Privacy Policy
Last updated: June 30, 2026
Blackhorse Sentinel ("we", "us") provides institutional language-drift analysis via the web at blackhorsesentinel.com and through our iOS/iPadOS application. This policy explains what we collect, why, and your choices.
Information we collect
- Account data: email address and display name, used to create and secure your account.
- Content you submit: text and metadata you ingest for analysis, stored to generate and retain your reports.
- Usage data: analysis counts and API call counts, used to enforce plan limits and improve the service.
- Billing data: handled by Stripe; we store only a Stripe customer reference and subscription status, never card numbers.
- Device data (app): if you enable notifications, a push token; biometric checks happen on-device and are never transmitted to us.
- Browser extension: if you use Blackhorse Reader, article text you explicitly send for analysis, connection tokens stored in extension storage, and optional API key — we do not read publisher login cookies.
Blackhorse Reader extension
The Reader extension reads article content from web pages only when you click Analyze or use the context menu. Extracted text is sent to Sentinel to generate reports. Extension OAuth tokens are issued by Sentinel and stored locally in your browser. You can disconnect at any time from the extension popup.
How we use information
To operate your workspace, generate signed reports, enforce subscription entitlements, provide support, secure the service, and comply with law. We do not sell your personal information.
Service providers
We share data only with processors that run the service: Supabase (authentication and database), Stripe (payments), Vercel (hosting), and Resend (transactional email). Each processes data on our behalf under their terms.
Data retention
We retain account and report data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.
Security
Scoring runs server-side, report receipts are cryptographically signed, and API keys are stored only as hashes. Access is protected by row-level security so tenants are isolated.
Your rights
You may access, correct, export, or delete your data. To exercise these rights, email privacy@blackhorsesentinel.com.
Children
The service is intended for institutional and professional use and is not directed to children under 13.
Contact
Questions about this policy: privacy@blackhorsesentinel.com.