Privacy Policy — AAA Sentinel

1. Data controller

The data controller for your personal data is Yenia Roman Bu, a natural person and the owner of the AAA Sentinel project (hereinafter "we"), until the company that will provide the service is incorporated; when it is, we will tell you and update this policy. Contact address: compliance@aaa-sentinel.com.

2. Data we collect

We collect the following categories of data:

Registration data: name, email, password (hash), company (optional).
Usage data: pages visited, features used, access frequency and timestamps, from application logs (not Google Analytics). On the public pages we also count visits, where they come from and clicks on calls to action and waitlist sign-ups with PostHog (EU region), without cookies; it also receives technical browser data and the IP address, which it only uses to compute the daily identifier and does not store.
Cloud accounts: IAM role ARNs (AWS), Service Principal IDs (Azure) and Service Account keys (GCP) stored encrypted with AWS KMS. We do not ask for or store your cloud-console password.
AI connections: encrypted API keys and provider spend/usage metadata.
Service results: findings, reports, tickets you open to Slack, Jira or Linear, and agent actions you approve.
Billing data: processed by Stripe. We do not store card numbers or banking data on our servers.
Technical data: IP address, browser type and operating system in API and CDN logs.
Support cases: the subject and text you write when opening or replying to a support case from the application, the screenshots and documents you choose to attach, your email, the cloud account you point to and, if you allow it, the page you opened it from and your browser.

3. Purpose of processing

We use your data to:

Manage your account and authentication (Amazon Cognito).
Run cost, account-posture and AI-spend analysis with read-only access, except agent actions you approve.
Generate reports, recommendations, alerts and, if you configure them, tickets in your tools.
Process payments and manage your subscription, including extras and the posture add-on.
Send service communications (alerts, digests, plan changes).
Operate and improve the platform with internal aggregated metrics and, on the public pages, with cookieless analytics (PostHog, EU region); we do not use Google Analytics or advertising pixels.
Handle your support cases and notify you by email of every reply and status change.

4. Legal basis

Processing is based on:

Contract performance: to provide the service (trial, Pro or Business, extras and add-on).
Consent: to remember your cookie-banner choice (local storage) and, if any, commercial communications. Analytics on the public pages uses no cookies and does not depend on that choice.
Legitimate interest: to measure, in aggregate and without cookies, how the public pages are used (you can object with Do Not Track or Global Privacy Control in your browser, or by writing to compliance@aaa-sentinel.com), and to prevent fraud and improve security, including the reCAPTCHA check at sign-up, password recovery, the waitlist and the contact form.
Legal obligation: to comply with tax and regulatory obligations.

5. Data processors

We share data with the following providers, under processing agreements:

Amazon Web Services (AWS): infrastructure (EU-West-1, Ireland; monitoring confirms outages from EU-Central-1, Frankfurt). Includes Cognito, DynamoDB, Lambda, S3 and KMS.
Stripe: payment processing (PCI DSS Level 1 certified).
Google Cloud (Vertex AI, Gemini models): main provider of AI assistance (explanations of findings, drafts of tickets and remediation, and draft answers to security questionnaires), in the Vertex AI EU multi-region. It also drafts marketing content (blog, posts and newsletter) from the product facts, with no personal data. We do not use that data to train models.
Amazon Bedrock (AWS, us-east-1, US): fallback for AI assistance and for drafting marketing content. It only receives the request when Gemini fails or does not answer in time. We do not use that data to train models.
On your instruction: Slack, Jira or Linear only if you connect a channel or ticket; they are processors or recipients you choose.
PostHog (EU region): cookieless analytics of the public pages (visits, where they come from and waitlist sign-ups), through our own domain. Nothing is sent from the application or the console.
Google (reCAPTCHA): bot check on the sign-up, password recovery, waitlist and contact forms. It receives technical browser data and the IP address when those forms are used, for fraud-prevention purposes. For that processing Google acts as an independent controller under its own privacy policy.

We do not sell or transfer your personal data to third parties for commercial purposes.

6. International transfers

Our main infrastructure is hosted on AWS EU-West-1 (Ireland). Stripe may process data in the US under the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework. Google may process reCAPTCHA verification data in the US under the same safeguards. PostHog analytics data is processed in the EU. AI assistance uses Gemini in Google's EU multi-region; only if it fails does the request go to Amazon Bedrock in the US (us-east-1), under the Standard Contractual Clauses and the EU-US Data Privacy Framework.

