Privacy Policy

This Privacy Policy explains how Reviewal ("we," "us," or "our") collects, uses, shares, and protects personal data when you use Sentinel by Reviewal (the "Service" or "Sentinel"). It also describes your rights regarding your personal data and how to exercise them.

Sentinel is a business-to-business (B2B) social media compliance monitoring platform. As of the effective date of this Policy, Sentinel supports Instagram accounts; support for additional platforms may be added over time. This Policy applies globally to all users of the Service.

By using Sentinel, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.

1. Who we are and how to contact us

Chafai Solutions LLC, operating as Reviewal, is the data controller for the personal data we collect about you as our customer: your account and identity data, your preferences, your activity logs, your billing metadata, and your support correspondence. For the content and metrics we process from the social media accounts you connect, and for the text and media you submit for scanning, you are the controller and Reviewal acts as your processor under our Data Processing Agreement. For all privacy-related inquiries, please contact us at sentinel@reviewal.team.

We will respond to a verified privacy request within one month of receiving it. If a request is unusually complex, or if you have made several requests, we may extend that by up to two further months, and we will tell you within the first month if we do and why. If we decide not to act on a request, we will tell you why within one month and explain how to complain to a data protection authority or seek a remedy in court. Urgent matters, such as a deletion request or a security issue, are handled as quickly as we reasonably can.

EU / UK Representatives: Reviewal has not yet appointed a representative in the European Union or the United Kingdom under Article 27 of the GDPR / UK GDPR. Data subjects in the EU or UK may contact us directly via the email address above for any inquiries concerning the processing of their personal data. We intend to appoint local representatives as our EU/UK customer base grows.

2. What personal data we collect

2.1 Account and identity data

When you create a Sentinel account, we collect your email address and, if you set one, a password (which is never stored in readable form; password hashing is managed by our authentication provider, Supabase). If you sign in with Google, we receive the basic profile information Google returns (name, email, profile image). We also store your language preference and other interface settings.

2.2 Connected social media account data

When you connect an Instagram account for monitoring, we collect the account's public profile information: username/handle, display name, avatar URL, verified status, follower count, and bio. We only collect data for the account you connect, being the account you own or are authorized to monitor. We do not go out and collect data about accounts you have not connected.

If you connect an account that belongs to someone else, you are responsible for telling that person that their public content is being monitored through Sentinel and for giving them the information required by data protection law. We will help you answer any request they make to us. Write to sentinel@reviewal.team and we will respond within thirty days.

2.3 Content and metrics from connected accounts

For each connected account, we retrieve the account's own public posts, captions, media thumbnails, permalinks, timestamps, media types, and public engagement counts (likes, comments). Where a connected account is read through the platform's own interface, we may also retrieve reach, saves and shares. We do not collect impressions or profile-visit counts. We store daily snapshots of follower count and account-level metrics to power growth and trend charts.

2.4 Scan inputs and results

When you use the Post Scan, Caption Analyzer, or DM Scripts feature, we process the text and/or media you submit (captions, images, videos, or a message script you paste or attach as a document) to produce a compliance assessment. We store the input (or a hash of it), the resulting score, verdict, findings, and AI-generated explanation. Manual pre-publish scans and script reviews are kept in your private history and never displayed publicly. Questions you ask the in-app compliance assistant, and its answers, are stored with your account so the conversation is there when you come back; you can delete it at any time from the assistant, which removes the text of your questions and the answers; we keep only the date and cost of each question so the daily usage limits keep working.

2.5 Corrections made by our team

When a member of our team reviews a compliance result for your account and concludes our system got it wrong, we store that decision so the same mistake is not repeated on your account: the text that was misjudged, the corrected score and verdict, the rules we ruled out, and a short note explaining why. These corrections are used only when we assess content for the same connected account. They are never used for another customer and never used to train an AI model. We keep a correction for as long as the account it was made on is connected, and delete it when that account is disconnected or the account is deleted.

2.6 Preferences and settings

We store your notification preferences, timezone, language preference, and similar interface settings so Sentinel functions as you expect.

2.7 Activity logs

We maintain a per-user audit trail of significant account actions (connecting or disconnecting accounts, subscription changes, deletion requests) including the action, an optional detail, severity, timestamp, and the IP address the action originated from.

