Why VLKN For Providers Under the Hood Team FAQ
Free pentest

VLKN / Legal

Privacy policy.

Effective date:

VLKN, Inc. ("VLKN," "we," "us," or "our") explains in this Privacy Policy how we collect, use, and disclose personal information when you visit vlkn.ai (the "Website"), submit information through the Website, or communicate with us in connection with those visits or submissions.

This policy covers visitors to our public Website, information submitted through the Website, and communications arising from those visits or submissions. It does not cover outbound prospecting using contact information obtained from other sources. It does not describe how we handle customer data processed during penetration testing or through the VLKN platform. The handling of data in those activities is addressed in separate agreements and data-handling terms arranged directly with each client.

Information we collect

Information you provide. When you request a walkthrough, a free pentest, or other information, we collect the details you submit, such as your name, work email address, company, and the contents of your communications with us. If you provide additional contact details or information about your organization's needs, we collect that information as well. Please do not submit passwords, access credentials, or sensitive testing data through general Website forms or email inquiries.

Information collected automatically. Our hosting providers process technical information, such as your IP address and requested page, to deliver the Website. When Analytics is enabled, Google Analytics collects information about your browser and device, pages viewed, referral sources, and interactions with the Website. If you accept Campaign measurement, the Reddit Pixel collects device and browser information, online identifiers, page visits, and completed inquiry events to measure our Reddit ads and support relevant advertising. When Analytics is also enabled, your Campaign measurement choice permits Google Ads measurement using advertising storage, click identifiers, and conversion data. Google ad personalization stays disabled. We attach campaign labels and your measurement choices to Website inquiries so we can understand where requests originate. While Analytics is enabled, we also remember the first and latest tagged visits in this browser for up to 30 days and include that attribution with an inquiry. When Analytics is disabled, we use only campaign labels present on the page where you submit the inquiry. Untagged visits may have an unknown source. When Campaign measurement is accepted, we may also attach the Reddit click identifier from that URL. Our cookie and retention practices are described below.

How we use information

We use personal information to:

  • Respond to inquiries and coordinate requested walkthroughs, pentests, and business discussions.
  • Operate, maintain, troubleshoot, and improve the Website.
  • Protect the Website and our business against fraud, abuse, and security incidents.
  • Maintain business records, comply with legal obligations, and establish, exercise, or defend legal claims.
  • Send product news, newsletters, and other marketing communications when you opt in. Choosing not to subscribe does not affect our response to your inquiry or your access to a requested service.

International processing

VLKN's team is based in the United States. Information submitted through the Website is received and handled by our U.S.-based team and the service providers described in this policy. Your information may be processed in countries other than the country where you live, where data protection laws may differ.

Where international-transfer safeguards are required, we rely on the safeguards in the applicable vendor data-processing agreements, including standard contractual clauses where applicable. You may contact info@vlkn.ai for information about the safeguards applicable to your information or to request a copy, subject to appropriate redactions to protect confidential information.

How we share information

We may disclose personal information to:

  • Service providers that help us operate our business, such as Website hosting, email, and inquiry management providers, for the services they provide to us.
  • Professional advisers, such as legal and accounting advisers, when necessary for their work.
  • Authorities or other parties when reasonably necessary to comply with law or legal process, protect rights or safety, or investigate fraud or security incidents.
  • Parties to a business transaction, such as a merger, acquisition, financing, or sale of assets, including during related due diligence, subject to appropriate confidentiality protections.

We use Amazon Web Services (AWS) to host the Website and Formspree to receive and manage Website form submissions. Formspree sends Website submissions to info@vlkn.ai, our business email address hosted through Google Workspace. We use Google Workspace to receive those submissions and communicate with you.

We may also disclose information at your direction.

We do not sell Website inquiry lists. If you accept Campaign measurement, we share Website activity and online identifiers with Reddit for ad measurement and relevant advertising, and, when Analytics is also enabled, with Google for Google Ads campaign measurement. This may constitute sharing for cross-context behavioral advertising under applicable law. You can reject Campaign measurement or withdraw your choice in Cookie settings. A Global Privacy Control or Do Not Track signal keeps measurement off unless you explicitly enable your selections in Cookie settings while that signal is present. The settings show when your saved site choice overrides the browser signal. We do not include the contents of your inquiry, your name, your email address, or your company or project name in the conversion events we send to Reddit or Google Analytics.