7. Data security

We implement technical and organizational measures including:

Encryption in transit (TLS 1.2+) and at rest (AES-256 / KMS).
GCP keys and AI API keys encrypted with AWS KMS.
Multi-tenant isolation: the organization always comes from the verified session, never from the request.
Audit log of relevant actions, to which the application only appends entries, kept for 12 months.
Read-only access to your accounts, except the agent write role you grant and the actions you approve.

8. Data retention

Active account: while you maintain your active subscription.
After cancellation or the end of the free trial: 3 months for export or reactivation, then revocation of access to your cloud accounts and complete deletion, including your team’s users.
If you delete your organization from your profile: 14 days to cancel it, then complete deletion, including your team’s users.
Members who leave the team or are removed: their user is deleted immediately, unless they belong to another organization or own one with data.
Record of acceptance of the Terms and the privacy information: internal identifier, organization, accepted versions and date, with no email or name. It is kept for 5 years as evidence and then deleted.
Billing data: 5 years for tax compliance.
Security logs: 12 months.
Support cases: 24 months after they are closed.

9. Your rights

You may exercise the following rights at any time:

Access: request a copy of your personal data.
Rectification: correct inaccurate data.
Erasure: delete your organization and its data from your profile (or, as a member, leave it and delete your user), or request it by email.
Portability: receive your data in a structured format. The owner can download it at any time from their profile (a ZIP of JSON files, without credentials or secrets).
Objection: object to processing based on legitimate interest.
Restriction: request restriction of processing.

To exercise these rights, write to us at compliance@aaa-sentinel.com. We will respond within 30 days.

10. Cookies

We use essential browser storage (Cognito session, UI language, selected account/client, and your banner choice). We do not install Google Analytics: the public pages use PostHog in cookieless mode, which stores nothing in your browser. Details in our Cookie Policy. Only the sign-up, password recovery, waitlist and contact pages load Google reCAPTCHA, which may use its own cookies to prevent automated abuse.

11. Changes to this policy

We reserve the right to modify this policy. We will notify relevant changes by email and publish the new version with the update date.

12. Internal staff access

A small internal AAA Sentinel team may access aggregated metrics about your organization to operate the platform, bill correctly and provide support. This access is subject to the following guarantees:

Aggregation principle: we never access the content of your findings, your cloud resource identifiers, credentials or reports generated in your account. We only see counts, sums, averages and billing data.
Strong authentication: internal staff authenticate with mandatory MFA in an identity directory that is fully separate from the customer one.
Audit logging: every access is recorded, including who, when and what was queried.
Segregation of duties: not all internal staff see the same metrics; access to financial data is restricted to specific roles.
No impersonation access: internal staff cannot log in as you. If this capability is enabled in the future, it will require justification, a limited time window and notification.

13. Contact

For any privacy queries: compliance@aaa-sentinel.com

14. Waitlist and business contacts

If you join our waitlist, write to us through the contact form, or we have a professional relationship with you, we process your data as follows:

What data: the name, email, role, company, clouds, AI tools and number of accounts you give us, your language, and where the visit came from (UTM parameters and referring page). For professional contacts who have not signed up: name, job title, company and professional contact details published by the person or their company.
What for: to tell you when the product opens and invite you, to send you product news if you agreed to it and, if you also accepted the fortnightly newsletter when signing up, to send it to you, and to maintain a business relationship with companies and partners.
Legal basis: your consent, confirmed with a second click in the email we send you (waitlist); our legitimate interest in business-to-business relationships (professional contacts), which you can object to at any time.
How long: 7 days if you do not confirm. Waitlist without a later sign-up, 12 months from the last contact. Closed business opportunities, 24 months.
Where and who: in the European Union (AWS, Ireland), encrypted. Never sold or shared. Only authorised AAA Sentinel staff have access, and every access is logged.
Your rights: one-click unsubscribe from any email; access, rectification, erasure, objection and portability by writing to compliance@aaa-sentinel.com. After an erasure we keep only an irreversible fingerprint of your email and, if your details came from our research into professional contacts, of the internal identifier of that record, so that we neither contact you nor add you again.