Legal

Privacy Notice

What we collect from you, who else sees it, and how to ask us to delete it. Plain language. No tricks.

ⓘ

Interim version — pending attorney review. This notice is accurate to our current practice as of the date below. It has not yet been reviewed by an attorney. We will replace it with the attorney-reviewed version before paid checkout opens. If anything here is unclear or you want a change, please tell us.

  • 1. Who this is from

    This site is owned and operated by Agate Cybersecurity LLC, based in Denver, Colorado. "We," "us," and "our" mean Agate Cybersecurity LLC. "You" means anyone who visits this site or sends us a message through it. We are the controller of the information you send through this site.

  • 2. What we collect from you

    We only collect information you give us directly through the contact form on this site or through a product-interest form on a product page. That is:

    • The name you enter
    • The email address you enter
    • The business or company name you enter (if you choose to)
    • The topic you select
    • The message you type
    • For product-interest forms, the eligibility-quiz answers you selected

    We do not run advertising pixels, behavioral tracking, or third-party trackers on this site. No script on this page reports your visit to anyone. We do not set cookies of our own. We do not collect your device fingerprint, your browsing history, or anything similar.

    Our hosting provider sees normal web-request information — your IP address, the page you requested, your browser type — for the purpose of delivering the page to you. That is standard for any website on the internet.

    We use a page-counting function built into that hosting service. It works from those same server records rather than from anything placed on your device: no script runs in your browser, and no cookie is set. It shows us totals — which pages were read and how often, which sites linked to them, and the broad regions requests came from. Counts of unique visitors are worked out from IP addresses. We look at the totals, not at individuals, and we do not connect this data to you or to anything you send us through a form.

  • 3. How we use what you send us

    We use the information you submit through a form to reply to you, to send you the information you asked about, and to keep a record of the conversation we have with you. That is the entire purpose.

    We do not sell your information. We do not rent it. We do not share it with advertisers or marketers. We do not use it to train any AI model.

  • 4. Categories of service providers that handle your information

    A small number of service providers help us operate this site. They only handle what you send us, only on our behalf, only for the purposes below. We have written agreements with each that obligate them to handle your information consistently with this notice.

    The categories of service providers that may process information you submit through this site, the data they receive, and the purpose:

    • A static-site hosting, forms-processing, and page-analytics service (United States). Receives your form submission, and the ordinary server-request records described in section 2. Purpose: serving the site to you, storing the submission so we can reply, and counting page views in aggregate.
    • A business-email and productivity service (United States). Receives the contents of any reply we send you and any internal record of our exchange. Purpose: sending and storing email and related working documents.

    Apart from the server-side page counting described in section 2, we do not use analytics, advertising networks, payment processors, customer-portal vendors, or AI processing services on this site. If we add any of these, we will update this notice and identify the category before that change applies to your information.

    Why categories instead of company names? The Colorado Privacy Act and the California Consumer Privacy Act (CCPA/CPRA) both require disclosure of the categories of third parties that receive personal information — not the specific company names. Naming specific vendors also hands an attacker a map of our infrastructure, which we treat as an avoidable security tradeoff. If you have a vendor due-diligence requirement or a regulatory reason to know which specific providers handle your data, please ask through the contact form and we will answer you directly.

  • 5. How long we keep it

    We keep form submissions and the email thread that follows for up to twenty-four (24) months from your last contact with us, unless you ask us to delete sooner or unless we need to keep records of an active engagement longer. After that we delete the form submission from the hosting and forms-processing service and archive or delete the email thread.

    The page-counting data described in section 2 is available to us for the last thirty (30) days only. It is aggregate — totals by page, by source, and by region — and we do not link it to you or to anything you send us through a form.

  • 6. Your choices

    You can ask us to:

    • Tell you what information we have about you
    • Correct anything that is wrong
    • Delete what you sent us
    • Stop contacting you

    To make any of these requests, please use the contact form and select "Something else." We will reply within thirty (30) days. We do not charge for these requests.

    Residents of Colorado, California, and other states with consumer-privacy laws have the rights named in those laws — including access, correction, deletion, and the right to opt out of sales of personal information. We do not sell personal information, so the opt-out right is moot here, but it applies to us going forward and we will honor it.

    If you send a Global Privacy Control (GPC) signal from your browser, we treat it as a request to not have your information sold or shared for cross-context behavioral advertising. We don't do those things, but the signal is honored.

  • 7. Children

    This site is not directed at children under sixteen (16). We do not knowingly collect information from anyone under sixteen. If you believe a child has sent us information, please contact us and we will delete it.

  • 8. Security

    We take reasonable measures to protect the information you send us, but no system is perfect and no transmission over the internet is fully secure. We do not promise that information you send us cannot be accessed by someone who should not see it. If you believe a security issue has occurred that affected your information, please tell us right away.

  • 9. Changes

    If we change this notice in a way that affects what we collect, how we use it, or who else sees it, we will update the "Last updated" date below and post the new version here. If a change materially affects information you have already given us, we will make a reasonable effort to tell you before that change applies to your information.

  • 10. How to reach us about privacy

    The fastest way to reach us about anything in this notice — including a request to access, correct, or delete your information — is the contact form. Mail to our business address also works: Agate Cybersecurity LLC, 801 Wyandot Street, Denver, CO 80204.

Last updated: 2026-09-28 Effective: 2026-09-28