Privacy Policy
Last updated: July 25, 2026 · Cloudnet Software ("we", "our") operates the Sentinel platform. This policy explains what Sentinel collects, what it never collects, and where that data lives.
Metadata-only by design
The Sentinel agent and the Sentinel Browser Activity Intelligence extension are architected around a strict metadata-only contract: they record what happened (which site, which file name, how large), never the content itself. There is no content-bearing field anywhere in the collection pipeline — extension, agent, or backend.
What We Collect
Sentinel is an enterprise workforce analytics and data-loss-prevention platform deployed by organizations on their own devices. Under the direction of the deploying organization (the data controller), the Sentinel agent and browser extension record activity metadata, including:
Endpoint activity: foreground application names and durations, active/idle time, attendance and session timelines, and website domains visited.
Browser activity metadata: URLs and domains visited, upload and download events, and file names, extensions and sizes.
Device identifiers: the device hostname, a device identifier, and the operating-system username of the signed-in user.
What We Never Collect
Sentinel is built on a metadata-only contract. The platform does not record:
Page content, file content, or document text of any kind.
Clipboard content, keystrokes, passwords, authentication tokens, or form data.
Personal communications, photos, videos, or biometric information.
How the Data Is Used
Collected metadata is used exclusively for:
Security monitoring, insider-risk detection, and data-loss prevention (for example, blocking uploads of sensitive files to file-sharing sites).
Workforce productivity analytics and operational reporting for the deploying organization.
Incident investigation, audit, and compliance support requested by the deploying organization.
Where the Data Goes
All telemetry is transmitted only to the deploying organization's own Sentinel backend (self-hosted infrastructure or the organization's dedicated cloud tenant). Data is not sold, rented, or shared with advertisers, data brokers, or any unrelated third party.
Cloudnet Software personnel may access data only where strictly necessary to operate, maintain, or support the service, under confidentiality obligations.
Data Security & Retention
Data is encrypted in transit and at rest, and access is restricted by role-based controls. Retention periods are configured and controlled by the deploying organization; when an organization stops using Sentinel, its data is deleted or returned on request.
Your Rights
Because Sentinel is deployed by your organization, requests to access, correct, export, or delete your activity data should be directed to your organization’s IT or HR administrator, who controls the data. We support our customers in fulfilling valid data-subject requests.
Changes to This Policy
We may update this policy from time to time. Material changes will be posted on this page with an updated revision date.
Sentinel Browser Activity Intelligence (Chrome Web Store)
The Sentinel browser extension is distributed to organization-managed devices via enterprise policy together with the Sentinel endpoint agent. It reports browser activity metadata (URLs and domains visited, upload/download events, and file names, extensions and sizes) and enforces the organization's data-loss-prevention policy by blocking sensitive-file uploads to file-sharing sites.
- Never records page content, file content, clipboard content, keystrokes, passwords, or form data.
- Sends metadata only to the deploying organization's own Sentinel backend.
- Is not sold or shared with advertisers; not used for advertising or credit decisions.
- Is managed by the organization and is not a consumer product.
Questions about this policy?
For privacy questions or data requests, contact us or your organization's Sentinel administrator.