Privacy policy

Who is responsible

This site is run by SECURE IGA LLC, which trades as Secure IGA. Questions about this policy can be sent to contact@secureiga.net.

Information I collect

The only way to send me information through this site is the contact form. When you use it, I collect:

• Your name
• Your work email address
• Your company, if you give it
• Your message
• The technical data needed to run the form: the time you sent it, a keyed hash of your IP address, a keyed hash of your email address, and a keyed hash of your address and message together. The IP address itself is not stored by this site, and the hashes of your IP address and email address are kept apart from your message.

How I use it

I use your name, email address, company and message to reply to you and to follow up with you. The technical data is used only to run the form: to limit how many messages one connection or address can send, and to avoid notifying me twice about the same message.

Who handles it

Your message is stored in a database and I am notified by email. These services handle it on my behalf:

• Railway hosts this site and the database that stores your message.
• Resend delivers the email that tells me your message arrived.
• Google Workspace receives that email in my mailbox.
• Cloudflare stores an encrypted backup copy of the database.

I do not sell your information, and I do not share it with anyone beyond the services listed here.

The hosting provider keeps its own request logs, which may contain IP addresses, for as long as the provider's own retention rules say.

How long I keep it

I keep your message and the details you gave with it for as long as I need them. A submission that the site flags as automated is not sent to me, and the technical records used to limit how often someone can send a message are not kept with your message. Both are deleted automatically after a short time. Information that is deleted can remain in backup copies for up to 30 days before those copies are deleted as well.

Asking for a call

You can ask for a call through this site. When you do, I collect:

• Your name and your email address.
• Your company, if you give it.
• What you need help with, in your own words.
• Your time zone and the time you chose.
• The status of the request and the times it was made, confirmed, changed or cancelled.
• A keyed hash of your IP address and a keyed hash of your email address, kept for a short time to limit how many requests one connection or address can make, then deleted automatically.

Once you confirm the time, the call is created on my Google Calendar with a Google Meet link, and Google sends you the calendar invite and any updates to it. The event carries your name and email address, your company if you gave one, and your answer to what you need help with. I receive an email when a call is confirmed, changed or cancelled.

The emails you get from this site contain links to confirm, change or cancel the call. Only a scrambled form of each code in those links is stored, not the code itself.

A request that is never confirmed is deleted automatically a short time after its link stops working. Calls that were confirmed or cancelled are kept until I delete them.

Security

Messages are sent over an encrypted connection, and access to them is limited to me and the services listed above.

Reviewing or changing your information

You can ask to review the personal information I hold about you, or to have it changed. Write to contact@secureiga.net from the address you used and say what you would like.

California privacy rights

This site does not sell or share personal information, or use it for targeted advertising. If you live in California and want to know what I hold about you, or want it changed, write to contact@secureiga.net.

Children

This site is not directed to children under 16, and I do not knowingly collect their information.

Do Not Track, cookies and tracking

This site uses no analytics and no tracking tools, and it shows no advertising. It sets no cookies for those purposes, so there is no cookie banner. Pages are loaded from this site only, with no scripts, fonts or images fetched from other companies, so no other party collects information about your online activity through this site.

Because the site does not track visitors across time or across other websites, a Do Not Track signal from your browser changes nothing: the site does not track you either way.

Changes to this policy

I will update this page before the site starts to do anything new with personal information. The date at the top is the date this policy took effect or was last changed, so a new date means the policy has changed.