What we hold about you, and why
Written to be read in full. No clauses inherited from a template, and no “we may collect” where the concrete answer is yes or no.
Private platform with approval by region. Payments and free trials are paused; creating an account does not unlock data until approval.
We keep your email address, an approximate location from the moment you register, and technical details about your connection (provider, postal code). We do not store your IP address, your device’s GPS location only reaches our servers if a moderator chooses to save one of their routes, there is no advertising, no third-party analytics, and we sell nothing.
Who is responsible
Sentry View is an independent security intelligence platform operated by Sentry UAV NSCE SpA (Chilean tax ID 77.779.577-5). The data controller is Sentry UAV NSCE SpA, reachable at gerencia@sentryuav.app — that is the company’s official address, which is why it does not share the platform’s domain. It is a small operation with centralised editorial and technical responsibility; we say so plainly because it conditions response times and the reach of coverage.
What we collect and why
When you create an account
- Email address and password. The password is never stored in plain text; it is handled by the authentication provider (Supabase) with standard hashing.
- Registration date and assigned role (Viewer, Member or Moderator).
Approximate registration location
Once only, at sign-up, an external IP geolocation service (ipwho.is) is queried and we keep:
- Country, region and city.
- Coordinates rounded to two decimal places, roughly one kilometre of precision. It is not your address.
- Time zone.
- Postal code, when the service returns one.
- Internet provider (ISP) and autonomous system number (ASN), when the service returns them.
The IP address is never stored, yours or anyone’s: it is sent to the lookup service and only the result is kept. Signing up and using the platform never ask for your device’s GPS; the one exception is the optional route mode for moderation accounts, described below, and even then the location stays on the device unless the moderator chooses to save a route to their account.
The combination of internet provider, autonomous system number and postal code is fairly specific information about a connection. On its own it does not identify a person, but it is more than what “which country are they writing from” requires. It is collected to detect abusive or automated sign-ups, which is a real problem on an open platform covering a context of violence.
If you would rather not provide it, you can register through a VPN: the location stored will be the VPN’s and the platform works exactly the same. And if you already registered and want that data removed from your profile, ask by email and it will be deleted.
While you use the platform
- Your browser stores locally your chosen language, which panels you collapsed and the date of your last visit. That information never leaves your device and is erased if you clear site data.
- We do not record your path through the application, which reports you opened, or how long you stayed.
- The hosting provider (Vercel) generates standard server logs, subject to its own policy.
If you file a report
Only moderation accounts can file reports. If yours does, the internal user identifier, the report content and the metadata of any photographs you upload are associated with it — including capture date and, when the file carries it, sensor position. Check that metadata before uploading if you do not want it kept.
Route mode (moderation accounts only)
Moderation accounts can turn on route mode to record the streets they travel along during field work. Only then, and only after the browser asks for permission, does the platform read the device’s location. The recorded route:
- is drawn only on that moderator’s map and is not sent to Sentry View’s servers unless they choose to save it (see below);
- is kept in that device’s browser, so a reload does not lose it, until the moderator deletes it or clears site data;
- can be downloaded as a GPX or GeoJSON file, which from then on is under the moderator’s control.
If the moderator taps «Save to my account», that route — its points with time, accuracy and, when available, altitude — is stored in the platform’s database linked to their account. Only that moderator can see it: database permissions block every other account, including other moderators. They can delete it at any time from «My routes» in the dashboard, and it is deleted automatically 30 days after being saved. Nothing is saved to the account without that explicit step.
Haiti moderators can also turn a measured pass through one of the Port-au-Prince corridors into a traffic update, after reviewing it. What goes out is the same as in a manual update — the corridor, its status, the direction and the time — plus the average speed; never the route itself.
Recording stops when the moderator pauses or finishes it, or signs out. If the browser closes the page while recording, it resumes when the moderator comes back within 30 minutes, and only if the location permission was already granted. Other roles never see this option and are never asked for their location.
Who can see what
| Data | Who sees it |
|---|---|
| Your email, role and registration date | You and moderation accounts |
| Your approximate registration location, ISP, ASN and postal code | You and moderation accounts |
| Your password | Nobody — not even us |
| Your activity inside the platform | Nobody — it is not recorded |
| A route recorded in route mode (moderators) | Only that moderator, on their own device |
| A route a moderator saves to their account | Only that moderator — deleted automatically after 30 days |
Today there are very few moderation accounts and they are administered directly by the project operator. No third party has access to the database.
Third-party services
The platform relies on these providers, each with its own privacy policy:
- Supabase — database, authentication and file storage.
- Vercel — site hosting.
- ipwho.is — IP geolocation, queried once at sign-up.
- CARTO and Esri — base map and satellite tiles.
- TomTom — vehicle traffic layer for the Haiti and Africa regions, when enabled.
When the map loads, your browser contacts the tile providers directly, which exposes your IP address to them as any other site with maps would. We cannot avoid that without dropping the map.
How long we keep it
- Your account and profile: as long as the account exists. If you ask for deletion, they are erased.
- Automatically ingested news headlines: 60 days, then deleted automatically.
- Routes a moderator saves to their account: 30 days from saving, then deleted automatically; earlier if the moderator deletes them.
- Reports and map layers: kept as a historical record. They contain no personal data about people who consult them.
Your rights
At any time, without giving a reason, you can ask to access everything we hold about you, correct it, delete specific fields (for example the ISP and postal code, keeping the account), or delete the entire account with all its data.
Write to gerencia@sentryuav.app from your account’s email address. The commitment is to reply within 30 days.
Minors
The platform is not aimed at people under 16 and accounts are not knowingly created for them. If we find one, it is removed.
Security, and its limits
Access to information is enforced by database-level permissions, not just by the interface: someone without the right role does not receive the data, however they manipulate the browser. Exact report coordinates are degraded on the server before being sent to Viewer-level accounts.
That said, no system is infallible and this one is run by one person. If we detect an incident affecting personal data, we will notify affected accounts by email, describing what happened and which data was involved.
Changes to this policy
If it changes substantially, we announce it on the platform. The date of the last update is always at the top of this page.
Payments and billing
Payments are paused. New charges are disabled. The following describes data from previous payments and confirmations already in progress.
Membership charges are processed by Flow, an external payment processor. Sentry View does not receive or store card data: it is entered directly in the processor's environment and is subject to its privacy policy.
From that process, Sentry View keeps only what is needed to know whether an account has active access: the order identifier, the payment date and the date until which membership is active. That information is kept while the account exists and for as long as applicable accounting obligations require.