Legal

Privacy Policy

Effective October 6, 2026 · Last updated October 19, 2026

1.Who we are

This policy explains how SourceBox LLC ("SourceBox", "we", "us") handles personal information in Sentinel by SourceBox. It covers the hosted Command Center at app.sentinel-command.com, this website, and the licence and cloud-sync services we run for self-hosted installs. Capitalised terms not defined here have the meaning in our Terms of Service.

Our two roles. Most of what Command Center holds (footage, camera data, logs about an organization's members) is processed on behalf of the organization that owns the cameras. For that data, the organization decides how it is used and is the "controller" (GDPR) or "business" (US state law), and we are its "processor" or "service provider". For account sign-up, billing, our website, and messages you send us, we decide how the data is used and are the controller.

2.Video: what we hold

Because this is a camera product, here is exactly where video goes.

• Recordings are stored only on your CameraNode, in a database encrypted with AES-256-GCM. We do not receive them and cannot read them.
• Live video is sent from your CameraNode to Command Center in one-second segments and played to signed-in members of your organization. We keep segments in memory only, about the last 60 seconds per camera, and drop them about a minute after a camera stops sending. Live video is never written to disk, object storage, or backups.
• Snapshots on request. A snapshot taken from the dashboard is saved on your CameraNode, not by us. Live images fetched by an MCP tool or by Home Assistant pass through our servers to that tool and are not kept.
• Incident evidence is the exception. When an incident is created by Sentinel AI, by an MCP tool, or by a person, JPEG snapshots and short video clips (taken from the live buffer) can be attached to it as evidence. We store those in our database. Snapshots stay until the incident is deleted. A clip is at most 30 seconds long, and its video is deleted after your plan’s log retention period (30, 90 or 365 days); the incident keeps a note that a clip was taken.
• Motion detection runs on your CameraNode. We receive only the camera, the time, and a motion score, never the frames.

3.What we collect

Your account

Your name, email address, profile photo if you add one, and your organizations and roles. Sign-in is handled by Clerk, so we never see your password. Clerk also keeps session and security information, such as the device, browser and IP address you sign in from.

Billing

Your plan, subscription status, billing dates and whether a payment has failed. Card details are collected and stored by Stripe, through Clerk, and never reach our servers.

Cameras and CameraNodes

For each CameraNode: its name, hostname, local network address and port (unless you turn off local streaming), software version, status, last-seen time, and disk usage. For each camera: its name, group, status, video format, and recording settings. We store only a fingerprint (SHA-256 hash) of each CameraNode's key.

Incidents and Sentinel AI runs

Incident titles, summaries, reports, severity and status, plus their evidence (images, clips, and text notes). For each Sentinel AI run: what triggered it, the outcome, and a record of the steps the agent took.

Activity logs

• Viewing log: who watched which camera, when, from which IP address, and with what browser.
• Audit log: security-relevant actions, such as creating keys or changing settings, with the user, IP address and time.
• MCP activity log: each call an AI assistant made, with the tool, key name, result, duration, and a short summary of its arguments.
• Motion events and notifications (your organization's inbox).

Email

Emails we send for your organization (for example, "camera offline"): the recipient, subject, content and delivery status. If an address bounces or reports an email as spam, we add it to a list of addresses we never email again.

Usage and settings

Hours of live video watched per organization per month, used to apply plan limits. Organization settings such as time zone, notification choices and Sentinel AI settings.

Technical data

• IP addresses are used to apply rate limits. These counters expire within an hour.
• Error reports go to Sentry, our error-tracking provider. They contain the error, the page or API path (without its query string), and your user ID, organization ID and plan. We do not add your name, email or IP address.
• Server logs from us and our hosting provider record requests and errors, and are kept briefly.

This website

This website has no analytics or tracking. It is hosted on GitHub Pages and loads fonts from Google Fonts and code from the jsDelivr and unpkg networks. GitHub's API supplies the star count. Those providers receive your IP address and browser details when your browser contacts them. The Command Center dashboard also loads fonts from Google Fonts.

