SentinelAI – Privacy notice
Last updated: 6 November 2026
1. Who we are
SentinelAI is run by Joao Jorge, CX Postal 556, 8550-152 Marmelete, Portugal. Email: teamaijj@mail.grokbot.com. For this website and for enquiries, we are the controller of your personal data.
2. What SentinelAI is
SentinelAI is an operational monitoring dashboard for AI agents, chatbots and automation bots you already run. It is not a cybersecurity product, SIEM, SOC tool or certified security audit, and it does not claim Cyber Essentials, ISO 27001, SOC 2 or guaranteed detection.
3. The demo
The browser demo runs entirely in your browser. It uses no cookies, no analytics and no browser storage, and nothing you type is sent to us or anyone else by the demo. The sample uses fictional agents for a fictional agency (Harbour Desk Agency (demo)). Status tiles and digests in the demo are generated from that fictional data only — not live monitoring.
4. This website
This site is hosted on Cloudflare Pages, project name sentinel-ai, at https://sentinel-ai-1ec.pages.dev. Like any host, the provider processes technical data (such as IP address and request details) to deliver and secure the site. We do not use cookies, analytics or advertising on this site unless this notice is updated first. Digests stay preview-only in the browser (not emailed). There is no payment processing, no checkout, and no third-party bot connectors or client-data ingest in this build.
5. When you email us
- What: your name, email address, business details and what you write.
- Why and legal basis: to answer you and to prepare or perform a contract (GDPR / UK GDPR Art. 6(1)(b)); otherwise our legitimate interest in replying to business enquiries (Art. 6(1)(f)).
- How long: 24 months from our last contact, then deleted, unless we must keep it longer by law (for example invoices).
6. Direct customers (paid dashboard — when offered)
When a business buys SentinelAI directly and pastes or connects its own agent run counts, error counts, status events or cost figures, we are the controller for the account and billing data. Prefer agent labels, status, run/error counts and cost totals. Do not send: end-user chat content, security/forensic logs, IP addresses you do not need, special-category data (Art. 9), HR files, card or bank details, or passwords.
We delete event uploads and working files within 30 days after the contract ends (or within 14 days after a free pilot), and confirm deletion by email when you ask. We do not use your figures to train AI models.
7. Agency white-label (phase 2)
When an agency uses SentinelAI for its own clients' bots, the agency is the controller and we are its processor, acting only on its instructions under a data processing agreement (Art. 28). See /legal/dpa/. If your data is in an agency's dashboard, contact that agency first; we will help it answer you.
8. Who we share data with
Only service providers that help us run the service, under contracts that protect your data:
| Provider | Purpose | Location / transfer |
|---|---|---|
Cloudflare, Inc. (Cloudflare Pages host for project sentinel-ai; hostname sentinel-ai-1ec.pages.dev) | Website hosting | EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. DPF and Swiss-U.S. DPF (Cloudflare certified); EU Standard Contractual Clauses (2021/914) with UK Addendum for Restricted Transfers — Cloudflare Customer DPA v6.4 (effective 3 April 2026), https://www.cloudflare.com/cloudflare-customer-dpa/ |
| Not applicable — no payment processing | Taking payment for a paid plan (none on this site) | — |
| Not applicable — digests preview-only | Sending operational digests (not emailed in this build) | — |
| Not applicable — no connectors | Bot-platform or usage API connector (none in this build) | — |
We never sell your data. We do not use advertising networks. Where a provider is outside the EU/UK, we rely on an adequacy decision, EU SCCs, the UK IDTA or Addendum, or DPF certification.
9. AI disclosure
SentinelAI is an automated tool (EU AI Act Art. 50). Status tiles and digests are generated from the numbers and events you enter (or from fictional demo data), can be incomplete, and are not written by a person. They are estimates only — not a certified security assessment and not a guarantee that every outage is caught.
10. Your rights
You can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests (GDPR / UK GDPR Art. 15–21). Email teamaijj@mail.grokbot.com. We reply within one month.
You can complain to the CNPD (Portugal, www.cnpd.pt) or the ICO (UK, ico.org.uk).
11. Changes
We will update this page if things change and show the new date at the top.
Contact / Legal info
Joao Jorge, CX Postal 556, 8550-152 Marmelete, Portugal · teamaijj@mail.grokbot.com
IVA – regime de isenção (artigo 53.º do CIVA).
No Portuguese VAT is charged. If you're UK VAT-registered, you account for any UK VAT under the reverse charge.
(Information under DL 7/2004 art. 10 and UK E-Commerce Regulations 2002 reg. 6.)