Privacy Policy

Sentinel is software Cory built to run his own businesses, including Sundance Building & Development and Lucas Capital. It is not sold to the public; it is used by Cory and by people he has personally authorized, such as team members. It brings email, calendars, documents, finances, and business records into one place, and uses AI to help organize them.

We do not sell personal information, and we do not use it for advertising.

Contact form. When you submit the contact form, the site checks what you entered and records your name, email address, and the reason you selected in our hosting provider’s server logs. The form is not yet connected to an inbox, so your message is not currently delivered to anyone. If you need a reply, email coryvlucas@gmail.com directly.

Analytics. This site uses Vercel Web Analytics and Vercel Speed Insights to understand aggregate traffic and performance. These tools do not use cookies to track individuals across sites.

Sentinel stores what its authorized users put into it or connect to it: their sign-in details (name and email address), business records they create — for example contacts, projects, quotes, invoices, tasks, journal entries, and uploaded documents and photos — and information synced from connected services, described next.

An authorized user can connect accounts to Sentinel. Today these are:

• Gmail and Google Calendar — see Google User Data.
• Microsoft 365 email — handled the same way as the Gmail description below.
• Business systems used by Cory’s businesses, such as GoHighLevel and Jackrabbit, for scheduling, customer, and enrollment records.

Google and Microsoft accounts are connected through the provider’s own sign-in and consent screen; business systems are connected with integration credentials those services issue. Sentinel never sees or stores the password for a connected account.

What Sentinel can access, and why

• Sign in with Google — your name, email address, and profile picture, to identify you when you sign in to Sentinel.
• Gmail (permission to read, send, and organize email) — so you can read, search, and answer the email of a mailbox you connect, inside Sentinel. Sentinel reads your messages and labels; sends email when you send it; and, when you take the action in Sentinel, archives a conversation, moves it to or from Trash, or marks it read or unread. Opening a conversation in Sentinel marks it read in Gmail, as opening it in Gmail would. Sentinel never permanently deletes Gmail messages.
• Google Calendar (permission to see and edit calendars) — so your calendars appear in Sentinel’s calendar and schedule views, and so events you create or change in Sentinel are saved to your Google Calendar.

Sentinel does not access Google Contacts, Google Drive, or any other Google data.

What Sentinel stores

• Email: a copy of synced messages — sender, recipients, subject, date, labels, and message content — so they can be shown, searched, and organized; plus the name, type, and size of attachments. Attachment files themselves stay in Gmail and are fetched when you open them, unless you choose to save one into Sentinel.
• Calendar: event titles, times, descriptions, locations, organizers, and attendees for connected calendars.
• Results Sentinel creates from them, such as a short AI summary or category for an email conversation, and drafts you write.
• Authorization tokens issued by Google, which let Sentinel keep syncing without asking you to sign in again. They are encrypted (see How information is protected).

How Sentinel uses it

Only to provide Sentinel’s features to the people authorized to use it — showing your email and calendar, search, the daily brief, AI-assisted summaries and drafts, and actions you take. Google user data is not sold, not used for advertising, not used to determine creditworthiness, and not used to develop, train, or improve AI or machine-learning models.

No one reads your Google data except authorized Sentinel users viewing it in Sentinel, or where you ask us to look at something, where it is needed for security or to fix a problem, or where the law requires it.

Who it is shared with

Google user data is shared only with the service providers Sentinel runs on, and only to provide its features: hosting and database (Vercel, Supabase) and, for the AI features described in AI-assisted features, OpenAI. It is not shared with anyone else, except where required by law.

Disconnecting and deletion

You can disconnect a Gmail account in Sentinel, or remove Sentinel’s access to any Google data at myaccount.google.com/permissions. What happens to stored data, and how to have it deleted, is explained in Disconnecting connected accounts and Data retention and deletion.

