Privacy Policy

Who we are

vCISO Services, LLC ("vCISO.com", "we", "us") is a Pennsylvania-based virtual CISO consulting firm founded by Chase Miller. Contact: info@vciso.com.

What we collect

When you visit vciso.com, we collect basic analytics data including page views, referring source, browser type, and approximate geographic location. When you contact us, we collect the name, email address, and message contents you provide. Calendly scheduling data is collected per their privacy policy. Stripe payment data is collected per their privacy policy when you purchase a Sprint or Foundation engagement.

How we use it

Analytics data helps us understand how visitors find and use the site. Contact data is used only to respond to your inquiry and, if you become a client, to deliver engagement communications. We do not sell, rent, or share your data with marketing partners. We do not run retargeting ad pixels.

Data retention

Inquiry emails retained for 3 years from the date of last contact. Engagement-related communications retained per contract terms (typically 7 years after engagement close). Analytics data retained for 14 months.

Third parties

We use Calendly for scheduling, Resend for transactional email, Stripe for payment processing, Upstash Redis for the lead store, and a privacy-friendly analytics provider. Each has their own privacy policy governing data they process. A current list of subprocessors is available in the Data Processing Agreement.

Your rights

You can request access to, correction of, or deletion of your personal data by emailing info@vciso.com. We respond within 30 days. Residents of California, Colorado, Connecticut, Utah, and Virginia have additional state-specific rights under their respective privacy laws and can exercise them via the same email address.

Changes to this policy

If we update this policy, we will update the "effective date" at the top. Material changes will be announced via the site.