Privacy Policy

1. Introduction

Saga Labs ("we," "our," or "us") operates Sentinell, an AI-powered marketing intelligence platform. We are committed to protecting your privacy and handling your data with transparency and care.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By accessing or using Sentinell, you agree to this Privacy Policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• OAuth authentication data (Google, GitHub)
• Organization/tenant information
• Profile preferences

2.2 Project & Brain Data

Information you provide for intelligence gathering:

• Company information and website URLs
• Competitor data and market research
• Content preferences and brand guidelines
• Influencer and ecosystem mappings

2.3 Usage Data

We automatically collect:

• Queries and interactions with AI agents
• Content generation requests and approvals
• Feature usage patterns
• Session duration and activity logs

2.4 Technical Data

Standard technical information including:

• IP address and geographic location (country/region)
• Browser type and version
• Device information
• Session identifiers

2.5 Payment Information

Payment processing is handled by Paddle, our Merchant of Record. We do not store credit card numbers or sensitive payment credentials. Paddle's privacy practices govern payment data handling.

3. How We Use Your Information

We use collected information to:

• Provide Services: Deliver AI-powered market intelligence, content generation, and research features
• Process AI Tasks: Send relevant data to Google Gemini for analysis and content generation
• Improve Platform: Analyze usage patterns to enhance features and user experience
• Communication: Send service updates, security alerts, and (with consent) marketing communications
• Support: Respond to inquiries and provide customer assistance
• Compliance: Meet legal obligations and enforce our terms

4. AI & Third-Party Processing

4.1 Google Gemini

Sentinell uses Google Gemini (via Google Vertex AI) for AI processing. When you use AI features, relevant data is sent to Google's servers for processing. Google's AI services are governed by their own privacy policies and terms.

4.2 Vector Embeddings

We use pgvector for semantic search and intelligence deduplication. Your data is processed into mathematical representations (embeddings) that enable intelligent matching without exposing raw content.

4.3 Multi-Tenant Isolation

Each "Brain" is an isolated intelligence system. Your data is logically separated from other customers and cannot be accessed across tenant boundaries.

5. Data Security

We implement industry-standard security measures:

• Encryption at Rest: All stored data is encrypted using AES-256
• Encryption in Transit: TLS 1.3 for all data transfers
• Access Controls: Role-based access with JWT authentication
• Infrastructure: Hosted on Google Cloud Platform with enterprise-grade security
• Multi-Tenant Isolation: Strict data segregation between customer accounts
• Monitoring: Continuous security monitoring and logging

6. Data Sharing

We share data only in these circumstances:

6.1 Service Providers

• Paddle: Payment processing and subscription management
• Google Cloud: Infrastructure and AI processing
• Analytics providers: Anonymized usage analytics

6.2 Legal Requirements

We may disclose information if required by law, court order, or governmental authority.

6.3 No Data Sales

7. Your Rights

7.1 GDPR (European Union)

If you are in the EU, you have rights to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

Our data hosting on GCP Europe supports GDPR compliance requirements.

7.2 CCPA (California)

California residents have rights to:

• Know what personal information is collected
• Delete personal information
• Opt-out of sale of personal information (we do not sell data)
• Non-discrimination for exercising privacy rights

7.3 LGPD (Brazil)

Brazilian users have rights under the LGPD including:

• Confirmation of data processing
• Access to data
• Correction of incomplete or inaccurate data
• Anonymization, blocking, or deletion of unnecessary data
• Portability
• Information about sharing with third parties

7.4 Exercising Your Rights

To exercise any privacy rights, contact us at info@sagalabs.io. We will respond within 30 days.

8. Data Retention

We retain your data as follows:

• Account Data: Retained while your account is active, deleted within 90 days of account closure
• Brain Data: Retained until you delete the Brain or close your account
• Usage Logs: Retained for 12 months for analytics and troubleshooting
• Payment Records: Retained for 7 years as required by tax regulations

You may request data deletion at any time by contacting us or using the account settings.

9. Cookies & Tracking

We use essential cookies for:

• Authentication and session management
• Security and fraud prevention
• Preference storage

We may use analytics cookies to understand platform usage. You can manage cookie preferences through your browser settings.

10. Children's Privacy

Sentinell is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will promptly delete it.

11. International Data Transfers

Your data may be processed in countries outside your residence, including the European Union where our primary infrastructure is located. We ensure appropriate safeguards through standard contractual clauses and compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights: