Privacy Policy

Sentinel Forge LLC (“Sentinel Forge,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit sentinel-forge.ai, use app.sentinel-forge.ai, submit a form, communicate with us, or use another Sentinel Forge product or service that links to this Policy (collectively, the “Services”).

Sentinel Forge is a Michigan limited liability company. Our Services provide public-source transition intelligence and related decision-support tools for defense-technology and dual-use businesses and their partners.

The Services are not intended to operate as consumer-reporting, background-check, employment-screening, credit, or individual-eligibility services.

1. Scope

This Policy applies when Sentinel Forge determines why and how personal information is processed. If you use the Services through an organization, that organization may administer your account and may separately control information associated with your use. An organization-specific agreement or privacy notice may also apply.

This Policy does not apply to third-party websites, products, or services that have their own privacy policies, even if we link to them.

2. Personal information we collect

The information we collect depends on how you interact with the Services.

Information you provide

• Contact and professional information. This may include your name, work email address, telephone number, organization, job title, and the details you provide in a contact, demo, sample-brief, support, or other request.

• Account information. If you receive access to the application, we may collect your name, email address, organization, role, account settings, authentication identifiers, and records of account access. Authentication credentials are handled through our authentication provider; we do not intentionally store readable passwords.

• Service content. We collect the questions, prompts, searches, notes, feedback, ratings, instructions, and other content you submit through the Services, along with the responses or reports generated for you. If an upload feature is available, this also includes files and associated metadata you choose to provide.

• Communications. We collect the content of emails, support requests, meeting requests, survey responses, and other communications with us.

• Commercial and transaction information. If you enter into a paid or evaluation arrangement, we may collect business contact details, order information, subscription status, contract records, invoices, and limited payment-related information. Any payment-card details will be processed by a payment provider and not intentionally stored by Sentinel Forge unless expressly stated at the time of collection.

Please do not submit classified information, Controlled Unclassified Information (CUI), export-controlled technical data, nonpublic government information, government-furnished information subject to handling restrictions, authentication credentials, sensitive personal information, or other information you are not authorized to provide.

Information collected automatically

When you use the Services, we and our service providers may automatically collect:

• Device and log information, such as Internet Protocol address, browser type, device type, operating system, language, referring page, pages or features accessed, timestamps, request and error logs, and approximate location derived from an IP address.

• Usage and security information, such as sign-in events, queries submitted, features used, interaction events, session activity, diagnostic data, and events used to detect fraud, spam, abuse, or security threats.

• Cookies and similar technologies. We use technologies that are necessary for authentication, security, preferences, and core operation of the Services. The marketing site may use Framer’s cookie-free, privacy-focused analytics to measure aggregate site activity. We do not currently use advertising cookies or cross-site tracking for targeted advertising. If we introduce nonessential cookies or similar technologies, we will provide any notice and consent controls required by applicable law.

Information from organizations, service providers, and public sources

We may receive information from:

• an organization that invites you to or administers an account;

• authentication, hosting, security, communications, and other service providers;

• referrals, event organizers, and business partners, subject to applicable law; and

• publicly available sources used in our transition-intelligence services, including government publications, budget materials, procurement notices, company websites, press releases, regulatory filings, and other public records.

Public-source materials may contain professional information about individuals, such as a name, title, organization, business contact details, public statements, or professional affiliations. We use this information to provide and improve business intelligence, sourcing, attribution, and research functions. We do not intentionally use public-source data to build consumer profiles or infer sensitive personal characteristics.

3. How we use personal information

We use personal information to:

• provide, operate, maintain, and improve the Services;

• create, authenticate, secure, and administer accounts and organizational access;

• process contact, demo, sample-brief, evaluation, and support requests;

• retrieve, analyze, summarize, and present public-source or user-authorized information;

• generate and evaluate search results, reports, and AI-assisted responses;

• personalize settings and maintain user notes or history where those features are enabled;

• monitor reliability, diagnose errors, measure performance, and develop features;

• detect, investigate, and prevent fraud, spam, misuse, security incidents, and violations of our Terms;

• communicate operational notices, respond to requests, and, where permitted, send relevant business communications;

• administer contracts, billing, and business records;

• comply with law, legal process, and regulatory obligations; and

• establish, exercise, or defend legal claims and protect the rights, safety, and integrity of Sentinel Forge, our users, or others.

We may aggregate or de-identify information and use it for lawful business purposes. We will not attempt to re-identify information that we maintain as de-identified, except to test whether our de-identification measures work or as otherwise permitted by law.

4. Legal bases for processing in the EEA, United Kingdom, and Switzerland

Where applicable law requires a legal basis, we process personal information:

• to perform a contract with you or take steps at your request before entering into one, including providing accounts, evaluations, support, and requested Services;

• for our legitimate interests, including operating and improving a secure B2B intelligence service, responding to business inquiries, protecting the Services, understanding product use, and asserting or defending legal claims, where those interests are not overridden by your rights;

• to comply with legal obligations; and

• with consent, when consent is the appropriate basis, such as for certain optional marketing or nonessential technologies. You may withdraw consent at any time without affecting prior lawful processing.

5. AI-assisted features

Some Service features use artificial-intelligence providers to process prompts, selected public-source context, user-authorized content, and related metadata to produce responses. We limit the information sent to what is reasonably necessary to provide the feature and use business/API offerings intended to process data on our behalf.

Our current AI provider is OpenAI. OpenAI states that inputs and outputs submitted through its business and API offerings are not used to train its models by default. Sentinel Forge does not authorize a provider to use Service content to train general-purpose models unless we first update our disclosures and obtain any permission required by law or contract.

Do not place sensitive personal information or restricted information in a prompt or upload. AI-generated content may be incomplete or inaccurate and should be verified against cited or authoritative sources.

