Who handles the data
During the closed beta, the controller is Bruno Miguel Gomes dos Santos, creator of Sentelvo. Privacy and support contact: contactsentelvo@gmail.com.
Data and purposes
Sentelvo handles account email and identifier, member and installation names, settings, family connections and subscription status to provide the service. Analysis of pages and open Gmail/Outlook messages happens locally. The entire inbox is not scanned.
Family requests and beta reports
When approvals are enabled, requests may be automatic or initiated by the user. They may include address, domain, title, file name, email sender and subject, score and reasons for the warning. Values entered in password, PIN or OTP fields are not sent. The family owner receives requests through Telegram. Beta reports are linked to the family and installation and voluntarily sent to the creator with an address without query parameters, problem type and comments; do not include personal data in comments.
Providers and security
Cloudflare hosts the site, APIs and family data in D1; Supabase manages authentication; Telegram delivers family requests; Stripe processes subscriptions when payments are available. Sentelvo does not store card details. Airtable contains the brand catalogue, not user accounts. The optional Google Safe Browsing lookup is disabled in this distribution. Services may process data outside the EEA; commercial configuration requires checking regions, processing agreements and applicable transfer mechanisms.
Processing grounds and retention
Data necessary for the service is processed to perform the usage relationship; security and access-control records serve legitimate interests in preventing abuse. Tax obligations may require billing data retention. Accounts and settings are retained during use until deletion. Family requests are removed seven days after expiry; Telegram updates after seven days; uninstall feedback and beta reports after 90 days; administrative audit after 180 days. A completed deletion request is kept for 90 days to demonstrate its handling. Messages already delivered to Telegram and Stripe documents also follow those services’ rules.
Your rights
You can request access, correction, portability, deletion, restriction or objection where applicable through the contact email. The dashboard allows data export and registration of a deletion request, which support confirms by email. Deletion is not immediate and does not automatically cancel a subscription. We normally respond within one month. You can lodge a complaint with the Portuguese CNPD. Beta reporting is optional and does not condition protection.
Browser storage
The site and extension store data necessary for sessions, language, settings and permission confirmation. This version does not include advertising or third-party analytics cookies. Promotional emails will require a separate choice.