Legal

Privacy Policy

Effective

Last updated

This Privacy Policy (“Policy”) is issued by Secoyascent LLC DBA vCSO.ai (“vCSO.ai,” “we,” “our,” or “us”), a California limited liability company, and governs the collection, use, disclosure, and safeguarding of personal information in connection with our website (vcso.ai) and related services.

By accessing or using our Site, you acknowledge and agree to the terms of this Policy.

1. Definitions

For purposes of this Policy:

  • “Personal Information” means information that identifies, relates to, or could reasonably be linked with an individual, such as name, email address, billing information, or phone number.
  • “Device Information” means technical information automatically collected when you access our Site, including IP address, browser type, time zone, cookies, and browsing activity.

2. Information Collected

We may collect the following categories of information:

  • Personal & Contact Information: Name, email, phone number, and any details submitted via our forms or communications.
  • Business Information: Company name, role, and professional interests.
  • Device & Technical Information: IP address, browser type, device data, and browsing activity (through cookies or similar technologies).
  • Other Information: Any information you voluntarily provide to us.

3. Use of Information

We may use information for the following purposes:

  • Responding to inquiries and providing services.
  • Delivering, maintaining, and improving our offerings.
  • Communicating updates, opportunities, or resources.
  • Analyzing site usage and performance.
  • Detecting fraud or security threats.
  • Complying with legal and regulatory obligations.

Processing of personal data shall be pursuant to one or more of the following legal bases:

  • Consent provided by the individual.
  • Performance of a contract.
  • Legitimate business interests.
  • Compliance with legal obligations.

5. Cookies & Tracking Technologies

Our Site uses strictly necessary cookies set by our content delivery and security provider (Cloudflare) to protect the Site from bots and abuse, including cookies used by Cloudflare Turnstile on forms to distinguish humans from automated traffic. These cookies are essential to operate the Site securely.

With your permission, the Site loads optional analytics services. Google Analytics 4 may set first-party analytics cookies, including cookies whose names begin with _ga, to distinguish visits and understand use of the Site. Ahrefs Web Analytics measures aggregate traffic and referral performance. When Microsoft Clarity is enabled, the consent notice also identifies session replay: Clarity reconstructs clicks, scrolling and page journeys, with sensitive content masked, to help us improve the website. Clarity may set first-party analytics cookies named _clck and _clsk to associate page views and visits.

These optional services do not load unless you select Allow analytics. Enabling Clarity requires a fresh choice from visitors who previously allowed only Google Analytics and Ahrefs; an earlier refusal remains respected. Your choice is stored in your browser’s localStorage, and you can change it at any time through Analytics choices. Declining stops optional analytics loading; withdrawing permission reloads the page and clears our analytics cookies.

We do not use:

  • Advertising or retargeting cookies.
  • Analytics data for advertising or retargeting.
  • Social media sharing cookies or tracking pixels.
  • Cross-site advertising integrations enabled by us.

For basic user-experience and consent state (such as remembering whether our navigation intro animation has already been shown and your analytics choice), we use your browser’s sessionStorage or localStorage. These browser-storage values are not cookies.

Do Not Track (DNT) and Global Privacy Control (GPC): Our cookieless, first-party conversion beacon does not run when your browser sends an enabled DNT signal. Clarity does not load when your browser sends an enabled DNT or GPC signal. Optional Google Analytics and Ahrefs measurement remains controlled by your explicit analytics choice.

You may configure your browser to block cookies. Blocking strictly necessary cookies may prevent you from submitting the contact form or cause other parts of the Site to behave unexpectedly.

6. Analytics & Advertising

We use a cookieless, first-party measurement service to count page views, selected calls-to-action, and form starts. This information supports our conversion reporting and is not used for cross-site profiling.

If you allow optional analytics, we use Google Analytics 4 and Ahrefs Web Analytics to understand traffic sources, content use, and completed lead actions. Microsoft Clarity adds session replay and click/scroll heatmaps on eligible public pages of vcso.ai. Public page copy remains readable using Clarity’s Balanced masking mode; we mask forms and interactive calculator/quiz content before replay starts. We do not send names, email addresses or contact records as Clarity custom identifiers. Recognized campaign labels and our fixed service/contact routing parameters are included so we can follow public page journeys. Admin pages, preview sites, non-public routes, download-gate pages and URLs or referrers containing unrecognized or sensitive parameters are excluded from this replay pilot.

Google advertising signals and ad-personalization signals are disabled. We send Clarity an explicit denial of advertising storage permission and do not enable Microsoft Advertising, retargeting, Meta Pixel or LinkedIn Insight integrations. Microsoft receives website interaction and device data when Clarity is allowed and operates as an independent controller under the Clarity Terms of Use. Those terms permit Microsoft’s own uses of personal data, including product improvement and advertising profiles, and use of non-personal data for research and AI development. Its handling of data is described in the Microsoft Privacy Statement. You can decline these optional services using our analytics controls.

Cloudflare also processes limited technical and security telemetry as our content delivery, hosting, and bot-protection provider.

7. Disclosure of Information

We disclose information as described in this Policy, including:

  • To service providers engaged in supporting our operations.
  • As required by law, subpoena, or government authority.
  • With consent, or as necessary to perform services.

8. Data Security

We employ commercially reasonable technical and organizational safeguards to protect information from unauthorized access, disclosure, or misuse, consistent with the confidentiality obligations set forth in agreements we enter into.

9. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined herein, or until you request deletion, unless a longer retention period is required by law.

10. Automated Decision-Making (GDPR)

We do not engage in fully automated decision-making that has legal or significant effects on individuals. Limited automated processes may be used for fraud detection and website security.

11. Rights of Individuals

Depending on applicable law, you may have the right to:

  • Access and obtain a copy of your personal data.
  • Correct or update your information.
  • Request deletion of your personal data.
  • Withdraw consent or object to processing.
  • Request portability of personal data.

Requests may be submitted as set forth in Section 14.

12. California Privacy Rights (CCPA/CPRA)

For California residents, the following applies:

  • Categories of personal data collected are described in Section 2.
  • We do not sell or share personal data within the meaning of the CCPA/CPRA.
  • You have the right to request disclosure, correction, or deletion of your data, and to exercise such rights free from discrimination.

13. International Data Transfers

Where information is transferred outside the United States, we implement safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect such data.

14. Children’s Privacy

Our services are not directed to persons under the age of 16. We do not knowingly collect personal information from children.

15. Amendments

We reserve the right to amend this Policy from time to time. Amendments shall be effective upon posting to this Site, with the updated effective date noted above.

16. Governing Law & Venue

This Policy shall be governed by, and construed in accordance with, the laws of the State of California, without regard to conflict of law principles. Any disputes arising hereunder shall be subject to the exclusive jurisdiction of the state and federal courts located in Santa Clara County, California.

17. Contact Information

For questions, concerns, or to exercise your rights under this Policy, please contact us at:

Email: legal@vcso.ai

Mail: Secoyascent LLC DBA vCSO.ai, PO Box 1878, Los Gatos, CA 95031