Privacy, from the start.

Understand what happens when you visit this website, contact us or connect a website to Relentless.

Effective 10 October 2026 for this public website. The product process below describes requirements for future customer-site capture, which is separate from this public website.

Who operates Relentless

Relentless is operated by SENTRY AI LLC, a Florida limited liability company in the United States. Its registered company and approved public business and postal address is 7901 4th St N # 22469, St. Petersburg, FL 33702.

When you visit this website

This website has no advertising trackers or session replay. Account sign-in is a separate, optional setup flow. Copying the installation instruction writes that text to your clipboard; it does not connect your agent, install software or submit website data to Relentless. Copy feedback stays in the page and resets when you reload.

Public homepage counts

We use Plausible Analytics to count visits to selected public pages and improve the website. We send only the canonical page address, with no URL queries, fragments, referrers, form answers or account details. No advertising, interaction tracking or session replay is enabled. Ordinary requests disclose your IP address and browser information to Plausible; it derives approximate location, device information and a site-specific daily identifier without storing raw IP addresses or raw browser strings. Plausible processes event and session records in the EU. Records follow our plan retention period (up to five years under the previously disclosed trial), or remain until we delete the site data. Turning counts off stops future requests and does not erase earlier records. We respect Global Privacy Control. You can turn off page counts below; only your requested preference is stored in this browser. Hosting and security logs remain separate. See plausible.io/data-policy and plausible.io/dpa.

Plausible data policy

This website is served by Render from its Virginia, US region. Render processes technical requests, such as IP address, URL, browser details, timestamps and response status, to deliver and secure the site. We rely on legitimate interests in operating and protecting the website for this necessary processing. Render's dashboard logs follow its plan-dependent retention schedule, which is at most 30 days under its published policy. Do not put secrets or personal information in page URLs.

When you sign in or add a website

Where account setup is enabled, you can use a configured sign-in provider or enter an email address to request a sign-in link. Supabase handles authentication; configured email delivery uses Resend. These services receive the information needed for that request. The setup screen does not receive provider access tokens or read the secure sign-in cookies.

The account service stores account identifiers, sign-in and revocation records, workspace membership and website addresses you register. Necessary secure cookies bind a sign-in attempt to this browser and keep you signed in. Adding a website does not install tracking code, verify consent or authorise visitor collection. The separate walkthrough uses example websites whose changes reset on reload.

This describes the account implementation prepared for review. Hosted account availability, final processing terms, retention and deletion arrangements must be confirmed before service activation.

When you contact us

The Contact link opens your email application. If you send a message, your email provider and the receiving email service handle your address, message and any attachments. We use correspondence to respond to your enquiry. Please do not email credentials, payment details or raw visitor data. Sending an enquiry is not permission to add you to marketing email.

Who controls visitor privacy choices

The website owner is responsible for its visitor-facing privacy and consent content and determining applicable regimes, including UK and EEA requirements. Relentless connects to the client-approved consent signal rather than adding its own legal copy or a second banner. Relentless remains responsible for its agreed processor duties, security and handling of data on client instructions.

How website capture is intended to work

1. Agree the scope. Identify the website, authorised users, collection purpose and permitted data before enabling capture. Running our installation prompt in an agent authorised to access your codebase authorises preparation of the requested integration and pull request. It does not establish visitor consent or authorise activation.
2. Check consent and exclusions. Honour supported consent signals and exclude sensitive routes. Hold nonessential capture when the permitted collection state is unknown.
3. Exclude before collection. Initial analytics uses only approved non-form events on reviewed public pages. It must not collect form contents or form-interaction data, tax or other protected information, page text, DOM snapshots or session replay. Masking is an extra safeguard, not a substitute for exclusion. Validate incoming events again before storing them.
4. Restrict access. Keep evidence scoped to the correct site and workspace. Grant agents and optional integrations only the permissions needed for the authorised task. Do not create a cross-site identity graph.
5. Limit retention and honour withdrawal. Define retention separately for events, reports, account records, logs and backups. Stop future capture after consent withdrawal and apply the agreed deletion process to controlled copies and derived evidence.

The initial proposal includes named public-page and non-form interaction events, opaque approved page identifiers, coarse technical context and approved experiment identifiers. It excludes replay, page structure and text, form contents and interactions, raw URLs and referrers, query strings and fragments, request and response bodies, console messages and stack traces, cookies, storage contents and headers. If the issued integration cannot enforce these exclusions, capture must remain disabled. Replay-capable code may be included, but disabled replay must not capture, store or send replay payloads. Collection requires account-owner enablement, current signed per-site configuration and the client-approved visitor-consent signal. These are activation requirements, not a claim that an existing installation has been verified. Account sign-in information and hosting logs are separate processing, described above; this is not a claim that the service stores no personal data.

Customer-site privacy choices

Customer-site capture has separate consent and deletion requirements that must be verified before that service is activated. Stopping our homepage counts does not change those requirements.

Your agent and other providers

Pasting an instruction into your coding agent shares it with that agent’s provider under its own terms. When service connections become available, the setup must explain which providers receive data, for what purpose and with which permissions. Repository connections are optional and are separate from account sign-in. This draft does not approve any additional provider, data transfer or marketing integration.

Retention and deletion

Public homepage counts and Render log retention are described above. Customer-site capture has no approved retention schedule and remains disabled. Before that service starts, its notice and agreement must state retention, deletion and export arrangements, including backups.

Questions and privacy requests

Contact hello@relentlessengine.com to ask about data handling or request access, correction or deletion. Depending on applicable law, you may also have rights to restriction, portability, objection and withdrawal of consent, and to complain to your data protection authority. We may need proportionate information to verify a request; do not send identity documents unless specifically requested through an agreed secure process.

Before customer-site capture starts

Customer-site capture needs its own confirmed legal bases, provider and transfer details, retention schedule, controller and processor duties, request handling and effective date. Its agreement and visitor-facing notice must reflect the released service. We will date and communicate material changes to this public-website notice as required.

Contact · Terms & conditions