Sentrit Privacy Policy

This policy applies to personal data processed when you access Sentrit's website, create or use a portal account, contract products, make payments, open tickets, request sales contact or interact with us through other channels.

When Sentrit processes data hosted by the customer inside contracted servers, VPS, containers, backups or storage, that content belongs to the customer and is handled according to the contract, service configuration and applicable instructions.

We may collect data you provide directly, such as name, email, phone number, company, country, tax ID or fiscal document, billing address, access credentials, language preferences, messages sent, provisioning notes and data required for support or contracting.

During checkout, we may request identification, billing and contractual acceptance data to link the order to your account, define currency, generate charges, issue receipts and meet fiscal, anti-fraud and payment requirements.

We may record technical data such as IP address, access date and time, session identifiers, pages visited, navigation events, browser, device, operating system, language, approximate country, authentication logs and security events.

This data helps keep the portal working, prevent fraud, investigate incidents, improve the experience, measure performance and protect accounts, payments and contracted services.

For account creation and access, we may process email, encrypted password, verification tokens, recovery codes, active sessions, login records and data returned by authentication providers, such as Google, when you choose that method.

When security features such as email MFA are active, we may send temporary codes and record events needed for validation, prevention of unauthorized access and auditing.

Sentrit may use payment providers to process charges in BRL and USD, including card, PIX, boleto or other methods available according to the country and contracted product.

Sensitive card data, such as full card number and CVV, should be processed directly by the payment provider. Sentrit does not intend to store full card numbers or CVV on its own servers. We may store customer identifiers, tokens, charge status, last digits, brand and information needed for reconciliation, recurrence, fraud prevention and financial support.

We use personal data to create and manage accounts, process orders, provision services, issue charges, provide support, respond to contacts, communicate operational updates, prevent abuse, protect infrastructure, comply with legal obligations and improve products.

We may also send communications about related products, services, news and offers. You can request removal from promotional communications at any time, without affecting transactional messages required for account or service operation.

We may share data with vendors needed to operate the services, such as infrastructure and data centers, authentication, transactional email, payment gateways, anti-fraud, analytics, accounting, legal, support, monitoring and service tools.

We may also share information when needed to comply with legal, regulatory or contractual obligations, respond to competent authorities, protect Sentrit's rights, investigate abuse, prevent fraud or enable corporate reorganization, acquisition or transfer of operations.

Because Sentrit serves customers worldwide and uses global infrastructure, authentication, payment and support providers, personal data may be processed or stored in other countries.

When international data transfers occur, we seek to adopt measures compatible with applicable law and select providers that maintain appropriate security, availability and compliance controls.

We may use cookies, local storage and similar technologies for authentication, security, session maintenance, language preferences, cart, performance measurement, experience improvement and fraud prevention.

Browser settings may allow you to block or delete cookies, but this may affect login, checkout, customer portal and other essential features.

We adopt technical and administrative measures to protect personal data against unauthorized access, loss, alteration, improper disclosure and abusive use, including access controls, event records, encryption where applicable and segregation of responsibilities.

Data is kept for the period necessary to fulfill this policy, maintain account and services, meet legal and tax obligations, perform audits, prevent fraud, resolve disputes and defend rights. Technical logs may be preserved for periods compatible with security, investigation and operational continuity.

You may request access, confirmation of processing, correction, update, deletion, portability, review, information about sharing or objection to the processing of your personal data, according to applicable law.

Some requests may require identity validation and may be subject to limitations, such as retention required for legal compliance, fraud prevention, security, contract execution or defense of rights.

Sentrit services are not directed to minors. If we identify improper processing of a minor's data without an appropriate legal basis, we may take steps to remove or restrict that data.

Our website and portal may contain links to third-party websites, integrations and external providers. Those third parties' privacy practices follow their own policies. This policy may be updated to reflect operational, legal or technical changes, and the version published on this page will show the update date.

For privacy or personal data questions and requests, contact [email protected].