VLKN, Inc. ("VLKN," "we," "us," or "our") explains in this Privacy Policy how we collect, use, and disclose personal information when you visit vlkn.ai (the "Website"), submit information through the Website, or communicate with us in connection with those visits or submissions.
This policy covers visitors to our public Website, information submitted through the Website, and communications arising from those visits or submissions. It does not cover outbound prospecting using contact information obtained from other sources. It does not describe how we handle customer data processed during penetration testing or through the VLKN platform. The handling of data in those activities is addressed in separate agreements and data-handling terms arranged directly with each client.
Information we collect
Information you provide. When you request a walkthrough, a free pentest, or other information, we collect the details you submit, such as your name, work email address, company, and the contents of your communications with us. If you provide additional contact details or information about your organization's needs, we collect that information as well. Please do not submit passwords, access credentials, or sensitive testing data through general Website forms or email inquiries.
Information collected automatically. Our hosting providers process technical information, such as your IP address and requested page, to deliver the Website. If you accept Analytics, Google Analytics collects information about your browser and device, pages viewed, referral sources, and interactions with the Website. Our cookie and retention practices are described below.
How we use information
We use personal information to:
- Respond to inquiries and coordinate requested walkthroughs, pentests, and business discussions.
- Operate, maintain, troubleshoot, and improve the Website.
- Protect the Website and our business against fraud, abuse, and security incidents.
- Maintain business records, comply with legal obligations, and establish, exercise, or defend legal claims.
- Send product news, newsletters, and other marketing communications when you opt in. Choosing not to subscribe does not affect our response to your inquiry or your access to a requested service.
Legal bases for processing
Where the EU or UK GDPR applies, we rely on the following legal bases:
- Inquiries and related communications: our legitimate interests in responding to business inquiries and communicating with prospective clients. Where you personally request steps toward a contract with us or are a party to that contract, we may instead rely on taking those steps or performing that contract.
- Website operation and security: our legitimate interests in operating, maintaining, and protecting the Website and preventing abuse.
- Optional Analytics and marketing: your consent. You may withdraw consent through Cookie settings or the marketing opt-out methods described in this policy. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Legal obligations: compliance with legal obligations applicable to us where recognized under the applicable data protection law.
- Claims and marketing suppression records: our legitimate interests in establishing, exercising, or defending legal claims and honoring your marketing preferences, or compliance with an applicable legal obligation.
International processing
VLKN's team is based in the United States. Information submitted through the Website is received and handled by our U.S.-based team and the service providers described in this policy. Your information may be processed in countries other than the country where you live, where data protection laws may differ.
Where international-transfer safeguards are required, we rely on the safeguards in the applicable vendor data-processing agreements, including standard contractual clauses where applicable. You may contact info@vlkn.ai for information about the safeguards applicable to your information or to request a copy, subject to appropriate redactions to protect confidential information.
How long we keep information
We review Website inquiries and related business correspondence after two years without substantive interaction with you. We delete inquiries that no longer serve a continuing business or legal purpose. Records needed for an ongoing client relationship or applicable legal obligations may be retained longer and remain subject to review. You can request deletion at any time by contacting info@vlkn.ai.
Our Google Analytics settings retain event-level data for 2 months and user-level data for 14 months. The user-level retention period resets when a user has new activity, so returning users’ information may be retained longer than 14 months from their first visit. These settings do not apply to standard aggregated Analytics reports.
We do not currently configure CloudFront log delivery destinations or enable S3 server access logging for the Website.
Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information, including restricting access to authorized team members and using multifactor authentication for Formspree, AWS, and business email accounts. No method of transmission or storage is completely secure.
Your choices and requests
You can contact us at info@vlkn.ai to request access to, correction of, or deletion of your personal information. Depending on your location and applicable law, you may also have rights to obtain a copy of your information, object to or restrict certain processing, withdraw consent, or opt out of certain uses or disclosures. These rights may be subject to exceptions.
When you request deletion of a Website inquiry, we will delete the submission from Formspree and related email records, except for information we are permitted or required to retain under applicable law. We may need to verify your identity before acting on a request. We will respond as required by applicable law. If the GDPR applies to our processing of your information, you have the right to lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, place of work, or the alleged infringement. In the UK, you may complain to the Information Commissioner’s Office.
You can opt out of marketing emails by using the unsubscribe link provided in an email, replying “unsubscribe” or “stop,” or contacting us at info@vlkn.ai. We may still send communications needed to respond to your requests or administer our relationship with you. After an unsubscribe or deletion request, we may retain a minimal record, such as your email address and opt-out status, solely to ensure we do not send you further marketing emails.
Children
The Website is intended for business audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps to delete it.
Other websites
The Website may link to third-party websites or services. Their privacy practices are governed by their own policies.
Changes to this policy
We may update this policy from time to time. We will post the revised version on this page and update the effective date. If required by applicable law, we will provide additional notice or obtain consent for material changes.
Contact us
For privacy questions or requests, contact:
VLKN, Inc.
Email: info@vlkn.ai
Mailing address: 3385 Bass Lake Rd
Ste 140 #1101
El Dorado Hills, CA 95762