Privacy Policy

Last updated: October 18, 2026

This policy explains what SentryGuard Dental (operated by OSINT Global Consulting) collects and how we use it. We keep it short and plain.

What we collect

• • Practice Exposure Check: the domain you submit, the public records we read about it, and — if you request the full report — the email address you provide. We also store a one-way hashed form of your IP address to apply rate limits and prevent abuse (we do not store your raw IP with the scan).
• • Forms & sign-ups: information you enter into our checklist, contact, free-phishing-test, and account forms (such as name, practice name, email, and phone).
• • Account & training data: for customers, the information needed to run training (staff names, work emails, and progress).

How we use it

• • To deliver the report or service you asked for.
• • To follow up where you request it or opt in. Challenge access does not require newsletter permission. You can unsubscribe from marketing at any time.
• • To operate, secure, and improve our services.

What we don’t do

We do not sell your information. We do not ask for or knowingly store patient health information (PHI) through the Check or our public forms. Please don’t submit PHI, passwords, or payment-card numbers to us outside of our secure checkout.

Service providers

We use service providers for hosting and storage (DigitalOcean), email delivery (MailerSend), payments (Stripe), and public-record lookups (DNS and RDAP).

Optional website analytics

If you choose “Allow analytics,” we use Google Analytics on our public website to measure page visits, generic funnel actions and campaign sources. Google Analytics uses cookies to distinguish browsers and sessions. We do not load it on training or administration screens, and we do not send form contents, email addresses, certificate IDs, or payment details to it. Advertising personalization and Google signals are disabled.

You can decline analytics and continue using the website. Use “Analytics settings” on any public page to change your choice. We remember that choice in your browser for up to six months; analytics cookies are configured to expire after 90 days. With that same consent, an optional first-party cookie links the first and latest campaign touch to checkout for up to 60 days. The reporting record contains public page paths and bounded campaign labels, not form contents or scan findings. If you withdraw permission, we stop collection, remove the analytics cookies we set, and request deletion of the associated first-party visit, event and checkout attribution records. Existing accounting records remain separate. Learn how Google uses information from sites that use its services.

Front-desk challenge and newsletter

We collect your email and role to provide the challenge and requested results. A necessary, HttpOnly session cookie and the associated exercise record expire after 24 hours. We store completion status with your contact record, and hashed identifiers for rate limiting; we do not store raw IP addresses in these records. Contact records expire after 180 days unless you confirm newsletter permission. Confirmed newsletter records expire after two years from the latest signup. Database expiry cleanup may take a short additional interval.

Newsletter consent is separate and optional. We record the consent wording, version, request time and confirmation or unsubscribe status. Confirmation links expire after seven days. Opening a link alone does not subscribe you. We use MailerSend for requested result and confirmation messages. A result request does not authorize promotional follow-up. Use the preference link to unsubscribe, or contact us to access or delete your information. We do not send your email, answers or preference tokens to analytics. No patient information belongs in these tools.

Training Advisor

The public advisor stores your questions, guided answers and a necessary first-party session cookie for up to 30 days. Do not enter patient information, passwords or payment details. Automated filters cannot detect every sensitive detail. When enabled, Anthropic may receive a short question to match it to approved product information. Contact-form details and customer account records are not sent to that service.

Contact requests are optional and retained for up to 180 days for follow-up. Opening the Google Calendar booking link takes you to Google’s service and does not itself confirm an appointment. We distinguish calendar clicks from verified bookings. An additional optional choice lets us link this conversation to enrollment and an initial payment for up to 180 days; declining does not affect service. You can withdraw that choice or clear the conversation in the advisor. Clearing removes the associated advisor contact request and enrollment attribution, but not separate customer, payment or checklist records.

With website analytics consent, we send only generic advisor link-click events to Google Analytics, never messages, contact fields or conversation identifiers.

Your choices

To unsubscribe, access, or delete your information — or to exclude a domain you own from future Checks — email [email protected].

This policy is provided as a starting point and should be reviewed by your own legal counsel before public launch.