Privacy Notice (Summary)

Data We Process

• Request payload fields required to generate scores and workflow details.
• Structured feedback telemetry submitted to /v1/feedback, including request_id and outcome fields.
• Authentication and account metadata required for access control and billing.
• Operational telemetry needed for security, stability, and abuse prevention.

Retention and Storage

• Payload retention is disabled by default for standard scoring flows.
• Feedback request-id events are retained for limited periods to validate ownership and recency across deployments.
• Some account, billing, and audit records are retained for operations and compliance.
• Backups and logs may persist for limited durations under infrastructure policies.

Security Controls

• Transport is encrypted in transit with HTTPS at the Fly edge.
• Access to key lifecycle operations is protected by admin-token controls.
• Readiness and health checks are monitored for service integrity.

Your Responsibilities

• Only submit data you are authorized to process.
• Avoid sending unnecessary personal data in payloads.
• Do not include PHI in feedback notes; notes are intended for short operational context only.
• Protect API keys and administrative credentials.

Privacy Contact

Questions or requests: security@sentinelsignal.io