Privacy Policy
Last updated: August 2026
1. Data Controller
Sm4rt Solutions ('Company') is the controller of personal data collected through Sentinel Identity. For questions related to personal data, contact us at: privacidade@sentinel-identity.com
2. Data Collected
We collect the following data to provide the Service: • Registration data: name, surname, email, organization name • Authentication data: password hashes (never plaintext), MFA tokens • Usage data: access logs, IP address, device, authentication timestamp • Billing data: payment information processed by Stripe (we do not store card data)
3. Purpose of Processing
Data is processed exclusively for: • Providing authentication and identity management services • Security: fraud detection and unauthorized access prevention • Billing and charging for Service usage • Service communications, updates, and security incidents • Compliance with legal and regulatory obligations
4. Legal Basis
Data processing is based on the following legal grounds: • Contract performance: data necessary for Service provision • Legitimate interest: security logs and fraud prevention • Legal obligation: record retention as legally required • Consent: non-essential cookies (revocable at any time)
5. Data Sharing
We do not sell personal data. We share data only with: • Stripe Inc.: payment processing • Cloud infrastructure: Service hosting (data stored in Brazil) • Competent authorities: when required by law or court order
6. Data Retention
Data is retained according to the following policies: • Security logs: 180 days active access, up to 5 years in archive • Account data: for the contract duration + 30 days for export • Authentication logs: 30 days active access, up to 1 year in archive • Tax data: 5 years as legally required
7. Your Rights
You have the following rights over your personal data: • Access: request a copy of your data • Correction: update incomplete or incorrect data • Deletion: request data erasure (subject to legal obligations) • Portability: export your data in structured format • Consent withdrawal: for consent-based processing To exercise your rights, access the user panel or contact: privacidade@sentinel-identity.com
8. Cookies
We use essential cookies for Service operation (session, authentication) and analytics cookies to understand platform usage. You may accept or reject non-essential cookies via the banner shown on first access. Essential cookies cannot be disabled as they are required for Service operation.
9. Security
We adopt appropriate technical and organizational measures to protect personal data, including: encryption in transit (TLS 1.2+) and at rest, least-privilege access control, mandatory MFA for administrators, and continuous access auditing. In the event of a security incident, we will notify affected parties as required by applicable law.