Privacy Policy
Last updated: February 2025
Sentrivox is built by security engineers, for security teams. Protecting your data is core to what we do. This policy explains what we collect, why, and the choices you have.
1. Information We Collect
Account information: when you create an account we collect your name, work email, company name, and authentication credentials (stored only as salted hashes).
Endpoint telemetry: the Sentrivox agent collects security-relevant data from the Windows devices you enrol — installed software, patch status, hardening configuration, hardware inventory, and vulnerability findings. It does not collect personal file contents, browsing history, or keystrokes.
Usage data: we collect standard product analytics (pages visited, features used) to improve the service.
2. How We Use Your Information
To provide and operate the Sentrivox platform, including asset discovery, vulnerability analysis, compliance assessment, and reporting.
To communicate with you about your account, security notices, and product updates.
To improve and secure our services, detect abuse, and meet legal obligations.
We do not sell your personal data or endpoint telemetry to third parties.
3. Data Security
All data is encrypted in transit using TLS. Endpoint upload payloads are additionally encrypted at the source using AES-256-GCM with per-payload keys derived via PBKDF2-HMAC-SHA256.
Data at rest is stored in access-controlled cloud infrastructure with least-privilege service accounts and audit logging.
Raw upload data is processed and removed from staging storage promptly after ingestion; it is not retained indefinitely.
4. Data Retention
We retain processed security data for as long as your account is active, so you can view historical trends and evidence.
You can request deletion of your data at any time by contacting us. On account closure, your data is deleted according to our retention schedule and any applicable legal requirements.
5. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.
To exercise any of these rights, contact us at support@sentrivox.com.
6. Sub-processors
We use reputable cloud infrastructure providers to host and operate the service. These providers process data on our behalf under contractual data-protection obligations.
7. Contact Us
If you have any questions about this policy or your data, email support@sentrivox.com.