2.8 Operational and technical data

We collect standard technical data required to operate Sentinel: IP address, browser type, device information, referring URLs, and pages accessed.

2.9 Billing data

For paid subscriptions, we store your subscription status, plan, billing cycle, and the opaque customer/subscription identifiers issued by our payment processor, Stripe. We do not store or process credit card numbers, bank account details, or other payment card data. All payment card data is handled directly by Stripe, which is PCI-DSS compliant.

3. How we use personal data

• Providing the Service. Authenticating you, connecting your social media accounts, retrieving public content and metrics, performing compliance scans, generating reports and recommendations, and displaying dashboards.
• AI-assisted compliance analysis. Sending caption text, bio text, media, and account context to our AI sub-processors (Anthropic and Groq) to produce compliance assessments and plain-language explanations.
• Emails and notifications. We send email, and show notices in the app, in these categories. Service messages about your account, its security and your billing, and notices about changes to our legal terms or our service providers: these are part of the Service and are always sent. Replies to support requests you open. Threat alerts about the accounts you monitor: you can turn them off in Settings, System preferences, or with the unsubscribe link in each alert. Product emails: one email to help you set up Sentinel after you subscribe, and service updates that tell you about changes to Sentinel affecting your account, such as new or changed checks and features, or a problem that affected your account and what we did about it. Each product email carries an unsubscribe link. Team invitations that a member of a workspace asks us to send to the person they invite, which carry an unsubscribe link for that person. We do not send advertising, and we do not sell, rent or share your email address for anyone else's marketing.
• Customer support. Responding to your inquiries, investigating issues, and providing troubleshooting assistance.
• Billing and payments. Processing subscription payments through Stripe, sending invoices, and managing your subscription.
• Product improvement. Analyzing aggregate, anonymized usage patterns to improve the Service. We do not use personal data for advertising, ad targeting, or profiling.
• Security and fraud prevention. Detecting and preventing abuse, unauthorized access, and fraudulent activity.
• Legal compliance. Complying with our legal obligations, responding to lawful requests from authorities, and enforcing our Terms of Service.

4. Legal bases for processing (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy laws, we rely on the following legal bases to process your personal data:

• Performance of a contract (Art. 6(1)(b) GDPR). For providing the Service you subscribed to, including account creation, compliance scanning, billing, and support.
• Legitimate interests (Art. 6(1)(f) GDPR). For fraud prevention, security, aggregate analytics, service improvement, telling you about changes to the Service you use, and administering the Service. Our legitimate interests are balanced against your rights and freedoms.
• Consent (Art. 6(1)(a) GDPR). Where a specific feature asks for your consent separately and you give it. We do not rely on consent for the core Service. When you choose to sign in with Google, Google asks for your permission to share your name, email address and profile picture with us, on Google's own consent screen. We receive only what you allow there.
• Legal obligation (Art. 6(1)(c) GDPR). Where we must retain or disclose data to comply with applicable law.

5. AI-assisted processing and automated decisions

Sentinel uses AI models to assess whether social media content complies with the policies of the target platform (currently Instagram / Meta). Specifically:

• We send caption text, bio text, highlight titles, and (for manual scans) uploaded images or videos to our AI sub-processors Anthropic (Claude) and Groq (Llama and Whisper) for analysis.
• The AI produces structured findings, a compliance score, a verdict, and a plain-language explanation.
• A deterministic rule layer runs on every scan. On text-only scans whose first-pass result falls in a range we treat as uncertain, a second AI verification pass re-checks that result to reduce false positives. Scans of an image, a carousel of images or a video are not re-checked by the verifier, because the verifier reads text only and cannot see the media.
• Results are cached (keyed on a hash of the content plus the rubric version), so unchanged content is not repeatedly re-sent to AI providers.

We have selected AI providers with strong data protection commitments. Our AI sub-processors (Anthropic and Groq) do not use API inputs to train their models under their standard API terms. See our AI Transparency Notice for further detail.

6. Third parties we share data with

We share personal data only with the third-party sub-processors necessary to operate Sentinel. All sub-processors are bound by contractual data protection obligations consistent with GDPR requirements.

