Privacy Policy

Purpose and scope of this Privacy Policy

This Privacy Policy explains how DRG0NF1Y Cybersecurity Consulting LLC collects, uses, stores, protects, and handles information submitted through DRG0NF1Y websites, the client app, intake forms, contact forms, payment workflows, report workflows, and service communications.

DRG0NF1Y provides consent-based public-source digital footprint and privacy exposure services. Because the nature of these services may involve sensitive identity, contact, creator, household, and business exposure details, client information is treated as confidential service information.

Information we may collect

Depending on the service and scope you select, DRG0NF1Y may collect the following categories of information:

• Contact details such as name, email address, phone number, and preferred contact method.
• Service details such as selected service, tier, intake answers, household or business scope, and consent records.
• Public identifiers such as usernames, public profile links, creator handles, business listings, websites, emails, phone numbers, and other public-source identifiers you authorize for review.
• Report and workflow information such as scan status, risk notes, cleanup priorities, evidence references, report links, payment status, account status, and service communications.
• Technical information such as basic website/app logs, timestamps, browser/device information, and security logs needed to operate and protect the service.

Sensitive information you should not submit

DRG0NF1Y does not need and does not request highly sensitive credentials or unauthorized access material. Do not submit:

• Passwords, login codes, one-time passcodes, recovery seeds, private keys, full Social Security numbers, or complete financial account numbers.
• Private messages, private account content, private photos, or private documents unless DRG0NF1Y specifically confirms in writing that the information is necessary and appropriate for the agreed service scope.
• Information about another person unless you are authorized to request the review, such as a parent/guardian, business owner, household member, or authorized representative.
• Illegal material, stolen information, credential dumps, malware, spyware, or data obtained without permission.

How we use information

DRG0NF1Y uses client information only for legitimate service and business purposes, including:

• Reviewing and confirming service scope and consent.
• Creating or linking a client account by email for app/report access.
• Performing consent-based public-source review and preparing client-safe reports.
• Processing payments, discounts, refunds, and payment status.
• Communicating about intake, reports, cleanup guidance, follow-up steps, support, and administrative notices.
• Maintaining service records, security logs, tax/accounting records, dispute records, and legal compliance records.
• Improving the client workflow, app reliability, intake clarity, and report quality.

Public-source review and client-provided information

DRG0NF1Y reviews information that is publicly available, client-provided, or otherwise within the written/confirmed service scope. Public-source review does not mean DRG0NF1Y can control, remove, or verify every third-party record. Findings are a snapshot based on available information at the time of review.

Payments and third-party providers

Payments may be processed by third-party payment providers such as Stripe or other approved processors. DRG0NF1Y does not intentionally store full payment card numbers on its public website or client app. Third-party providers process information according to their own terms and privacy practices.

DRG0NF1Y may also use infrastructure, hosting, email, analytics, storage, form, security, or communication providers to operate the website, app, and service workflow.

Client accounts and report access

When a client submits intake, DRG0NF1Y may create, invite, or link a client account using the submitted email address so the client can access status, payment, report, or dashboard features. Clients are responsible for maintaining access to their email account and protecting login links or account credentials.

Data retention

DRG0NF1Y retains client information only as long as reasonably necessary for service delivery, follow-up, accounting, dispute handling, security, compliance, and documented business operations. Some records may be retained even after a service is complete if needed for legitimate business, tax, legal, or security purposes.

Client privacy requests

You may contact DRG0NF1Y to request access, correction, or deletion of client information where applicable. DRG0NF1Y may need to verify your identity or authority before acting on a request. Certain information may be retained where required or permitted for legal, security, accounting, dispute, or operational reasons.

No sale of client information

DRG0NF1Y does not sell client personal information. DRG0NF1Y does not use submitted client exposure details to create unrelated marketing profiles for resale.

Security safeguards

DRG0NF1Y uses reasonable administrative, technical, and operational safeguards designed to protect client information. No website, app, email system, or internet-connected workflow can be guaranteed 100% secure. Clients should avoid sending unnecessary sensitive information through unencrypted channels.

Children and family services

Family Privacy Shield services may include parent/guardian-directed guidance related to child safety and household privacy. DRG0NF1Y does not knowingly request direct submissions from children. A parent, guardian, or authorized adult must submit and manage family-scope requests.

Changes to this policy

DRG0NF1Y may update this Privacy Policy as the business, app, services, or legal requirements change. The effective date at the top of the page identifies the latest published version.