Privacy Policy

1. Who We Are

Sentinel Stacks is a product of IBB Solutions LLC ("IBB Solutions," "we," "us," or "our"). We provide autonomous cloud security scanning, vulnerability assessment, and compliance monitoring services. For product and security inquiries, contact us at security@sentinelstacks.com. For corporate and business inquiries, contact IBB Solutions LLC directly at contact@ibbsolutionsllc.com.

2. What We Collect

Information You Provide

Data Type	Examples	Why We Collect It
Contact Information	Email address, name, company	Account creation, scan reports, support
Cloud Scan Targets	Domain names, IP ranges, AWS account IDs	Performing the requested security scan
Cloud Credentials	Read-only IAM roles, API keys	Cloud infrastructure auditing (encrypted at rest)
Payment Information	Billing address, payment method	Processing subscription payments (via third-party processor)
Communications	Support emails, form submissions	Customer support and service improvement

Information Collected Automatically

When you use our website or Service, we automatically collect certain technical data:

• IP address and general geographic location (country/region)
• Browser type, operating system, and device type
• Pages visited, time spent, and navigation patterns
• Referring URLs and UTM parameters
• Scan request timestamps and completion status

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service:

• Essential cookies — Required for the Service to function (session management, security)
• Analytics cookies — Help us understand how visitors use the site (e.g., page views, feature usage)
• Preference cookies — Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

3. How We Use Your Data

We use the information we collect to:

• Provide, operate, and improve the Sentinel Stacks platform
• Execute security scans and generate reports on your behalf
• Send scan results, vulnerability findings, and hardening recommendations
• Communicate about your account, new features, or security advisories
• Detect and prevent fraud, abuse, or unauthorized access
• Comply with applicable legal obligations
• Analyze aggregate, anonymized usage patterns to improve the Service

We do not sell your personal data to third parties. We do not use your cloud credentials, scan results, or proprietary infrastructure data for any purpose other than providing the Service you requested.

4. Scan Data and Security Findings

Security scan results, vulnerability reports, and infrastructure data you submit are treated as confidential. This data is:

• Encrypted in transit using TLS 1.2+
• Encrypted at rest using AES-256
• Accessible only to you (and IBB Solutions personnel as required to operate the Service)
• Not shared with third parties, used for training AI models, or disclosed except as required by law

We retain scan data for as long as your account is active or as needed to provide the Service. You may request deletion of your scan data at any time by contacting security@sentinelstacks.com.

5. Sharing Your Information

We only share your information in the following limited circumstances:

• Service providers — Trusted third parties who help us operate the Service (hosting, email delivery, payment processing). These providers access data only as necessary and are bound by confidentiality obligations.
• Legal requirements — When required by law, regulation, legal process, or government request.
• Protection of rights — When we believe disclosure is necessary to prevent harm or protect the rights of IBB Solutions, our users, or the public.
• Business transfers — In connection with a merger, acquisition, or sale of assets, in which case we will notify you via email or prominent notice before your data is transferred.

6. Cloud Credentials Security

We take special precautions with cloud credentials you provide for infrastructure auditing:

• Credentials are encrypted immediately upon receipt and stored using AES-256-GCM encryption
• Access to decrypted credentials is restricted to the scan execution process only
• We recommend using read-only IAM roles with minimum necessary permissions
• Credentials are not logged, cached in plaintext, or retained longer than needed for the active scan session

7. Data Retention

We retain your data for as long as your account is active and for a reasonable period afterward to comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:

• Account and contact data — Duration of account plus 2 years
• Scan results and reports — Duration of account (deletable on request)
• Cloud credentials — Deleted after scan completion or account termination
• Payment records — 7 years (legal/tax requirements)
• Usage logs — 90 days rolling

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data (subject to legal retention requirements)
• Portability — Request your data in a machine-readable format
• Opt-out — Unsubscribe from marketing communications at any time
• Restriction — Request that we limit how we use your data

To exercise any of these rights, contact us at security@sentinelstacks.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe we have collected such data, please contact us immediately.

10. International Data Transfers

IBB Solutions is based in the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to this transfer. We take appropriate measures to ensure that your data receives adequate protection in accordance with applicable data protection laws.

11. Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, regular security reviews, and monitoring for unauthorized access. However, no method of transmission or storage is 100% secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect any unauthorized access to your account.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact:

Product & Security Inquiries (Sentinel Stacks)

• Email: security@sentinelstacks.com
• Service: Sentinel Stacks

Corporate & Business Inquiries (IBB Solutions LLC)

• Email: contact@ibbsolutionsllc.com
• Entity: IBB Solutions LLC

We are committed to resolving privacy complaints promptly and transparently.