This list was last updated on 11 October 2026. Changes so far:

• 11 October 2026: disclosed Google (Sign in with Google). It receives your name, email address and profile image only if you choose that sign-in method. This sign-in option was already available and was missing from the list, so this is a correction to the list rather than a new sub-processor.
• 27 July 2026: initial list (Supabase, Railway, Anthropic, Groq, Apify, Resend, Stripe).

We also disclose data (a) when required by law, subpoena, or lawful government request; (b) to protect the rights, safety, and property of Reviewal, our users, or the public; and (c) in connection with a corporate transaction (for example a merger, acquisition, or asset sale), in which case we will notify affected users.

7. International data transfers

Primary customer data (identity, account records, connected account content, and user-uploaded content) is stored in the European Union via Supabase and Railway. Some processing takes place outside the European Union, in particular:

• AI processing by Anthropic and Groq occurs in the United States.
• Transactional email delivery by Resend occurs in the United States.
• Payment processing by Stripe occurs in the United States and European Union.
• Apify scraping infrastructure may operate in the European Union or the United States.

For transfers of personal data from the European Economic Area, United Kingdom, or Switzerland to the United States or other third countries, we rely on appropriate safeguards under GDPR Chapter V, in particular the European Commission's Standard Contractual Clauses (SCCs) and, where the UK GDPR applies, the UK International Data Transfer Addendum. We only send the minimum data necessary for each processing purpose.

Where you are established in the European Economic Area or the United Kingdom and we act as your processor, the transfer of personal data to us is covered by the Standard Contractual Clauses incorporated into our Data Processing Agreement. You can ask us for a copy at sentinel@reviewal.team.

You can ask us for a copy of the transfer safeguards we rely on for any sub-processor listed in Section 6 by emailing sentinel@reviewal.team. We will send you the relevant Standard Contractual Clauses, with commercially confidential terms redacted, or tell you where the sub-processor has published them.

8. How long we retain personal data

We retain personal data only for as long as necessary for the purposes described in this Policy or as required by law:

• Account data: retained for the life of your account. Deleted when you delete your account.
• Connected social media data (posts, metrics, scans, threats): retained until you disconnect the relevant account, at which point it is deleted together with its related records.
• Activity logs: retained for 24 months from the date of each logged action.
• Scan history: the scan record, its score, findings, and explanation are retained for the life of the connected account or until you delete the record. The image or video you uploaded for a manual scan is kept as a preview for as long as storage allows and may be removed sooner.
• Team corrections: retained while the connected account they relate to is connected, and deleted with it.
• Invitations: the email address of a person invited to a workspace is kept while the invitation is open and deleted within 30 days after it expires, is accepted, or is withdrawn.
• Acceptance records: we keep a record that you accepted these documents, with the date, the version and the surface, for the life of your account and for six years afterwards. We remove the IP address and browser details from that record when the account is deleted.
• Unsubscribe records: if you tell us to stop sending a category of email, we keep that instruction, as your address and the category, for as long as we send email at all, including after your account is deleted. Forgetting it would mean emailing you again after you asked us not to. The record of when a preference changed is kept for 24 months, and the unsubscribe links we put in emails to you are deleted with your account.
• Billing records: retained for the duration of your subscription plus the period required by tax and accounting laws (typically 7 years in the United States).
• Backups: our infrastructure providers may retain data in encrypted backups for a short period (typically 7 to 14 days) after deletion, after which it is permanently purged.

When you request full account deletion, we will delete or anonymize your personal data across our production systems within thirty (30) days, and it will be fully purged from all backups within a further backup rotation cycle (typically 7 to 14 days).

9. Your rights

Depending on your jurisdiction, you have certain rights regarding your personal data. We honor these rights globally, to the extent operationally practical, regardless of where you are located.

9.1 Rights under GDPR (EEA) and UK GDPR

• Right of access. You can request a copy of the personal data we hold about you.
• Right to rectification. You can ask us to correct inaccurate or incomplete data.
• Right to erasure ('right to be forgotten'). You can ask us to delete your personal data.
• Right to restrict processing. You can ask us to limit how we use your data.
• Right to data portability. You can receive your data in a structured, machine-readable format.
• Right to object. You can object to processing based on legitimate interests.
• Right to withdraw consent. Where processing is based on consent, you can withdraw it at any time.
• Right to lodge a complaint. You can lodge a complaint with your national data protection authority. In the European Economic Area, the European Data Protection Board publishes the list of national authorities at edpb.europa.eu. In the United Kingdom, the authority is the Information Commissioner's Office at ico.org.uk.