6. How we disclose personal information

We may disclose personal information to:

• Service providers that perform services for us, such as website and form hosting, application hosting, authentication, databases, storage, AI processing, payment processing, email delivery, security, monitoring, support, and professional services. Current core providers include Framer, Vercel, Supabase, OpenAI, and Stripe. They process information under their own terms and, where applicable, contractual duties to us.

• Your organization and its administrators if you use an organization-managed account. Administrators may manage access, view organization-level activity, or control content and settings, subject to the organization’s agreement and configuration.

• Professional advisers, auditors, insurers, and financing sources where reasonably necessary and subject to appropriate confidentiality obligations.

• Government authorities or other parties when we reasonably believe disclosure is required by law or legal process, or is necessary to protect rights, prevent harm, investigate misuse, or enforce our agreements.

• Transaction participants in connection with an actual or proposed financing, merger, acquisition, reorganization, asset sale, or similar transaction, subject to appropriate safeguards.

• Other parties at your direction or with your consent.

We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising or process it for targeted advertising as those concepts are defined by applicable U.S. state privacy laws. We do not offer financial incentives in exchange for personal information.

7. International data transfers

Sentinel Forge is based in the United States, and our providers may process information in the United States and other countries. These countries may have data-protection laws different from those where you live. Where required, we use recognized safeguards for restricted international transfers, such as adequacy decisions, contractual protections based on approved standard contractual clauses, or another lawful transfer mechanism.

8. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain security and business records, comply with legal obligations, resolve disputes, and enforce agreements. The retention period depends on factors such as:

• the nature and sensitivity of the information;

• the duration of an account, evaluation, contract, or business relationship;

• whether information is needed to provide a requested feature or preserve user-directed history;

• security, backup, audit, and fraud-prevention needs; and

• applicable legal, accounting, and contractual requirements.

When information is no longer needed, we take reasonable steps to delete, de-identify, or securely isolate it. Deletion from backups and system logs may occur on a delayed cycle.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include access controls, service-provider controls, authentication protections, logging, and measures intended to protect information in transit and at rest where appropriate. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your credentials, using the Services only through authorized devices and networks, and promptly notifying us if you suspect unauthorized access.

10. Your choices and privacy rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• know whether we process your personal information and access it;

• request correction of inaccurate information;

• request deletion of personal information;

• receive a portable copy of information you provided;

• object to or restrict certain processing;

• withdraw consent where processing is based on consent;

• opt out of targeted advertising, sale, or certain profiling, where applicable; and

• appeal a decision on a privacy request or complain to a data-protection authority.

You may exercise a privacy right by emailing privacy@sentinel-forge.ai. You may also use available account controls to update certain information. We may need to verify your identity and authority before acting on a request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and direct identity confirmation. We will not unlawfully discriminate against you for exercising a privacy right.

These rights are not absolute. We may deny or limit a request when permitted by law, including when information must be retained for security, fraud prevention, legal compliance, or the rights of others. If we deny an appealable request, our response will explain how to appeal.

If personal information about you appears in a public-source record used by the Services, you may contact us to request review, correction, or appropriate annotation. We may preserve an accurate source record or citation where continued processing is lawful and relevant, but we will consider the context, source, and applicable rights.

Where applicable law requires us to provide an individual notice about personal information obtained indirectly from a public source, we will provide that notice unless a lawful exception applies.

Additional information for California residents

The categories of personal information described in the California Consumer Privacy Act that we may collect include identifiers; customer-record information; commercial information; internet or other electronic-network activity; professional or employment-related information; user-provided content; and inferences reflecting Service preferences or use. We obtain these categories from you, your organization, our providers, and public sources; use them for the purposes in Section 3; and disclose them to the recipients described in Section 6.

Account authentication information may be considered sensitive personal information under California law. We use it only for permitted purposes such as providing, securing, and administering the Services, and not to infer characteristics about you. During the preceding 12 months, Sentinel Forge has not sold personal information or shared it for cross-context behavioral advertising.

California’s “Shine the Light” law permits certain residents to ask about disclosure of personal information to third parties for their own direct-marketing purposes. We do not disclose personal information to third parties for their own direct marketing.

Global Privacy Control and Do Not Track

Because we do not sell or share personal information for targeted advertising, there is currently no sale or targeted-advertising activity to opt out of. Where applicable law requires us to recognize a browser-based opt-out signal, such as Global Privacy Control, we will treat a recognized signal as a request for the associated browser or device. The Services do not otherwise respond to legacy “Do Not Track” signals, for which there is no uniform industry standard.

11. Business communications

You may opt out of promotional email by using the unsubscribe method in the message or contacting us. We may still send non-promotional communications necessary to provide or secure an account, respond to you, or administer a business relationship.

12. Children

The Services are designed for business users and are not directed to anyone under 18. We do not knowingly collect personal information from children under 13, or under a higher minimum age where local law requires it. If you believe a child has provided personal information to us, contact privacy@sentinel-forge.ai so we can review and, where appropriate, delete it.

13. Third-party links and sources

The Services may link to or cite third-party websites, publications, databases, or services. Their privacy practices are governed by their own policies. A link, citation, or reference does not mean Sentinel Forge controls or endorses the third party’s privacy practices.

14. Changes to this Policy

We may update this Policy as our Services or legal obligations change. We will post the revised version and update the “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice when required by law.

15. Contact us

For privacy questions or requests, contact:

Sentinel Forge LLC

Attn: Privacy

Michigan, United States

privacy@sentinel-forge.ai

https://sentinel-forge.ai/contact

If you are in the European Economic Area or United Kingdom, you may also lodge a complaint with the data-protection authority where you live or work. We encourage you to contact us first so we can try to address your concern.