Messages you send us

If you email us, we keep the message and your address to answer you.

4.Sentinel AI

Sentinel AI is an optional agent that investigates motion and incidents. It is available on paid plans and on licensed self-hosted installs, and it is off until an admin of your organization turns it on. An admin can turn it off at any time.

While it is on, each run sends the following to our AI model provider, Ollama Cloud (Ollama, Inc., United States):

• live camera images (single snapshots, or a few frames taken seconds apart), which may show people, vehicles, licence plates and property;
• camera and CameraNode names, recent motion and incident details, and any instructions an admin gives a manual run.

The model describes what it sees, and the agent may file an incident with images as evidence. The incident and the run record are stored as described above.

We do not use these images to train models. Ollama processes them under its own privacy policy. We will update this policy and give notice before we send Sentinel AI data to a different provider.

Organizations that never turn Sentinel AI on send no images to any AI provider.

Separately, an admin can connect an AI assistant of their choice through MCP. The assistant then receives whatever its key allows it to read, including live images. That assistant's provider is chosen by your organization, not by us.

5.How we use it

We use personal information only to:

• run the Service: sign-in, live video, notifications, incidents, Sentinel AI, and integrations;
• apply plan limits and take payments;
• keep the Service and its users secure, and prevent abuse;
• fix problems and provide support;
• send service emails, such as alerts you have chosen and important account notices;
• meet legal obligations.

We do not sell or rent personal information, share it for advertising, build profiles for marketing, or use your video or images to train AI models.

Legal bases (EEA and UK). We rely on contract to provide the Service you signed up for; on legitimate interests for security, abuse prevention, error tracking, and logs; and on legal obligation where the law requires it. Where we process data for an organization as its processor, the organization decides the legal basis.

6.What your admins can see

If you are a member of an organization, its admins can see your name and email, which cameras you watched and when, the IP address and browser you used, and the actions recorded in the audit log. They can also export or delete that information. Ask your admin if you want to know how your organization uses it.

7.Who we share it with

We use these providers ("sub-processors") to run the Service. Each receives only what its job needs and is bound by its own data-protection terms.

The full sub-processor list, with its change history, is in our repository. We give business customers at least 14 days' notice of a new sub-processor.

We may also disclose information:

• when the law requires it. We have no standing arrangements with law enforcement. We check that each request is valid, disclose only what it requires, and tell the affected organization unless the law forbids it. We do not hold recordings, so requests for footage must go to the camera's owner.
• to protect people. We disclose information where narrowly necessary to prevent serious harm, or to report child sexual abuse material.
• in a business transfer. If SourceBox is merged or sold, the new owner would be bound by this policy, and we would tell you first.

8.How long we keep it

Deleted data can remain in backups until they expire. We do not restore it from a backup except to recover from a failure.

9.Export, deletion and your rights

Admins can manage an organization's data directly in the dashboard, on every plan including Free:

• Export: Settings → Privacy & Data → Download my data (ZIP). This downloads the organization's cameras, nodes, settings, logs, motion events, notifications, incidents, Sentinel AI runs and email records as JSON files, with each incident's images and clips.
• Delete everything: Settings → Danger Zone → Full Organization Reset. This deletes all the organization's data from Command Center in one step, and tells each connected CameraNode to wipe its local recordings. It cannot be undone. Deleting the organization does the same.
• Correct your account: update your name, email and photo from your account menu in the dashboard.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict how it is used, and to withdraw consent. If you are a member and not an admin, ask your organization's admin, or email us at support@sentinel-command.com.

Deleting your own account: choose Delete account in the account menu. Before you confirm, the page shows what will happen in each of your organizations:

• An organization where you are the only member is deleted with your account.
• If you are the only admin of an organization that has other members, make someone else an admin first.
• In the organizations you leave, your viewing history and emails sent to you are deleted. Audit-log entries for your actions stay, as each organization's security record, but show "deleted user", without your IP address.

