Privacy Policy
Last updated: August 2026
This policy applies to assessment-request data submitted through this website. Intake is launch-blocked until a designated site operator and verified contact channel exist.
Data minimization
The form asks for name, email, service type, and non-sensitive scope details. Organization and phone are optional. Do not submit credentials, access tokens, customer data, payment data, attachments, or exploit material.
Intended processing
The intended flow is browser to Cloudflare Turnstile, site API, Cloudflare D1, and Resend notification. These processors are not a claim that intake is currently live. Analytics and advertising processors are not approved by this policy.
Retention and deletion
Accepted submissions have a 90-day maximum retention period. A designated site operator must run a monthly deletion of older records. Verified access, correction, or deletion requests must be handled within 30 days.
Availability gate
No designated site operator or verified direct-email channel is currently documented. Production intake and privacy-request handling remain blocked until that owner gate is met.