Privacy Policy
Last updated: March 12, 2026
1. Overview
Sentinel ("we", "us", "our") is an ad performance monitoring and competitive intelligence platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service at sentinel.up.railway.app.
2. Information We Collect
- Account data: Your email address and a hashed (bcrypt) password. We never store your password in plain text.
- Ad platform credentials: Access tokens and API keys you connect (Meta, Google Ads, TikTok, Shopify, Triple Whale, AppLovin). These are encrypted at rest using AES-128 Fernet encryption before storage.
- KPI snapshots: Ad performance metrics (spend, impressions, clicks, ROAS, etc.) fetched from connected platforms on your behalf and stored for trend analysis and alerting.
- Competitor ad data: Public ad creative information retrieved from the Meta Ad Library API based on searches you initiate. This data is publicly available and subject to Meta's own transparency policies.
- Usage data: Standard server logs including IP address, browser type, and pages accessed, retained for up to 30 days for security and debugging purposes.
3. How We Use Your Information
- To authenticate you and maintain your session
- To fetch ad performance data from connected platforms on your behalf
- To generate AI-powered recommendations and alerts about your ad performance
- To display competitor ad intelligence based on your search queries
- To send alert notifications via Slack or email when you configure them
- To improve and debug the service
4. Third-Party Services
Sentinel integrates with the following third-party platforms at your direction:
5. Ad Library Data
When you use the Competitor Intelligence features, Sentinel accesses the Meta Ad Library API to retrieve publicly available ad creative data. This data is intentionally public under Meta's advertising transparency policies. We store retrieved ads in your account to power competitive analysis features. You can delete stored competitor ads at any time from the app.
6. Data Retention
- Account data: Retained until you delete your account
- KPI snapshots: Retained for 90 days by default
- Competitor ad data: Retained until you delete it or your account
- Server logs: 30 days
7. Data Security
We use industry-standard protections including bcrypt password hashing, Fernet (AES-128) encryption for stored credentials, HTTPS for all data in transit, and JWT-based session authentication. No security system is perfect — if you discover a vulnerability, please contact us.
8. Your Rights
You may request deletion of your account and all associated data at any time by contacting us. You may also disconnect any platform integration from within the app, which removes the stored credentials for that platform.
9. Children's Privacy
Sentinel is not directed at children under 13. We do not knowingly collect data from anyone under 13.
10. Changes to This Policy
We may update this Privacy Policy periodically. Continued use of the service after changes constitutes acceptance. Material changes will be announced within the app.