1. Who we are and what this policy covers
1.1 Vectra View Technologies Inc., a Delaware corporation (“Vectra View”, “we”, “us”), operates this website and is the controller (the business that decides how and why personal information is used) for the information described here. You can reach us at hello@vectraview.com.
1.2 This policy covers the public website, the contact form and the free risk check. It applies to visitors and to people who ask us about our services or request a risk check for their company.
1.3 It does not cover the Vectra View platform or the services we deliver to customers. Customer data in the platform is governed by the agreements you sign with us, including the Data Processing Addendum and, for professional services, the Services Provider Data Processing Addendum. All customer agreements are listed on the Customer agreements page. If this policy and a signed agreement conflict on customer data, the agreement controls.
1.4 Our Website Terms of Use set the rules for using this website.
Back to contents2. Information we collect
Information you give us in the contact form
- your name, work email address and company name;
- your company size and what is driving your request (both chosen from a list), and the frameworks you care about (optional);
- any message you choose to write.
Information for the free risk check
If you ask for the free risk check, the form also asks for the domain you want us to check and the name of one critical vendor you want assessed. The check may continue with a short call, and what you tell us on that call and in follow-up messages is also covered by this policy.
Information from the passive checks we run for the risk check
For the security posture check we look at publicly available information about the domain you give us, using passive, external methods only. After you submit the intake, we confirm the company domain with you before we run the check. The results can include information about your company’s public internet footprint and, where accounts on your domain appear in known breach data, counts of those accounts. We report breached accounts as counts only and do not collect passwords. For the vendor assessment we look at public information about the vendor you name. This information is about your company and its vendors, but it can include business contact details of individuals that are already public.
Information collected automatically
- Server and security data. Like any website, our hosting provider handles technical information when your browser requests a page or submits the form, such as your IP address, browser and device type, the pages requested and the time. The form submission also carries the country your request appears to come from, which we include in the internal notification we receive.
- Analytics. We use Cloudflare Web Analytics, a privacy-focused service, to see how many people visit and which pages are used. It reports aggregate page-view and performance measurements and is described in section 5.
- Spam protection. The form has a hidden field that real visitors leave empty, and may use Cloudflare Turnstile to tell people from bots (section 5). If it is enabled, Turnstile checks the visit in your browser and shares the result and your IP address with Cloudflare for that purpose.
2.1 Please do not send passwords, access keys, secrets or regulated data (such as payment card or health information) through the website or its forms.
Back to contents3. How we use information, and our legal bases
Where the law requires us to have a legal basis for using personal information (for example under the GDPR or the UK GDPR), these are the purposes and the bases we rely on.
| Purpose | Legal basis |
|---|---|
| Reply to your request, arrange a call and talk through how a managed program could work | Taking steps at your request before a contract, and our legitimate interest in responding to business enquiries |
| Run the free risk check: carry out the passive checks, prepare the results and review them with you on a call | Taking steps at your request, and our legitimate interest in providing the offer you asked for |
| Follow up about your request or your risk check results | Our legitimate interest in following up on enquiries you made. You can ask us to stop at any time |
| Keep the website secure and working, and prevent spam and abuse | Our legitimate interest in protecting the website and our systems |
| Understand how the website is used so we can improve it | Our legitimate interest in improving our website, using aggregate analytics |
| Meet legal obligations and handle legal claims | Legal obligation, and our legitimate interest in establishing, exercising or defending legal claims |
3.1 We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use it to make decisions about you that have legal or similarly significant effects without human involvement.
Back to contents4. Who receives your information
4.1 We share information only with the following kinds of recipients, and only as needed for the purposes above.
- Slack. When you submit the contact form, the details you entered are sent to a Slack channel so that our team can respond. Slack acts as our service provider.
- Cloudflare. Cloudflare hosts the website, delivers it, provides website analytics and security services, and runs the form-handling function. Cloudflare acts as our service provider.
- Our team and affiliates. Employees and contractors of Vectra View Technologies Inc. who need the information to respond to you. If your request leads to a services engagement, Vectra View LLC, our services affiliate, may receive it to prepare that engagement.
