Privacy Policy
Last updated: 25 March 2026
1. Introduction
Sentinel is operated by The Fourths Digital Agency (Pty) Ltd (“we”, “us”, “our”), a company registered in the Republic of South Africa. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable data protection legislation.
2. Information We Collect
We collect the following categories of personal information:
Account information: email address, password (hashed), and display name when you create an account.
Organisation data: organisation names, business entity names, and domain names you add to the platform.
Technical data: DNS records, DMARC/SPF/DKIM configurations, email header data you submit for analysis, scan results, and audit logs.
Usage data: IP address, browser type, pages visited, and access timestamps collected automatically through server logs.
3. Purpose of Processing
We process your personal information for the following purposes:
To provide the Sentinel domain security monitoring service; to authenticate your identity; to scan and analyse DNS records on your behalf; to generate security alerts and recommendations; to maintain audit trails for compliance; and to communicate service updates.
4. Legal Basis for Processing
We process your personal information on the basis of your consent (provided at registration), contractual necessity (to deliver the service you signed up for), and legitimate interest (to maintain platform security and improve our service).
5. Data Storage and Security
Your data is stored on Supabase infrastructure hosted in the EU (eu-west-2 region). All data is encrypted in transit (TLS 1.2+) and at rest. We implement row-level security policies ensuring users can only access data within their organisation. Passwords are hashed using bcrypt. We do not store raw passwords.
6. Data Sharing
We do not sell your personal information. We share data only with: Supabase (database hosting), Vercel (application hosting), and Cloudflare (DNS management, only when you enable auto-remediation). All sub-processors are bound by data processing agreements.
7. Data Retention
Account data is retained for the duration of your account. Scan results and audit logs are retained for 12 months after generation. You may request deletion of your account and associated data at any time.
8. Your Rights Under POPIA
You have the right to:
Access your personal information held by us; request correction of inaccurate information; request deletion of your personal information; object to processing of your personal information; request restriction of processing; lodge a complaint with the Information Regulator of South Africa.
9. Cookies
Sentinel uses essential cookies for authentication session management. These are strictly necessary for the service to function. We do not use advertising or tracking cookies.
10. Contact
For privacy-related enquiries, data access requests, or to exercise any of your rights, contact us at: privacy@thefourths.com