LEGAL
Version 2.0 — Effective February 1, 2026
Privacy at a glance
This Privacy Policy explains how SentinelGIP ("we", "us", "our") collects, uses, shares and protects personal data when You access or use the Service at sentinelgip.com. It applies in addition to our Terms of Service. "Personal data" means any information relating to an identified or identifiable natural person, as defined in Article 4 of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
The data controller of Your personal data is SentinelGIP, reachable at contact@sentinelgip.com. For all questions relating to this policy or to exercise the rights described in Section 9, please contact our Data Protection Officer at dpo@sentinelgip.com.
The Service handles two very different categories of information that should not be confused:
| Purpose | Legal basis |
|---|---|
| Create and maintain Your account; deliver the Service | Performance of contract (Art. 6(1)(b)) |
| Process payments and prevent fraud | Contract + legal obligation (Art. 6(1)(b)(c)) |
| Operate security controls, abuse detection, rate limiting | Legitimate interest (Art. 6(1)(f)) |
| Improve and debug the Service, aggregate analytics | Legitimate interest (Art. 6(1)(f)) |
| Marketing communications and product updates | Consent, revocable at any time (Art. 6(1)(a)) |
| Comply with legal, tax, accounting and sanctions obligations | Legal obligation (Art. 6(1)(c)) |
When You execute an OSINT query, Your input (for example a vessel name, MMSI, e-mail address, domain, person or company name) is transmitted to the relevant third-party data provider in order to retrieve a result. We do not retain copies of upstream personal data beyond what is strictly necessary to return Your search result and, where applicable, to comply with the provider's caching rules. Representative providers include:
Each provider is responsible for its own privacy compliance regarding the data they publish. Where a third-party source raises a concern about a specific data point, please contact the original publisher; we are not in a position to alter or delete data we do not host.
We rely on a small number of vetted sub-processors to operate the Service. We require each of them to provide appropriate safeguards under Article 28 GDPR. The current list includes, without limitation:
A current list of sub-processors is available on request from dpo@sentinelgip.com.
Some sub-processors are located outside the European Economic Area, in particular in the United States. Such transfers are governed by the European Commission's Standard Contractual Clauses (Decision 2021/914) and, where applicable, the EU-U.S. Data Privacy Framework. We perform a transfer-impact assessment for each provider and apply supplementary technical measures (encryption in transit, encryption at rest, pseudonymisation) as required.
Subject to the conditions of GDPR Articles 15 to 22 (and equivalent provisions in the California Consumer Privacy Act, the UK Data Protection Act 2018 and other applicable laws), You have the right to:
To exercise any of these rights, e-mail dpo@sentinelgip.comfrom the address registered on Your account. We respond within one month, extendable to three months for complex requests as permitted by Art. 12(3) GDPR.
We use only the strictly-necessary cookies and local-storage keys required to authenticate You, maintain Your session, persist Your language and theme preferences and ensure the security of the Service. We do not deploy advertising, cross-site tracking, fingerprinting or third-party analytics cookies on authenticated pages. A cookie banner is presented on the public marketing pages where additional optional measurement cookies may be enabled with Your consent.
The Service is not directed to and may not be used by persons under the age of eighteen (18). If we become aware that we have collected personal data from a minor without parental consent, we will delete the account promptly.
We apply administrative, technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, including TLS-1.3 in transit, encryption at rest, password hashing with bcrypt, principle-of-least-privilege access, MFA on administrative consoles, ingress filtering, anti-bot middleware, vulnerability scanning and periodic audits. No system is 100 % secure. In the event of a personal-data breach that is likely to result in a risk to Your rights and freedoms, we will notify the competent supervisory authority within 72 hours and, where required, inform You without undue delay.
When You use an AI feature, the prompt You submit and the relevant context are transmitted to our LLM provider via the Emergent universal-key gateway solely to generate Your response. Provider-side training on Your inputs is contractually disabled where supported. AI outputs may contain inaccuracies (see Section 5.6 of the Terms) and should not be regarded as personal data about the persons they mention without independent verification.
We may update this Privacy Policy from time to time. Material changes will be announced by e-mail and/or by a banner on the Service. The "effective date" at the top of this page always indicates the latest version. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
SentinelGIP — Data Protection Office
DPO: dpo@sentinelgip.com
General contact: contact@sentinelgip.com
Abuse / security: abuse@sentinelgip.com
Supervisory authority (France): CNIL — cnil.fr
Made with Emergent