9.2 Rights under CCPA / CPRA (California)

• Right to know what personal information we collect, use, and share.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of sale/sharing of personal information. We do not sell or share personal information as defined by the CCPA.
• Right to non-discrimination for exercising your privacy rights.

9.3 Rights under UAE PDPL

• Right to be informed of the processing of your personal data.
• Right to access and correct your personal data.
• Right to request deletion of your personal data.
• Right to restrict or object to the processing of your personal data.
• Right to lodge a complaint with the UAE Data Office.

9.4 How to exercise your rights

To exercise any of these rights, please contact us at sentinel@reviewal.team. We may need to verify your identity before processing your request. The response times in Section 1 apply. We will not charge you a fee for exercising your rights, unless your request is manifestly unfounded or excessive.

10. Security measures

We take the security of your personal data seriously. Our security measures include:

• Transport encryption: all traffic is protected by HTTPS/TLS.
• Encryption at rest: databases and stored content are encrypted at rest by our infrastructure providers.
• Authentication: we use industry-standard JSON Web Token (JWT) verification for protected routes, validated against our authentication provider's public keys.
• Multi-tenant isolation: every account-scoped operation enforces ownership verification; requests for accounts you do not own return an error indistinguishable from a request for a non-existent resource.
• Password handling: passwords are hashed (never stored in readable form) by our authentication provider (Supabase).
• PCI compliance: payment card data is handled exclusively by Stripe, a PCI-DSS Level 1 compliant provider.
• Access controls: our internal team accesses production data only when strictly necessary for support, quality assurance, security, or billing administration. Viewing your account from our side is read-only: the Service refuses any write made from that view. A small number of administrative actions can change your data, and only a named, signed-in staff member can take them: correcting a compliance result our system got wrong, correcting a profile field, changing an access level, granting or ending complimentary access, answering a support ticket, and deleting an account. Each of those actions writes a record to an append-only audit log showing who acted, what they changed, and when.
• Incident response: in the event of a personal data breach affecting your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected users without undue delay.

No security system is impenetrable. While we implement industry-standard safeguards, we cannot guarantee absolute security. You are responsible for protecting your account credentials and for the confidentiality of your session.

11. Internal team access

For customer support, quality assurance, and security purposes, authorized members of our internal team may access your account data, including your compliance results, in order to reproduce and resolve issues and to check the accuracy of our automated assessments. Viewing your account is read-only: the Service refuses any write made from that view. Corrective actions are possible through our internal console and are limited to the list in the Security section above. Where we correct a compliance result, the corrected score is the score you see, and we also keep the correction so the same mistake is not repeated on similar content on your account, as described in Section 2.5. Every staff access to your account, and every administrative action, is recorded in an append-only audit log, used only for legitimate support, safety, or legal-compliance purposes. We rely on our legitimate interest in providing and improving an effective service as the legal basis for this processing.

12. Children's privacy

Sentinel is not directed to children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected personal data from a person under 18, we will delete it promptly. If you believe we have collected data from a minor, please contact us at sentinel@reviewal.team.

13. Cookies and similar technologies

We use only strictly necessary cookies and browser storage required for authentication and functional preferences (such as your language and interface settings). We do not use advertising cookies, tracking cookies, or cross-site tracking. For full detail on our cookies and browser storage, please see our separate Cookie Policy.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this Policy and, where legally required or otherwise appropriate, notify you by email or via an in-app notice. Continued use of the Service after an updated Privacy Policy becomes effective constitutes your acceptance of the update.

15. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact Reviewal at sentinel@reviewal.team.

Reviewal is the trading name of Chafai Solutions LLC, a limited liability company organized under the laws of the State of Delaware, United States, with registered office at 16192 Coastal Highway, Lewes, Delaware 19958, United States. Chafai Solutions LLC is the data controller for customer account data and the processor for connected account content, as described in Section 1 and in our Data Processing Agreement.