Privacy Policy

Who we are

Cyber Syndicate, LLC, doing business as vCISO.com ("vCISO.com", "we", "us"), is a Pennsylvania-based virtual CISO consulting firm founded by Chase Miller. Contact: info@vciso.com.

What we collect

When you contact us or submit a request, we collect the contact details, company information, and message or assessment answers you provide so we can respond. Hosting and security providers process technical request data, such as IP addresses, as needed to deliver and protect the site. If you accept optional analytics, PostHog and Google Analytics (where enabled) process usage data such as page views, selected site interactions, browser and device information, referring sources, campaign parameters, and analytics identifiers. Scheduling and payment providers process information under their own privacy policies when you use those services.

How we use it

Analytics data helps us understand how visitors find and use the site. Contact data is used only to respond to your inquiry and, if you become a client, to deliver engagement communications. We do not sell, rent, or share your data with marketing partners. We do not run retargeting ad pixels.

Data retention

Inquiry emails are retained for 3 years from the date of last contact. Engagement-related communications are retained per contract terms (typically 7 years after engagement close). We remember your analytics choice for 180 days unless you change it or clear browser storage. First-touch attribution expires after 180 days, and session-entry attribution lasts for the browser session. Analytics records already sent to providers are subject to the retention settings configured in those accounts; browser consent expiry does not itself delete those records. Contact info@vciso.com for current retention details or a deletion request.

Cookies, browser storage, and your choices

Optional analytics and campaign-attribution storage remain off until you choose Accept analytics. Rejecting analytics does not prevent you from viewing the site, submitting a request, or following a scheduling link. Use Privacy preferences in the footer at any time to accept or withdraw your choice. Withdrawing consent stops future optional tracking, removes the analytics cookies and attribution storage accessible to this site, and reloads the page to stop previously loaded analytics scripts. It does not automatically erase data already received by providers.

We use necessary browser storage to remember your privacy choice and interface preferences such as dismissing an announcement. If browser storage is unavailable, your analytics choice applies only to the current page and you may be asked again after a refresh. Session replay and automatic form-interaction recording are disabled. Fonts are served from our own site rather than requested from Google's font servers by your browser.

Third parties

Website providers include Vercel for hosting, Cloudflare Turnstile for form-abuse protection where enabled, PostHog and Google Analytics for optional usage analytics, Calendly for scheduling, Resend for email delivery, and Upstash Redis for lead storage. Stripe may process payments under a signed SOW. Providers may process data in the United States and other locations under their applicable terms and privacy policies. Following a link to another provider, such as Calendly, takes you to a service with its own privacy choices. Client-engagement processing is addressed separately in the Data Processing Agreement and applicable SOW.

Your rights

You can request access to, correction of, or deletion of your personal data by emailing info@vciso.com. We respond within 30 days. Residents of California, Colorado, Connecticut, Utah, and Virginia have additional state-specific rights under their respective privacy laws and can exercise them via the same email address.

Changes to this policy

If we update this policy, we will update the "effective date" at the top. Material changes will be announced via the site.