Sentinel uses OpenAI’s API for some features. Information is sent to OpenAI only when one of these features runs, and only what that feature needs:

• Email summary and category — the first time a conversation is opened, its subject and latest messages (sender, date, and the beginning of each message) are sent to produce a short summary, a category, and any action items or deadlines.
• AI-drafted replies — only when you ask for one: the conversation’s subject, its participants, and the beginning of the latest message.
• Ask Sentinel — when an authorized user asks a question, the information needed to answer it is sent with the question. When asked about their day or brief, this can include calendar event titles, times, and locations, and the subjects and summaries of email marked urgent.
• Knowledge, documents, and other modules — content a user saves or uploads (for example a document, a receipt photo, or a voice note) may be sent to extract text, transcribe audio, or index it for search. Saving an email attachment to Knowledge records its file name and the email’s subject, which are indexed the same way.

Sentinel does not send your whole mailbox or calendar to an AI service. OpenAI processes this information under its own API data controls, which describe how long OpenAI keeps API data and how it may use it.

An authorized user may also connect an AI assistant of their own (for example ChatGPT or Claude) to Sentinel. The assistant must be granted access through a sign-in step, and can then retrieve the same daily-brief information described above on that user’s behalf, which is then handled under that assistant provider’s policies.

• All traffic to coryvlucas.com and Sentinel is encrypted in transit (HTTPS).
• Authorization tokens for connected accounts are encrypted before they are stored (AES-256-GCM). They are used only by Sentinel’s server and are never sent to your browser.
• Sentinel requires sign-in. Each user can see only the modules and mailboxes they have been granted.
• The database blocks public access. Sentinel’s data is read only by its own server, for signed-in users — or through a private share link that a user deliberately creates for a specific document.
• Sentinel asks connected services only for the permissions its features use.

These are real safeguards, but no system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization.

Sentinel and this website run on these services, each of which processes data to provide its part:

• Vercel — hosting for coryvlucas.com and Sentinel, server logs, and website analytics.
• Supabase — Sentinel’s database, file storage, and sign-in.
• OpenAI — the AI-assisted features described above.
• Google and Microsoft — the connected accounts themselves.
• Business services connected for specific modules (such as GoHighLevel, Jackrabbit, Stripe, and Google Maps address lookup). These do not receive Gmail or Google Calendar data.

We do not sell personal information or share it with data brokers or advertisers.

Sentinel is a long-term business record, so information is kept until it is deleted — there is no automatic expiry. Email and calendar data synced from a connected account remains in Sentinel after the account is disconnected, so past records stay available.

Sentinel does not yet have a self-service button to erase all data from a connected account. To have your stored data deleted — including everything synced from a Google account — email coryvlucas@gmail.com from that address or the address you sign in with. We will delete it from Sentinel’s database and storage and confirm when it is done, except for anything we must keep for legal or business recordkeeping reasons, which we will tell you about. Copies in our providers’ routine backups and logs expire on those providers’ schedules.

You can stop Sentinel’s access to a connected account at any time:

• Email, in Sentinel: Settings → Email accounts → Disconnect. Sentinel immediately deletes its stored authorization tokens for that mailbox and stops syncing it.
• Google Calendar: Sentinel does not yet have its own disconnect button for calendars. Remove Sentinel at Google (below), or email coryvlucas@gmail.com and we will disconnect it and delete the stored tokens.
• At Google: remove Sentinel at myaccount.google.com/permissions. This revokes Sentinel’s access to Gmail, Calendar, or both at once. Disconnecting in Sentinel does not do this for you, so do it as well if you want Google’s grant itself revoked.

Disconnecting does not delete email or calendar data already synced; see Data retention and deletion to have it removed.

This website does not use advertising or tracking cookies. Sentinel uses cookies only to keep you signed in and to protect sign-in and account-connection steps.

This website and Sentinel are not directed to children, and children do not use Sentinel. Sentinel may hold ordinary business records about people of any age — for example students enrolled in a business’s programs — entered or imported by authorized users for that business.

We will update this policy when Sentinel’s handling of information changes, and before any new use of Google user data. The date at the top shows the latest version.

Questions, or a request to see or delete your information: email coryvlucas@gmail.com. Terms of use for Sentinel are on the Terms of Service page.