Privacy Policy

1. Introduction

IAMVC Holdings, LLC ("Company", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our products and services, including ProxyStack, SentinelAI, and our websites (collectively, the "Services").

By using the Services, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Services.

2. Information We Collect

2.1 Information You Provide

Data Type	When Collected	Purpose
Email address	Account registration	Authentication, license delivery, communications
Full name	Account registration	Account identification
Payment information	Subscription purchase	Processed by Stripe; we do not store card numbers
License key	Product activation	Feature access validation

2.2 Information Collected Automatically

Data Type	Source	Purpose
Machine identifier (HWID)	ProxyStack activation	License binding to prevent sharing
Software version	Update checks	Deliver correct updates
IP address	API requests, website visits	Security, rate limiting, analytics
Agent hostname	SentinelAI agent registration	Agent identification in dashboard
Security events	SentinelAI agents	Threat detection and analysis

2.3 Information We Do NOT Collect

• Contents of your configuration files (proxystack.json)
• Your SSL certificates or private keys
• Secrets stored in the Secrets Vault (DPAPI-encrypted locally)
• Apache access logs or error logs
• File contents scanned by SentinelAI (only metadata/hashes)
• Browsing history or personal files

3. How We Use Your Information

• Service delivery — Authenticate your account, validate licenses, deliver updates
• Payment processing — Process subscriptions via Stripe
• Security — Detect and prevent fraud, abuse, and unauthorized access
• Threat detection — Analyze security events from SentinelAI agents to identify threats
• ML model improvement — Use anonymized threat data to improve detection accuracy
• Communications — Send license keys, security alerts, product updates, and support responses
• Analytics — Understand usage patterns to improve our products (aggregated, anonymized)

4. Data Storage and Security

4.1 Local Data (ProxyStack)

ProxyStack is a locally-installed application. Your configuration, certificates, secrets, and logs remain on your machine. The Secrets Vault uses Windows DPAPI encryption — secrets are encrypted with your Windows user credentials and never leave your machine.

4.2 Cloud Data (SentinelAI)

SentinelAI stores security events, agent data, and account information on our servers. Data is encrypted in transit (TLS 1.2+) and at rest. Database access is restricted to authorized services only.

4.3 Payment Data

Payment processing is handled entirely by Stripe. We never receive, store, or process your credit card numbers. Stripe is PCI-DSS Level 1 certified.

4.4 Security Measures

• TLS encryption for all API communications
• Bcrypt password hashing
• API key authentication with rate limiting
• Regular security audits
• Access logging and monitoring

5. Data Sharing

We do NOT sell your personal information. We may share data with:

• Stripe — Payment processing (email, subscription details)
• Email provider — Transactional emails (license delivery, alerts)
• Law enforcement — When required by law, subpoena, or court order

We do not share your data with advertisers, data brokers, or any third parties for marketing purposes.

6. Data Retention

Data Type	Retention Period
Account information	Duration of account + 90 days after deletion
Security events (SentinelAI)	90 days (Free), 1 year (Pro), 2 years (Enterprise)
Payment records	7 years (legal/tax requirements)
License activation logs	Duration of subscription
Server access logs	30 days

7. Your Rights

You have the right to:

• Access — Request a copy of your personal data
• Correction — Update inaccurate personal information
• Deletion — Request deletion of your account and associated data
• Export — Download your data in a portable format
• Opt-out — Disable optional telemetry and marketing communications
• Restrict processing — Limit how we use your data

To exercise these rights, contact us at privacy@iamvcholdings.com. We will respond within 30 days.

8. Cookies and Tracking

Our websites use minimal cookies:

• Session cookies — Required for dashboard authentication (SentinelAI)
• Preference cookies — Remember your settings (theme, language)

We do not use third-party tracking cookies, advertising pixels, or social media trackers. We do not participate in cross-site tracking.

9. Children's Privacy

The Services are not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including encryption in transit and at rest.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our websites at least 30 days before taking effect. The "Last Updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related questions or requests:

• Email: privacy@iamvcholdings.com
• Website: proxystack.iamvcholdings.com