Privacy Policy

1. Introduction

BaselineSentinel (“we,” “us,” “our”) respects your privacy. This Privacy Policy describes what data we collect, how we use it, and how we protect it when you use our service at baselinesentinel.com and related websites, applications, and APIs (the “Service”). By using the Service, you consent to the practices described in this policy. This policy is incorporated by reference into our Terms of Use.

2. Data We Collect

We may collect:

• Account data: name, email, organization name, and password (stored in hashed form).
• Usage data: how you use the Service (e.g., pages visited, features used, API calls, scan and report activity).
• Technical data: IP address, browser type, device information, and logs.
• Integration data: credentials and configuration you provide for AWS, Slack, Teams, Telegram, PagerDuty, or other integrations (stored encrypted).
• Consent records: timestamp and context when you accept our Terms of Use, Privacy Policy, or Cookie Policy.

3. How We Use Your Data

We use your data to: provide and operate the Service; authenticate you; enforce our terms; send transactional emails (e.g., password reset, welcome, alerts); improve the Service; comply with law; and protect our rights and security. We do not sell your personal data to third parties for marketing purposes.

4. Data Sharing

We may share data with: service providers (e.g., hosting, email, payment processors) who process data on our instructions and under contract; law enforcement or other authorities when required by law or to protect our rights; or in connection with a merger, sale of assets, or other corporate transaction. We require processors to protect your data by contract. We do not sell your personal information.

5. Data Retention

We retain account and usage data for as long as your account is active and as needed to provide the Service, comply with law, or resolve disputes. You may request deletion of your account and associated data; we will honor such requests subject to applicable retention obligations (e.g., legal hold, dispute resolution).

6. Security

We use industry-standard measures (encryption in transit and at rest, access controls, secure development practices) to protect your data. See our Security page for more detail. No system is 100% secure; you use the Service at your own risk. Our liability is limited as set forth in our Terms of Use.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data, or to object to or restrict processing. To exercise these rights, contact us at [email protected]. EU/UK users have additional rights under GDPR (see our GDPR Compliance page). We will respond within the timeframes required by applicable law.

8. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us and we will take steps to delete it.

9. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date. Where appropriate, we may notify you by email or in-app notice. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, requests, or to exercise your rights, contact us at: [email protected].