Privacy Policy
Avicado Tech ("we", "us") respects your privacy. This policy explains what information we collect through avicadotech.com, including our free security assessment, how we use it, and the choices you have. In short: we only collect what we need to answer you and prepare your report, we never sell it, and we delete it automatically after 12 months.
1. Information we collect
When you contact us
Your name, email address, company name (optional), the service you're interested in, and your message. We also record when you agreed to our Terms of Service and this policy, and which version you agreed to.
When you request a free security assessment
- Public information about your organization's domain. We check the domain of the work email you give us using information anyone on the internet can see: DNS records (such as email security settings), your website's encryption and security settings, and public domain-registration data. We do not log in to, test, scan for weaknesses in, or otherwise access your systems.
- Your questionnaire answers. Your answers to our online security questionnaire about practices such as passwords, backups and devices, plus any optional notes you add.
- Quote requests. The packages you select and any notes you include.
When you sign a service agreement
The agreement itself (your organization, the signer's name and email, the services, prices and dates), and a record of the electronic signature: the name and title typed, the date and time it was opened and signed, the IP address and browser used, and a digital fingerprint of the exact document signed. This record shows who signed what, and when.
Technical information
- Spam protection. To limit abuse of our forms, we use your IP address to count how many messages come from the same connection. We store it only as a one-way scrambled ("hashed") value, which is deleted automatically.
- Hosting logs. Our hosting provider (Google) automatically records basic request details, such as IP address, browser type and the pages requested, for security and operations.
- On your own device. While you fill in the questionnaire, your browser saves your in-progress answers locally so you don't lose them. They stay on your device and are removed when you submit.
- No tracking. We don't use advertising cookies, tracking pixels or analytics trackers. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers to download them.
2. How we use your information
- To reply to your message and provide the services you ask about.
- To run your free security assessment and prepare your report.
- To send emails related to your request: your security snapshot, your report, at most one reminder to finish the questionnaire, and at most one follow-up about fixing the issues found. Every reminder and follow-up includes an unsubscribe link.
- To prepare and send quotes you request.
- To prepare service agreements, record your electronic signature, and send both of us a signed copy.
- To protect our website and forms from spam and abuse.
We do not sell or rent your personal information, and we don't use it for advertising.
3. About automated reports
Your snapshot and report are generated automatically from public information and the answers you provide. They're a point-in-time review, not a penetration test or a guarantee that your systems are free of vulnerabilities, and automated checks can occasionally be wrong. We don't use them to make decisions that have legal or similarly significant effects on you.
4. Who we share it with
We share information only with the service providers that run our website and email, and only so they can provide those services to us:
- Google: Firebase Hosting, Cloud Functions and Cloud Firestore (where our website and database run), and Google Workspace (our email).
We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger or sale of our business (in which case this policy would continue to apply).
5. How we protect it
Information is sent over encrypted connections (HTTPS) and stored with Google Cloud in the United States, where it's encrypted at rest. Our database can't be accessed directly from the internet, and only Avicado Tech can view it. Each report is available only through a long, private, randomly generated link: please don't forward your report emails. No method of storage or transmission is 100% secure, but we work to protect your information using the same practices we recommend to our clients.
6. How long we keep it
Contact-form messages, assessments, questionnaire answers and reports are deleted automatically 12 months after you submit them, or sooner if you ask us. Agreements that are never signed are also deleted after 12 months. Signed service agreements and their signature records are kept for 7 years after signing, as business and tax records, and then deleted automatically. Emails you exchange with us are kept in our email account as business records.
7. Your choices and rights
- Stop emails. Use the unsubscribe link in any reminder or follow-up, or reply and ask.
- Access, correct or delete. Email support@avicadotech.com to request a copy of your information, correct it, or have it deleted. We'll respond within 30 days. We may keep signed agreements for as long as the law or our legal and accounting obligations require.
- California residents. You have the right to know what personal information we collect and how we use it, to request its deletion or correction, and to opt out of its sale or sharing. We do not sell your personal information or share it for cross-context behavioral advertising. We won't treat you differently for exercising your rights.
8. Children
Our website and services are intended for businesses and adults. They are not directed to anyone under 18, and you must be 18 or older to submit our forms. We don't knowingly collect personal information from anyone under 18. If we learn that we have, we'll delete it.
9. Changes to this policy
If we change this policy, we'll update it on this page and change the effective date at the top.
10. Contact us
Avicado Tech
4126 Thomas Street, Oceanside, CA 92056
support@avicadotech.com