Privacy Policy

Last updated 20 October 2026 · Private beta

This policy explains what personal data SentinelGrid Africa Ltd ("we", "us") collects and how we use it. It covers this website, the private beta application process, and the Pharos platform at app.pharos.sentinelgrid.africa. Pharos is currently in private beta, and we will review this policy again before general availability.

Information we collect

Beta applications. Name, work email, organisation, country, role, organisation type, security team size, current tooling, and what you would like Pharos to help with. To limit repeat submissions we also keep a keyed hash of the network address a form was sent from. We do not store the address itself, and we do not collect payment information through this site.

Accounts. For each user: email address and role, and the organisation they belong to. For each organisation: its name, country, sectors and plan. Passwords are stored only as hashes. If you turn on two-factor authentication, your authenticator is registered with our sign-in provider, and recovery codes are stored as hashes.

Information you add to the platform. Monitored assets (IP addresses, ranges, domains and ASNs), suppliers you track, indicators you submit and any notes you attach, a webhook address and its signing secret, and your API key (stored as a hash). Alert and digest preferences are stored with your account.

Activity and records generated for you. Notifications, weekly digests and their delivery status, webhook delivery logs, and exposure findings. Exposure findings can include email addresses belonging to your organisation's users when they appear in a public breach. Our staff's actions on your account are recorded in an audit log that includes the staff member's email. We also count failed sign-in attempts per email address so we can pause repeated guessing.

Technical data. When you connect, our hosting and network providers process your IP address and basic device information to deliver the service. Your sign-in session is kept in your browser's local storage. We do not use advertising or analytics trackers.

How we use it

• To provide Pharos: scoring and enriching indicators, matching them against your assets, and delivering alerts, digests and API access.
• To secure the service, including sign-in protection and audit records.
• To evaluate beta applications, onboard accepted organisations and contact you about your account.
• To understand demand across sectors and regions, and to improve the product.
• To meet legal obligations.

We do not sell personal data.

Who we share it with

We use service providers to run Pharos. Each receives only what is needed for its task, and each is bound by its own terms and privacy policy. By category:

• Hosting and database providers run our database, sign-in and server functions. Account, platform and application data is stored with them.
• Web hosting providers serve this website and the platform's web interface.
• Email delivery providers send our emails. They receive recipient addresses and message content, which includes welcome emails with a one-time setup link, alerts, weekly digests, and the notification we send our own team when a beta application arrives.
• Document rendering providers turn weekly digests into PDF documents. They receive the digest content, which includes your organisation's name.
• AI model providers write indicator summaries and each digest's executive summary. They receive indicator records and, for digests, a sample of indicators and your organisation's name.
• Indicator enrichment providers supply reputation, location and registration lookups. They receive the indicator itself, such as an IP address, domain or file hash. Indicators that customers submit are enriched in the same way.
• Breach, leak and ransomware monitoring providers power exposure monitoring. They receive search terms drawn from your account: your organisation's name, your monitored domains and the email addresses of your users.

The threat data sources we collect from only send data to us. They receive nothing about our customers.

The platform's web interface is self-contained: its fonts and map outlines are served with the app itself, so using it sends nothing about you to a font or map provider.

A current list of the providers we use in each category is available on request at intel@sentinelgrid.africa. We may also disclose information where the law requires it, or to protect the security of the service and its users.

Indicators you submit

Indicators you submit are reviewed by our operators. If one is approved, it becomes part of the Pharos indicator database, which is available to other customers according to their plan. Your organisation's name and your notes are not shown to other customers. Do not include confidential details about your organisation in an indicator or its notes.

Where data is processed

Our providers operate internationally, so your data may be processed in countries other than the one where you or we are based.

How long we keep it

Account and organisation data is kept while your organisation has an account. When an account is closed we deactivate it, and we delete or anonymise the personal data we hold about its users on request. Audit records of staff actions are kept for security and accountability. Beta application data is kept for as long as it is useful for evaluating and following up on your application.

How we protect it

• Connections to the platform are encrypted, and browsers are told to use only secure connections.
• Passwords, API keys and recovery codes are stored as hashes, not in readable form.
• Two-factor authentication is available for every account, and passwords expire every 90 days.
• Each organisation's data is separated by database access rules, and our staff access is role based and logged.
• Repeated failed sign-ins on an account are paused automatically.

No system is perfectly secure, and we cannot guarantee absolute security.

Your rights

You can ask us to give you a copy of the personal data we hold about you, correct it, delete it, restrict how we use it, or stop using it for a particular purpose. If you are in an organisation with a Pharos account, we may need to involve your organisation administrator. If you are unhappy with how we handle your request, you can complain to the data protection authority in your country.

Changes to this policy

We will update this policy as Pharos develops and will tell active beta participants about material changes.

Contact

Questions about this policy, or a request to access or delete your data, can be sent to intel@sentinelgrid.africa.