Privacy Policy — SentryVo

This is a complete working draft, not a substitute for a real legal review. Given this service handles identity-sensitive data (stage names, aliases, and in some cases adult-content links), have a lawyer review this before publishing — particularly around data retention and any jurisdiction-specific privacy law (GDPR for EU customers, CCPA for California, etc.) that may apply depending on where your subscribers are located. Anything in [brackets] is a decision only you can make.

1. What we collect

When you register, we collect: your name, email address, mobile number, a password (stored as a one-way hash — we never store or can see your actual password), your subscription plan, the platform(s) you're on, stage names/aliases you ask us to monitor, and links to your own original content that you submit as proof of ownership.

As the Service operates, we also store: records of content our scans find (URLs, the search source, and status), any takedown notices we've attempted on your behalf, and your report history and account activity.

2. How we use it

We use this information to run daily scans on your behalf, attempt takedown notices using your provided ownership information, send you activity reports, and process billing through our payment processor. We do not sell your personal information to third parties, and we do not use your stage names, aliases, or content links for any purpose beyond providing the Service to you.

3. Third parties we share data with

Running the Service requires working with a small number of third-party providers, each handling only what they need to do their specific job:

Lemon Squeezy — processes your payment and billing information; we never see or store your card details ourselves
Serper.dev (our search provider) — receives only search terms (your aliases), not your account or personal information
Our email provider — used to deliver your activity reports to the email address you registered with
Hosting providers and domain registrars — when we attempt a takedown notice on your behalf, the notice itself (which references your name as the rights holder, per DMCA requirements) is sent to the relevant host or registrar's abuse contact — this is an inherent part of how a takedown notice works, not an optional data share

4. Data retention

We retain your account data, including case history and leak records, for 90 days after cancellation — this allows you to resubscribe without losing your history, or request records if a dispute arises. After 90 days, your data is permanently deleted from our systems, except where we're required to retain it to comply with a legal obligation or resolve an active dispute.

5. Your rights

You can request a copy of the data we hold about you, or request that we delete your account and associated data, by contacting us at the email below. [Confirm your actual process and any legal limits on this — e.g., data tied to an active legal dispute or takedown notice may need to be retained regardless of a deletion request; a lawyer can advise on the right balance here.]

6. Data security

Passwords are stored as one-way hashes, not plain text. Access to the underlying database and backend systems is restricted to the operator of this Service. As with any online service, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Age requirement

The Service is intended for users 18 years of age or older. We do not knowingly collect information from anyone under 18.

8. Changes to this policy

We may update this policy from time to time. Continued use of the Service after a change means you accept the updated policy.

9. Contact

Privacy questions — contact us or email support@sentryvo.com.