Sentinel Privacy Policy

Effective Date: October 19, 2026 Version: 1.0

This Privacy Policy explains how SJK Enterprises LLC ("SJK," "we," "us," or "our") collects, uses, shares, and protects information when you visit alwayssentinel.app or use Sentinel (the "Service").

Sentinel is a business-to-business tool. Our customers are businesses that sell on Walmart Marketplace and Amazon. This policy covers information about the people who use Sentinel on behalf of those businesses, visitors to our website, and personal information that appears in the marketplace reports our customers upload.

1. Information We Collect

Account information

• Your email address and password (passwords are stored by our authentication provider as a one-way hash; we never see them).
• Your organization's name and, if you add one, its logo.
• The invite code used to create your account.

Beta agreement records

When you accept the Sentinel Beta Agreement we record your typed full name, your email address, your organization's name, the date and time, your IP address, your browser's user agent, and the exact agreement text you accepted.

Marketplace credentials

If you connect Walmart, we store your Walmart Marketplace API Client ID and Client Secret. They are encrypted in a secrets vault and are only ever read by our servers to call Walmart on your behalf. We log each time they are used (date, organization, and purpose) for security auditing.

Marketplace data

• Walmart: shipment and inbound order data we retrieve from the Walmart Marketplace API (shipment IDs, dates, quantities, carrier and tracking numbers, fulfillment center IDs, SKUs and GTINs), and the contents of reports you upload (orders, fees, dimensions, storage fees).
• Amazon: the contents of reports you upload (payments/date range reports and monthly storage fee reports). We do not connect to any Amazon API.
• Marketplace reports can contain information about your own customers. We keep only the order number and the buyer's or ship-to state and 5-digit ZIP code. We do not keep buyer names, street addresses, cities, phone numbers, or email addresses from those reports.

Usage and technical information

• Our hosting provider records standard server logs (IP address, browser user agent, requested page, and time) for security and reliability.
• We do not use analytics, advertising trackers, or session-recording tools in the Sentinel application.

Website beta signup

If you request beta access on our homepage, we collect the email address you enter, through our email service provider (MailerLite).

2. How We Use Information

We use information to:

• Provide the Service: sync and analyze your marketplace data, identify potential fee and shipment discrepancies, and track cases.
• Create and secure your account, and keep each customer's data separate from every other customer's.
• Send service emails, such as account confirmation and case-deadline reminders.
• Respond to your support, legal, and privacy requests.
• Keep a record of your acceptance of our agreements.
• Detect, investigate, and prevent security incidents and misuse.
• Improve Sentinel using aggregated or de-identified information that does not identify you or disclose your confidential business information.

We do not sell your personal information or your business data, and we do not use it for third-party advertising.

3. Service Providers We Use

We share information only with the service providers below, and only as needed to run Sentinel. Each provider processes data under its own terms and security commitments.

The Sentinel application itself serves its own fonts and does not load Google Fonts or MailerLite.

We may also disclose information when required by law, to protect the rights, property, or safety of SJK, our customers, or others, or in connection with a merger, acquisition, or sale of assets, subject to this policy.

4. Cookies and Similar Technologies

The Sentinel application uses only cookies that are strictly necessary for it to work:

• Authentication cookies (named `sb-…-auth-token`) keep you signed in.
• `riq-org-id` remembers which organization you are working in (30 days).
• Your browser's local storage is used to remember an in-progress sync job and whether the setup prompt has been shown.

Our homepage loads Google Fonts and MailerLite's signup script only after you click "Accept" on the cookie notice, and MailerLite may set its own cookies once loaded. If you choose "Decline," the homepage uses your device's built-in fonts and loads neither. Submitting the beta signup form always sends the email address you enter to MailerLite. Your choice is stored in your browser's local storage, and you can change it with "Cookie settings" in the homepage footer.

5. Data Retention

• We keep your account and marketplace data for as long as your account is active.
• When you delete your account (see Section 7), we delete your organization's data, your encrypted credentials, your logo, and your login immediately.
• Records of your acceptance of our agreements are kept after deletion as evidence of the agreement, as legal records. They keep your name, email, organization name, IP address, and user agent, but are no longer linked to an account.
• Data may remain in our providers' encrypted backups for a limited period (typically up to 30 days) before it is overwritten.
• Server logs are kept according to our hosting provider's standard retention.

6. Security

• Each customer's data is isolated at the database level, so one customer cannot access another's records.
• Walmart credentials are encrypted at rest in a dedicated secrets vault and are never sent to your browser.
• All connections use HTTPS, and the application sets strict browser security headers.
• Access is invite-only.

No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify you as required by law.

7. Your Choices and Rights

• Access and correction: you can view and update your organization's settings and credentials in Sentinel, or email us for a copy of the information we hold about you.
• Deletion: you can delete your account and all of your organization's data at any time under Settings → Delete account, or by emailing us.
• Revoking Walmart access: you can remove or rotate your API credentials in Walmart Seller Center at any time.
• Email: you can unsubscribe from marketing emails using the link in any message. Service emails, such as account confirmation, are part of the Service.

Depending on where you live (for example, California, the European Economic Area, or the United Kingdom), you may have additional rights to access, correct, delete, or port your information, or to object to or restrict certain processing. To exercise any right, email us at the address below. We will verify your request and respond within the time required by law. We will not discriminate against you for exercising your rights.

If you are in the EEA or UK, we process your information to perform our contract with your organization, to meet legal obligations, and for our legitimate interests in operating and securing the Service. You may complain to your local data protection authority.

8. International Users

Sentinel is operated from the United States, and our providers store data in the United States. If you use Sentinel from outside the United States, your information will be transferred to and processed in the United States.

9. Children

Sentinel is a business service and is not directed to anyone under 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this policy as Sentinel changes. We will post the new version on this page with a new effective date and, for material changes, notify account holders by email or in the app before the changes take effect.

11. Contact Us

For privacy questions or requests:

SJK Enterprises LLC 7869 Burden Rd Machesney Park IL 61115 Email: sam@sjkenterprises.com