This is a demo environment. The text below is illustrative only and is not legal advice.
Security Champions is a fictional company operating the SC Sentinel product — an HTTP Model Context Protocol (MCP) server that surfaces security context to AI coding assistants. SC Sentinel is available on a free Hello tier and a paid licensed tier that unlocks premium security context feeds. This demo environment runs at sc-demo.xyz and is provided for evaluation purposes only.
When you create an account we collect your email address and the authentication identity provided by your sign-in method (email + password or OAuth). If you sign in through an OAuth provider such as Google or GitHub we receive the profile fields that provider shares with us — typically display name, email, and avatar URL.
While you use SC Sentinel we record basic telemetry about MCP requests: which context endpoints were called, approximate request counts, and error codes. We do not record the content of requests or the responses returned to your AI assistant.
We use the information we hold to provide and operate SC Sentinel, to validate that a license key is associated with the account making requests, and to respond to support queries. We do not sell or rent your personal data to third parties.
We rely on a small number of sub-processors to deliver the service:
Cloud infrastructure provider — hosts our managed database and authentication service. Your account data and MCP telemetry are stored on access-controlled, managed infrastructure.
Stripe — processes payments. In this demo environment Stripe runs in test mode; no real charges are made. Card details entered during checkout are handled entirely by Stripe and are never stored on our servers.
Resend — delivers transactional email (account confirmation, password reset). Resend receives your email address for this purpose only.
Account data is retained for as long as your account is active. If you delete your account we will remove your personal data within 30 days, except where retention is required for legal or fraud prevention purposes. Aggregated, anonymised telemetry may be retained indefinitely.
Depending on your jurisdiction you may have rights to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at hi@sc-demo.xyz with the subject line “Privacy Request”. We will respond within 30 days.
Questions about this policy? Reach us at hi@sc-demo.xyz.
Last updated: 2026-06-07