Cookies and similar technologies

Analytics and Campaign measurement are separate choices in Cookie settings. Measurement-only Google Analytics is enabled by default unless you have opted out or your browser sends a privacy signal that you have not explicitly overridden for this site. Campaign measurement always stays off until you opt in. You may turn either or both off without affecting access to the Website or a requested service. Email marketing is a separate choice on our inquiry forms.

Analytics uses Google Analytics cookies to measure visits and completed inquiries. We do not enable Google Signals, user-provided data collection, or advertising personalization in our Analytics setup. We link Google Analytics with Google Ads to measure campaign results; Google advertising consent follows the Campaign measurement choice described below. Campaign measurement uses the Reddit Pixel to measure ad results and build audiences for relevant ads. Reddit receives device and browser information, online identifiers, page URLs, and conversion events when Campaign measurement is accepted. See Reddit’s Privacy Policy. Google advertising storage and advertising user data are enabled only when both Analytics and Campaign measurement are accepted under the updated controls. They are disabled when either choice is withdrawn. Google ad personalization remains disabled in all cases. Existing choices made before Google Ads measurement was added do not enable it until you save or accept the updated choices.

We remember your choices in this browser’s local storage for 180 days. We ask again after expiry, if you clear storage, or when you use another browser or device. Existing analytics opt-outs are honored, including choices saved before we introduced separate advertising controls. A saved opt-in made without a browser privacy signal does not override a signal enabled later; you can make a new site-specific choice in Cookie settings. Previous analytics-only consent does not enable Campaign measurement. Where Analytics is enabled by default, that default is not recorded as your explicit consent. If your browser cannot save a choice, optional measurement stays off.

Use Cookie settings on any page to change your choices. Withdrawal stops the corresponding new measurement events from our integration, updates Google consent settings, and removes accessible cookies for the measurement choices you turned off. Turning off Analytics also clears saved campaign attribution from this browser. A page reload unloads the Reddit code when no inquiry is in progress; if you have entered form details, we preserve those details and block new Reddit event calls until you leave the page. Withdrawal does not recall requests already sent or delete data already collected by a provider. A Global Privacy Control or Do Not Track signal keeps measurement off unless you explicitly enable your selections in Cookie settings while that signal is present. The settings show when your saved site choice overrides the browser signal.

You can also manage cookies through your browser settings. Blocking certain cookies may affect Website functionality.

How long we keep information

We review Website inquiries and related business correspondence after two years without substantive interaction with you. We delete inquiries that no longer serve a continuing business or legal purpose. Records needed for an ongoing client relationship or applicable legal obligations may be retained longer and remain subject to review. You can request deletion at any time by contacting info@vlkn.ai.

Our Google Analytics settings retain event-level data for 2 months and user-level data for 14 months. The user-level retention period resets when a user has new activity, so returning users’ information may be retained longer than 14 months from their first visit. These settings do not apply to standard aggregated Analytics reports.

We do not currently configure CloudFront log delivery destinations or enable S3 server access logging for the Website.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including restricting access to authorized team members and using multifactor authentication for Formspree, AWS, and business email accounts. No method of transmission or storage is completely secure.

Your choices and requests

You can contact us at info@vlkn.ai to request access to, correction of, or deletion of your personal information. Depending on your location and applicable law, you may also have rights to obtain a copy of your information, object to or restrict certain processing, withdraw consent, or opt out of certain uses or disclosures. These rights may be subject to exceptions.

When you request deletion of a Website inquiry, we will delete the submission from Formspree and related email records, except for information we are permitted or required to retain under applicable law. We may need to verify your identity before acting on a request. We will respond as required by applicable law. If the GDPR applies to our processing of your information, you have the right to lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, place of work, or the alleged infringement. In the UK, you may complain to the Information Commissioner’s Office.

You can opt out of marketing emails by using the unsubscribe link provided in an email, replying “unsubscribe” or “stop,” or contacting us at info@vlkn.ai. We may still send communications needed to respond to your requests or administer our relationship with you. After an unsubscribe or deletion request, we may retain a minimal record, such as your email address and opt-out status, solely to ensure we do not send you further marketing emails.

Children

The Website is intended for business audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps to delete it.

Other websites

The Website may link to third-party websites or services. Their privacy practices are governed by their own policies.

Changes to this policy

We may update this policy from time to time. We will post the revised version on this page and update the effective date. If required by applicable law, we will provide additional notice or obtain consent for material changes.

Contact us

For privacy questions or requests, contact:

VLKN, Inc.
Email: info@vlkn.ai
Mailing address: 3385 Bass Lake Rd
Ste 140 #1101
El Dorado Hills, CA 95762