Legal
Privacy Policy
Last updated:
Owlzops, LLC ("Owlzops," "we," "us") respects your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights. We do not sell personal data. We collect only what we need to deliver services and run our business.
1. Who We Are
Owlzops, LLC is a Delaware limited liability company providing infrastructure consulting services. We act as the data controller for personal data you provide directly to us (contact forms, emails, engagement onboarding).
Contact: [email protected]
2. What Data We Collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Contact data | Name, email address, company name | You provide via contact form or email |
| Engagement data | Project details, infrastructure information you share, communications | You provide during onboarding and active engagements |
| Payment data | Billing name, billing address, payment status | You provide; card details processed by Stripe (we never see raw card numbers) |
| Technical data | IP address, browser type, pages visited | Automatically collected when you visit owlzops.com |
| Communications | Emails, call notes, shared documents | Generated during our working relationship |
We do not collect sensitive personal data (health data, biometrics, political opinions, etc.).
3. How We Use Your Data
We use your personal data only for the following purposes:
- To deliver Services - managing your Engagement, communicating about scope, delivering reports and runbooks
- To process payments - issuing invoices, processing payments via Stripe
- To respond to inquiries - responding to contact form submissions and email inquiries
- To fulfill legal obligations - maintaining business records as required by US law, responding to lawful requests
- To improve our services - understanding how clients use our services (only using aggregated, non-personal insights)
We do not use your data for advertising, profiling, or automated decision-making that produces legal effects.
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Delivering a contracted Engagement | Performance of a contract (Art. 6(1)(b) GDPR) |
| Processing payments | Performance of a contract (Art. 6(1)(b) GDPR) |
| Responding to inquiries | Legitimate interests (Art. 6(1)(f) GDPR) - responding to potential clients |
| Maintaining business records | Legal obligation (Art. 6(1)(c) GDPR) |
| Website analytics | Legitimate interests (Art. 6(1)(f) GDPR) - understanding site usage in aggregate |
6. International Data Transfers
Owlzops is based in the United States. If you are in the EEA, UK, or another jurisdiction with data transfer restrictions, your personal data may be transferred to and processed in the US.
We rely on the following safeguards for international transfers:
- EU Standard Contractual Clauses (SCCs) in contracts with our sub-processors where applicable
- Stripe and Google are certified under the EU-U.S. Data Privacy Framework
By engaging with us, you acknowledge that your data may be processed in the United States under the protections described above.
7. How Long We Keep Data
| Data Type | Retention Period |
|---|---|
| Contact inquiry data (no Engagement) | 12 months from last contact |
| Engagement data (reports, communications) | 5 years after Engagement completion |
| Payment and invoicing records | 7 years (US tax / accounting requirements) |
| Website analytics | 26 months rolling |
| Infrastructure access credentials | Deleted immediately upon Engagement conclusion |
After retention periods expire, data is securely deleted or anonymized.
8. Security
We take reasonable technical and organizational measures to protect your personal data, including:
- Encrypted communications (TLS) for all data in transit
- Access controls limiting who can access client data within our team
- No storage of payment card data - all card processing handled by Stripe
- Immediate revocation of any infrastructure access upon Engagement completion
No transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at [email protected].
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, email [email protected] with "Privacy Request" in the subject line. We will respond within 30 days.
If you are in the EEA or UK and believe we have not handled your data in compliance with applicable law, you have the right to lodge a complaint with your local supervisory authority (e.g., your national Data Protection Authority).
11. owlzops-mapper Scanner Tool
The owlzops-mapper open-source tool does not collect or transmit any personal data by default.
When you run owlzops-mapper on your own servers:
- All scan data stays on your server and in your terminal - nothing is sent to Owlzops or any third party
- The tool makes no outbound network connections except for optional, explicitly opt-in features (
--external-ipcontacts ifconfig.me;--refresh-packagescontacts your configured package repositories) - If you share a scan report (JSON or Excel) with us as part of an Engagement, that report is treated as Engagement data under this Privacy Policy and our Terms of Service
Source code is publicly auditable at github.com/OWLZOPS/owlzops-mapper.
12. Children's Privacy
Our Services are directed exclusively to businesses and professionals. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted data to us, contact us at [email protected] and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated to active clients by email and reflected in an updated "Last updated" date. We encourage you to review this page periodically.
14. Contact & Data Controller
For privacy requests, questions, or complaints:
Owlzops, LLC (Data Controller)
Delaware, United States
[email protected]
Subject line: "Privacy Request"
We aim to respond to all privacy-related inquiries within 30 days.