We may need to verify your identity before acting on a request. We respond within one month, or sooner where the law requires. If a request concerns data we hold for an organization, we may pass it to that organization and help it respond. Exercising your rights will never affect the price or quality of the Service you receive.

10.People on camera

If you appear in footage from a camera connected to Sentinel, the camera's owner decides what is recorded and kept. Recordings are held only on the owner's CameraNode, so please contact the owner first. If you can't, or you believe a camera is being used unlawfully, email support@sentinel-command.com. We will tell you what we can, pass your request to the organization, and act under our Terms if they are being broken.

11.Self-hosted installs

If you run Command Center yourself, its data stays on your own infrastructure and we cannot see it. We receive only:

• Licence checks (if you use a licence key): your install contacts our licence service at start-up and every 15 minutes, sending the key and an install ID. We record the time, result, and the IP address it came from. We also keep the licence's details, such as the contact email, plan and renewal date. We keep these while the licence exists; ask us to delete them once it ends.
• Cloud sync (only if your licence includes it): every 30 minutes, your install sends a copy of its cameras, camera groups, CameraNodes, incidents, motion events, notifications, and Sentinel AI settings and runs. Not sent: CameraNode key fingerprints and incident images and clips, and no video. The copy is kept in a database separate from the hosted service's, for as long as you use cloud sync. Email us to have it deleted.

If you turn on Sentinel AI on a self-hosted install, it uses the AI provider you configure, under your agreement with that provider.

12.Cookies and browser storage

The dashboard uses only cookies that are strictly necessary: Clerk's sign-in session cookies. It also stores a few preferences in your browser's local storage, such as whether you have dismissed the cookie notice and your setup checklist progress. On self-hosted installs, local storage also holds your sign-in token. We use no analytics, advertising, or tracking cookies, so there is nothing to opt out of. If that ever changes, we will ask for your consent first.

13.Security

• All connections use HTTPS.
• Each organization's data is kept separate: every database query is limited to the organization of the signed-in user or key.
• Keys are stored only as SHA-256 fingerprints.
• Recordings on CameraNodes are encrypted with AES-256-GCM.
• Our database and backups are encrypted at rest by our hosting provider.
• Access to production systems is limited to the people who run them.

No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you and the authorities as the law requires. To report a vulnerability, see our security policy.

14.International transfers

SourceBox is based in the United States, and the Service and most of our providers operate there. If you use the Service from elsewhere, your information is transferred to the United States, where privacy laws may differ from yours. For personal data from the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum), which our Data Processing Agreement incorporates, and on equivalent safeguards from our providers.

15.Regional rights

EEA and UK

You have the rights in section 9. You can also complain to your local data-protection authority, though we would like the chance to resolve your concern first.

California and other US states

The categories of personal information we collect are those in section 3: identifiers (such as name, email and IP address), commercial information (plan and billing status), internet activity (logs), and visual information (camera images, as described in section 2). Their sources, purposes, and recipients are in sections 3, 5 and 7. We do not sell or "share" personal information (for cross-context behavioural advertising), and we do not use sensitive personal information to infer characteristics about you.

You may ask to know, access, correct, or delete your personal information, and you may use an authorised agent to do so. We will not discriminate against you for using these rights. Send requests to support@sentinel-command.com.

16.Children

The Service is not for anyone under 18, and we do not knowingly collect personal information from children through accounts. If you believe a child has created an account, email us and we will delete it. Children may still appear in footage from someone's camera; see section 10.

17.Changes to this policy

When this policy changes, we update the date at the top. For a material change, such as a new kind of data, a new AI provider, or a new use of your data, we will email the admins of each organization, or show a notice in the dashboard, before it takes effect. Earlier versions are kept in the website's history.

18.Contact

SourceBox LLC
Privacy questions and requests: support@sentinel-command.com (please put "Privacy" in the subject)
Security issues: security@sentinel-command.com