Terms of Service
Last updated: August 5, 2026
1. Acceptance of Terms
By accessing or using Sentinel Proxy ("the Service"), you agree to be bound by these Terms of Service and our Privacy Policy. If you do not agree, do not use the Service.
2. Communications
By creating an account, you agree to receive email communications from us related to your account and use of the Service, including:
- Transactional emails — account, billing, security, and support-related messages (e.g., welcome emails, invoice notices, security alerts, and responses to support requests). These are necessary to operate the Service and cannot be opted out of while your account is active.
- Product update and marketing emails — periodic emails about new features, product changes, and paid plan offerings. You may unsubscribe from these at any time using the link included in every such email, without affecting your access to the Service.
We do not sell or share your email address with third parties for their own marketing purposes. See our Privacy Policy for the legal basis under which we send each type of email.
3. Service Description
Sentinel Proxy is an AI Firewall (AIF) that inspects prompts sent to large language models (LLMs) for prompt injection attacks. The Service operates as a reverse proxy between your application and your upstream LLM provider, scanning requests in real time and taking action (clean, neutralize, or block) based on detected threat levels.
4. Data Processing and Retention
By default, Sentinel Proxy does not store, log, or persist the content of your prompts or LLM responses.
All prompt content is processed entirely in memory for threat analysis and discarded immediately after the request completes. We retain only aggregate usage metadata (request counts, threat scores, action taken, and latency) for your dashboard analytics. See our Privacy Policy for full details.
If you enable the optional Community Training Programme (see Section 5), flagged or blocked prompt content may be temporarily stored for admin review and signature improvement. This feature is disabled by default and requires your explicit consent. You may withdraw consent at any time by toggling off Community Training in your account Settings.
5. Community Training Programme
The Community Training Programme is a voluntary, opt-in feature available to subscribers on eligible plans. When enabled:
- Content of flagged or blocked prompts is stored in a secure review queue
- An administrator may review, approve, or reject entries
- Approved entries are used to generate anonymised detection signatures that improve Sentinel’s security engine
- Clean prompts are never captured under any circumstances
By enabling this feature, you grant Skyblue Soft a non-exclusive, royalty-free licence to use the stored content solely for the purpose of improving the threat detection engine. This licence terminates upon opt-out and any pending (unreviewed) entries are deleted immediately. You remain responsible for ensuring you have authority to share any content that flows through your integration.
6. Acceptable Use
You agree not to:
- Use the Service for any unlawful purpose or to facilitate illegal activity
- Attempt to bypass, disable, or interfere with the Service's security mechanisms
- Reverse engineer, decompile, or attempt to extract the source code of the threat detection engine
- Exceed your plan's rate limits through automated means or abuse the Service infrastructure
- Resell or redistribute access to the Service without written authorisation
- Submit content through the Community Training Programme that you do not have the right to share
7. API Keys and Account Security
You are responsible for safeguarding your API keys. API keys are shown only once at creation and are stored as irreversible SHA-256 hashes. Treat your keys as secrets—do not commit them to public repositories or share them in plaintext. API keys are personal to the account or team member who created them and are non-transferable—you may not sell, share, or assign a key for use by anyone outside your own account or team. The registered owner of an API key is solely responsible and liable for all activity that occurs under that key, whether or not authorized by you. If you suspect a key has been lost, exposed, or compromised, you must immediately rotate it—revoke it and generate a new one from your dashboard. Notifying us is not a substitute for rotation: we cannot undo actions already taken with a compromised key before it is revoked.
8. Subscription and Billing
Paid plans are billed monthly through Stripe. You may cancel or change your plan at any time through the billing portal on your settings page. Downgrades take effect at the end of the current billing period. No refunds are provided for partial months. The free Starter tier requires no credit card and has no time limit.
9. Service Availability; Disclaimer of Warranties
The Service is provided "as is" and "as available," without warranties of any kind, whether express or implied, including the implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
We make commercially reasonable efforts to maintain uptime and detection accuracy, but do not guarantee uninterrupted availability or that the Service will detect, block, or prevent every threat. We are not liable for any losses caused by service downtime, latency, or false positives/negatives in threat detection.
10. Limitation of Liability
To the maximum extent permitted by law, Sentinel Proxy and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, or business opportunities, arising from your use of or inability to use the Service. Our total liability for any claim shall not exceed the amount you paid us in the twelve months preceding the claim.
11. Termination
We may suspend or terminate your access to the Service at any time for violation of these terms, abuse of the platform, or non-payment. You may terminate your account at any time by cancelling your subscription and deleting your API keys. Upon termination, your usage data will be deleted in accordance with our retention schedule, and any pending Community Training queue entries will be deleted immediately.
12. Governing Law
These terms are governed by the laws of Japan, without regard to its conflict-of-laws principles, except that Section 13 (Dispute Resolution; Binding Arbitration; Class Action Waiver) is governed by the Arbitration Act of Japan (Act No. 138 of 2003) and, to the extent applicable, the New York Convention on the Recognition and Enforcement of Foreign Arbitral Awards. Nothing in these terms limits your statutory rights under the GDPR, UK GDPR, or other applicable consumer protection legislation that cannot be waived by agreement. For GDPR enquiries, see our Privacy Policy.
13. Dispute Resolution; Binding Arbitration; Class Action Waiver
Please read this section carefully. It affects your legal rights, including your right to file a lawsuit in court.
13.1 Agreement to Arbitrate. Except as set out in Section 13.4, you and Skyblue Soft agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Service (a “Dispute”) shall be resolved exclusively by binding arbitration administered by the Japan Commercial Arbitration Association (JCAA) under its Commercial Arbitration Rules then in effect, rather than in court. The arbitration shall be conducted in English, seated in Tokyo, Japan, before a single arbitrator.
13.2 Class Action Waiver. You and Skyblue Soft agree that each may bring claims against the other only in an individual capacity, and not as a plaintiff or class member in any purported class, collective, or representative proceeding. Unless both parties agree otherwise in writing, the arbitrator may not consolidate more than one person’s claims and may not otherwise preside over any form of a class, collective, or representative proceeding.
13.3 Exceptions. Notwithstanding Sections 13.1 and 13.2:
- Either party may bring an individual action in small claims court for disputes that qualify for that court’s jurisdiction.
- Skyblue Soft may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent actual or threatened infringement, misappropriation, or violation of its intellectual property rights, security mechanisms, or the Acceptable Use provisions of Section 6.
- This arbitration agreement and class action waiver do not apply where, and only to the extent that, applicable law prohibits mandatory arbitration or class action waivers for the type of claim asserted (for example, certain consumer-protection laws of the European Union, United Kingdom, or other jurisdictions). In that case, the Dispute shall instead be resolved in the courts of competent jurisdiction under the law that would otherwise apply, and this Section is severed only to that extent—the remainder of these Terms remains in full force.
13.4 Severability. If any part of this Section is found unenforceable, the remainder of this Section remains in effect to the maximum extent permitted, except that if the Class Action Waiver in Section 13.2 is found unenforceable as to a particular Dispute, then this arbitration agreement as to that Dispute (but not others) shall be null and void, and that Dispute shall proceed in court rather than arbitration.
14. Changes to Terms
We may update these terms from time to time. Material changes will be communicated via the email associated with your account, and require renewed acceptance through an in-app prompt before you can continue using the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated terms.
15. Contact
Questions about these terms? Reach us at support@sentinelaifirewall.com.