, your email address, Telegram handle and X handle.
• Trading terminal. When you sign in with a Solana wallet, we process your public wallet address, the IP address and browser details of your login sessions, your settings, rules and orders, your trading activity in the terminal, and your referral and rewards data. We do not collect your name or email to use the terminal, and we never receive your private keys.
• Scraper licence. To activate and validate a licence, the scraper sends your licence key and a hardware identifier to our licence server. We also hold the email address the licence was issued to.
• Usage and technical data. When you visit the website, our hosting and analytics providers process limited technical data such as anonymised page views, approximate region, browser type, and device type.
• Payment data. If you subscribe to a paid plan, payment is handled by NOWPayments, a third-party payment processor. Your wallet, private keys, and seed phrase stay in your own wallet and are never shared with, transmitted to, or accessible by Sentinel AI at any point. We receive your email address, the plan you chose and confirmation that the payment completed.

Purpose & legal basis

How and why we use your data

We use personal data to provide and improve the Services, evaluate and manage beta access, respond to inquiries, process subscriptions, maintain security, and comply with our legal obligations.

Where the GDPR applies, we rely on the following legal bases:

• Consent: for joining the waitlist, receiving product updates, and optional communications. You may withdraw consent at any time.
• Performance of a contract: to provide the Services you sign up for and process payments.
• Legitimate interests: to secure our Services, understand aggregate usage, and respond to your requests, where these interests are not overridden by your rights.
• Legal obligation: where we are required to process data to comply with applicable law.

Service providers

Third parties and sub-processors

We do not sell your personal data. We share it only with trusted service providers that process data on our behalf under appropriate agreements:

• Vercel: website hosting and Vercel Web Analytics, which counts page views without cookies and without identifying you. Because it stores nothing on your device, it runs without a consent choice.
• Resend: delivery and storage of form submissions and transactional or update emails.
• Google Analytics 4: aggregate website usage measurement. Loads only if you accept the analytics category, IP anonymisation is on, and Google Consent Mode defaults to denied until you choose otherwise.
• Microsoft Clarity: session replay and heatmaps. It records how the page is used, such as clicks, scrolling and mouse movement, together with your device, browser and approximate location. Loads only if you accept the behaviour category. Every form field and dropdown is masked in the browser before anything is transmitted, so we never receive what you type. Clarity sets its own cookies and sends data to Microsoft, including through its clarity.ms and bing.com domains, and Microsoft handles that data under its own privacy statement.
• X (Twitter) Pixel: measures which adverts on X bring visitors here and whether they join the waitlist. Loads only if you accept the marketing category. If you join, your email address is hashed in your browser before it is sent to X.
• NOWPayments: processes scraper subscription payments. We receive confirmation of payment, not your wallet credentials.
• Turnkey: key infrastructure for trading terminal wallets.
• Helius and other Solana RPC providers: submit transactions and supply on-chain data for the terminal.

We may also disclose data where required by law or to protect our legal rights.

Transfers

International data transfers

Some of our service providers are located outside Switzerland and the EEA, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the Swiss addendum recognised by the Swiss Federal Data Protection and Information Commissioner) or a recognised adequacy decision.

Retention

How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Waitlist and inquiry data is retained while your application is active and for a reasonable period afterwards; we delete or anonymise it when it is no longer needed. Google Analytics data is kept for up to 14 months. Session recordings are kept by Microsoft Clarity under its own retention schedule. Terminal account data is kept while you use the terminal and for as long afterwards as the law requires. You can ask us to delete your data at any time (see “Your rights” below).

Cookies & analytics

Cookies and tracking

Nothing optional runs before you agree to it. Strictly necessary storage covers only your cookie choice itself (the sentinel_consent cookie, kept for one year), an anonymous identifier used to keep any on-site test consistent for you (sentinel_exp_id, kept for up to 180 days and set only while a test is running), and a referral code if you arrived through one. None of it profiles you or follows you to other websites. If you accept them, Google Analytics sets cookies beginning with _ga, Microsoft Clarity sets _clck and _clsk and Microsoft may set its MUID cookie, and the X Pixel sets X’s own advertising cookies. Analytics (Google Analytics 4), behaviour analysis (Microsoft Clarity) and advert measurement (the X Pixel) each load only after you accept that category, and you can change or withdraw your choice at any time through the “Cookie preferences” link in the footer. The X Pixel is the only advertising tag we use, and it never loads unless you accept the marketing category.

Security

How we protect your data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. The scraper runs on your own machine and the terminal is non-custodial, so the most sensitive data (your Telegram session and your private keys) never reaches us. No method of transmission or storage is completely secure, but we work to protect your data and review our practices regularly.

Age

Children’s privacy

The Services are not directed at, or intended for, anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

Updates

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. We encourage you to review this page periodically.

Your rights

Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• object to or request restriction of certain processing;
• request a copy of your data in a portable format; and
• withdraw consent at any time.

To exercise any of these rights, email us at help@sentinelai.bot. You also have the right to lodge a complaint with a supervisory authority. In Switzerland, contact the Federal Data Protection and Information Commissioner (FDPIC); in the EEA, your local data protection authority.

Contact

Contact us

For any questions about this policy or how we handle your data, contact us at help@sentinelai.bot or by post at Sentinel AI GmbH, c/o Wadsack Zug AG, Bahnhofstrasse 7, 6300 Zug, Switzerland.