Privacy Policy

checksumtech ("checksumtech," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect through checksumtech.com (the "Site"), why we collect it, how we use and share it, and the choices you have. By using the Site, you agree to the practices described here.

1. Information We Collect

Information you provide to us

We collect information you choose to give us directly through the Site's forms:

• Contact form — your name, email address, phone number, company name, the service you're asking about, a subject line, your message, and, if you provide it, an approximate budget.
• Job applications (Careers) — your name, email address, phone number, the position and job ID you're applying for, your experience level, and, if you choose to share them, a LinkedIn profile URL and portfolio link. If you attach a résumé/CV, we store that file as part of your application.
• Newsletter signup — your email address, when you subscribe to our Insights newsletter.
• DeliveryRadar subscription — your email address, the domain you ask us to monitor, and the resulting scan history and findings for that domain.
• ComplianceRadar subscription — your email address and the self-assessment information you enter, which may include your company name, Unique Entity ID (UEI), CAGE code, system description, and your NIST SP 800-171 control responses and notes. This information is used solely to generate your SPRS score estimate and your downloadable System Security Plan (SSP) and Plan of Action & Milestones (POA&M), and to show it back to you in your dashboard.
• Subscription sign-in — if you sign in to a DeliveryRadar or ComplianceRadar dashboard, we send a one-time "magic link" to your email address. The underlying sign-in token is single-use, expires automatically after 15 minutes, and is not retained once it is used or expires.
• Payment information — when you subscribe to DeliveryRadar or ComplianceRadar, your payment is processed directly by our payment processor, Stripe. We do not collect or store your full card number or other sensitive payment details ourselves; Stripe provides us with limited subscription information (such as your Stripe customer ID, subscription status, and selected plan) so we can manage your subscription. Stripe's own use of your payment information is governed by Stripe's Privacy Policy.

Information collected automatically

Our web server records standard technical logs common to any website (such as IP address, browser type, and pages requested) for security and troubleshooting. The Site does not currently use any third-party analytics, advertising, or tracking cookies — see Cookies below for the limited, strictly functional cookies we do use.

2. How We Use Your Information

We use the information described above to:

• Respond to your enquiries submitted through the contact form;
• Review and process job applications, including contacting you about your candidacy;
• Send the Insights newsletter to subscribers, and a one-time welcome email when you first subscribe;
• Operate your DeliveryRadar or ComplianceRadar subscription, including running the scans or generating the score/documents you've requested, sending sign-in links, and processing your subscription payment and renewals;
• Maintain the security, integrity, and proper functioning of the Site; and
• Comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How We Share Your Information

We share personal information only in the following limited circumstances:

• Service providers — we use a third-party email delivery provider to send contact-form replies, newsletters, and application confirmations on our behalf. That provider processes email addresses and message content solely to deliver those emails.
• Payment processing — if you subscribe to DeliveryRadar or ComplianceRadar, we share the information necessary to process your subscription (such as your email address and selected plan) with Stripe, our payment processor, so it can handle billing, renewals, and your payment method on our behalf.
• Legal reasons — if required to do so by law, subpoena, or other legal process, or to protect the rights, property, or safety of checksumtech, our users, or others.
• Business transfers — if checksumtech is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Cookies

The Site uses a small number of strictly necessary cookies required for the Site to function — for example, a session cookie used only when our team signs in to manage job listings, and a security ("anti-forgery") token cookie that protects form submissions from cross-site request forgery. These cookies do not track you across other websites and are not used for advertising. We do not currently use analytics or marketing cookies; if that changes, we will update this Policy and, where required by law, ask for your consent first.

5. Data Retention

We keep contact-form messages and job applications (including résumés/CVs) for as long as reasonably necessary for the purpose they were collected for — such as completing a hiring process or responding to your enquiry — and then for a further reasonable period in case we need to refer back to them. You can ask us to delete your information sooner at any time; see Your Rights and Choices below. Newsletter subscriber emails are kept until you unsubscribe. DeliveryRadar and ComplianceRadar subscription data (including your ComplianceRadar self-assessment answers and generated documents) is kept for as long as your subscription is active and for a reasonable period afterward in case you resubscribe or need access to your records, after which it may be deleted; you can request earlier deletion at any time as described below. Magic-link sign-in tokens are not retained beyond their 15-minute validity window.

6. Your Rights and Choices

• Access, correction, or deletion — you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing info@checksumtech.com.
• Newsletter opt-out — every newsletter email includes an unsubscribe link, or you can unsubscribe directly at checksumtech.com/Contact/Unsubscribe at any time.
• Job application withdrawal — you can ask us to withdraw and delete a submitted application at any time by emailing us.

We will respond to verified requests within a reasonable time.

7. Data Security

We use reasonable technical and organizational measures to protect the information we hold, including transmitting the Site over HTTPS. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Children's Privacy

The Site is intended for business and professional audiences and is not directed at children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International Visitors

checksumtech is based in the United States, and information you submit through the Site is processed and stored in the United States. If you are visiting from outside the United States, you understand that your information will be transferred to, and processed in, the United States, which may have different data protection laws than your home country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Site after a change means you accept the updated Policy.

11. Contact Us

Questions about this Privacy Policy, or requests regarding your personal information, can be sent to info@checksumtech.com.