- Professional advisers, authorities and successors. Our lawyers, auditors and insurers where needed; authorities where the law requires; and a buyer or successor if the business is sold or reorganized, who would be bound to protect your information.
4.2 Customer data processed in the platform is handled by the subprocessors listed on the Subprocessors page, under the customer agreements. This policy does not list them.
Back to contents6. How long we keep information
6.1 We keep personal information only as long as we need it for the purpose it was collected for, and as long as the law requires or allows. In practice:
- enquiries and risk check requests are kept for as long as we are handling your request and for a reasonable period afterwards, so that we can follow up and keep a record of what we discussed;
- if your request leads to a customer relationship, the information is kept as part of that relationship and handled under the customer agreements;
- technical and security logs and analytics are kept by Cloudflare for the periods set in its services, and we keep any copy we hold only as long as needed for security and troubleshooting;
- we delete or anonymize information that we no longer need, and we will delete information you ask us to delete unless we must keep it for a legal reason.
7. Security
7.1 We take reasonable steps to protect the personal information handled through this website. Form submissions are validated on the server, and the form includes spam and abuse controls. The website is delivered over an encrypted connection.
7.2 No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your information has been put at risk, please tell us at hello@vectraview.com.
7.3 For how we protect customer data in the platform, see the Security page and the customer agreements.
Back to contents8. International transfers
8.1 Vectra View Technologies Inc. is based in the United States, and the service providers named above operate globally. If you are outside the United States, your information will be transferred to and processed in the United States and other countries that may have different data protection laws from yours.
8.2 Where the law requires a safeguard for a transfer from the European Economic Area, the United Kingdom or Switzerland, we rely on an appropriate mechanism, such as the European Commission’s standard contractual clauses (with the UK addendum where needed) or the provider’s participation in a recognized data transfer framework. You can ask us for more information at hello@vectraview.com.
Back to contents9. Your rights and choices
9.1 If you are in the EEA, the UK or Switzerland, you may have the right to access your personal information, to have it corrected or erased, to restrict or object to our use of it (including where we rely on legitimate interests), to receive a copy in a portable format, and to withdraw consent where we rely on it. You may also complain to your local data protection authority.
9.2 If you are a California resident, you may have the right to know what personal information we collect, use and disclose; to request access to and a copy of it; to request correction or deletion; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined in California law, and we do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for exercising these rights. Residents of other U.S. states with privacy laws may have similar rights.
9.3 Categories of information (California). In the last twelve months we have collected: identifiers (name, email address, IP address, company); commercial and professional information (company name, size, job-related enquiry and frameworks of interest); internet and network activity (pages viewed, browser and device data); geolocation limited to country; and any other information you put in a message. We collect these from you and from your browser, for the purposes in section 3, and disclose them to the service providers in section 4 for business purposes. We have not sold or shared personal information.
9.4 How to make a request. Email hello@vectraview.com or use the contact form, and tell us what you would like. We may need to verify your identity, for example by replying to the email address you used. We will respond within the time the law requires, normally within one month (45 days in California, extendable where the law permits). You may use an authorized agent; we may ask for proof of their authority. If we decline a request, we will explain why and, where available, how to appeal.
9.5 You can ask us to stop following up with you at any time, and you can browse the website without giving us any personal information.
9.6 If you are a customer’s employee or a user of the platform and want to exercise rights over data in the platform, contact your organization (the controller), or us, and we will help as the customer agreements describe.
Back to contents10. Children
10.1 The website and the risk check are for business use and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you think a child has sent us information, please contact us and we will delete it.
Back to contents11. Changes to this policy
11.1 We may update this policy as the website, the risk check or the law changes. The effective date at the top shows when it was last changed. For material changes we will take reasonable steps to tell you, for example with a notice on this page. The version on this page applies from its effective date.
Back to contents12. Contact us
Questions, requests or concerns about this policy can go to hello@vectraview.com or through the contact form. Vectra View Technologies Inc. is a Delaware corporation.
Back to contents