Privacy Policy

1. Who We Are

DefenScope LLC provides cybersecurity consulting and professional security services, including AI agent security, MCP security, security assessments, security architecture, security implementation, red teaming, and related advisory services.

Website: https://defenscope.io
Email: [email protected]

2. Information We Collect

We may collect the following categories of information:

• your name;
• work email address;
• company name;
• job title or professional role;
• company website;
• information about the service you are interested in;
• information submitted through contact, assessment, newsletter, or inquiry forms;
• information contained in emails or other communications with us;
• information you voluntarily provide regarding your security environment, infrastructure, AI agents, MCP servers, tools, systems, or security objectives;
• professional information obtained from publicly available sources or third-party business information providers;
• company information such as industry, company size, location, technology focus, hiring activity, and funding information;
• IP address;
• browser type and version;
• device and operating system information;
• referring website or URL;
• pages viewed;
• timestamps;
• approximate geographic region;
• website interaction and usage information;
• diagnostic, performance, and security event data.

We do not intentionally request passwords, authentication tokens, private keys, API keys, production credentials, or similar secrets through our public website.

3. Sources of Information

We may obtain information directly from you when you contact us, submit a form, request an assessment, subscribe to communications, or engage DefenScope for professional services.

We may also obtain professional and company information from publicly available sources and third-party B2B data providers.

For example, we may use Apollo.io to identify companies and professional contacts that may be relevant to our cybersecurity services. Information obtained through Apollo may include a person's name, professional email address, job title, employer, company information, and other business-related information.

We may use Ahrefs for search engine optimization, website research, search performance analysis, competitive research, keyword research, and related website analytics.

4. How We Use Information

We may use personal information to:

• respond to inquiries and assessment requests;
• communicate with prospective and existing customers;
• provide cybersecurity consulting and professional services;
• evaluate whether our services may be relevant to an organization;
• identify companies and professional contacts that may benefit from our services;
• conduct business-to-business prospecting and outreach;
• prepare proposals, recommendations, statements of work, and commercial offers;
• manage customer and prospective customer relationships;
• provide requested information, technical materials, or security content;
• operate and maintain our website;
• understand how our website is used;
• improve our website, services, and communications;
• measure website and marketing performance;
• conduct SEO and market research;
• detect fraud, abuse, malicious activity, or security incidents;
• protect our systems, infrastructure, customers, and business;
• maintain business, contractual, accounting, and transaction records;
• send service-related communications;
• send marketing or informational communications where permitted by applicable law;
• comply with legal and regulatory requirements;
• establish, exercise, or defend legal claims.

We do not use information submitted through our website for the purpose of training publicly available artificial intelligence models.

5. B2B Prospecting and Outreach

DefenScope is primarily a business-to-business service provider.

We may use publicly available professional information and information obtained from business intelligence providers such as Apollo.io to identify organizations and professionals who may have a legitimate business interest in our services.

This may include contacting individuals at their professional email addresses regarding cybersecurity services that we reasonably believe may be relevant to their role or organization.

Where required by applicable law, we rely on an appropriate legal basis for this processing, including legitimate business interests or consent.

You may request that we stop using your information for marketing or prospecting at any time by replying to our communication, using an available unsubscribe mechanism, or contacting us at [email protected].

6. Contact and Assessment Forms

When you submit a contact, service, or assessment form, we use the information provided to understand your request and communicate with you.

Please do not submit highly sensitive authentication information through public forms, including passwords, access tokens, API credentials, private cryptographic keys, cloud credentials, or production secrets.

If sensitive technical information is required during a security engagement, DefenScope may establish an appropriate secure communication or information-sharing mechanism.

7. Security Engagement Data

Cybersecurity engagements may require customers to provide technical information that can include architecture documentation, configuration information, logs, vulnerability information, security policies, source code excerpts, system metadata, information about identities and permissions, cloud infrastructure details, AI agent configurations, MCP server configurations, and tool-access information.

Information provided as part of a professional engagement may also be governed by a separate agreement, statement of work, nondisclosure agreement, data processing agreement, or other contractual terms.

Where contractual terms governing customer engagement data conflict with this Privacy Policy, the applicable contractual terms will control with respect to that engagement.

8. Legal Bases for Processing

Where laws such as the European Union General Data Protection Regulation ("GDPR") or United Kingdom GDPR apply, we may process personal information based on:

Performance of a contract. Processing may be necessary to provide requested services or to take steps at your request before entering into a contract.

Legitimate interests. We may process information where necessary for legitimate business interests, including operating our business, responding to B2B inquiries, identifying prospective customers, conducting relevant B2B outreach, protecting our infrastructure, preventing abuse, and improving our services.

Consent. We may rely on consent where applicable, including for certain marketing, cookies, or tracking technologies.

Legal obligations. We may process information where necessary to comply with applicable law, legal process, regulatory requirements, or enforceable governmental requests.

Where we rely on legitimate interests, we consider whether those interests are overridden by the rights and interests of the individual concerned.

9. Email Communications

If you contact DefenScope, request an assessment, subscribe to updates, or otherwise provide professional contact information, we may send communications relating to our services, your inquiry, security research, technical content, or DefenScope updates.

You may unsubscribe from non-essential marketing communications at any time.

Unsubscribing from marketing communications does not necessarily prevent us from sending transactional, contractual, legal, administrative, or security-related communications.

10. Cookies and Similar Technologies

Our website may use cookies, local storage, server logs, and similar technologies to operate the website, remember preferences, measure performance, understand website usage, and protect our infrastructure.

Some technologies may be necessary for website functionality and security. Others may be used for analytics or performance measurement.

Where applicable law requires consent before placing non-essential cookies or similar technologies, we will request appropriate consent.

You can also control certain cookies through your browser settings.

11. Analytics, SEO, and Website Research

We may use analytics, monitoring, and research tools to understand website performance, visitor behavior, search visibility, and technical issues.

DefenScope may use Ahrefs for purposes such as SEO analysis, keyword research, backlink analysis, competitor research, search performance analysis, and website analytics where those features are enabled.

Depending on the applicable service and configuration, these providers may process information such as IP addresses, browser information, device information, referring URLs, visited pages, and interaction data.

Information processed directly by third-party providers may also be subject to their own privacy policies and terms.

12. Apollo.io

We may use Apollo.io for B2B prospecting, business intelligence, professional contact information, contact enrichment, company research, and sales outreach.

Apollo may provide information relating to businesses and professionals, including names, professional email addresses, job titles, employers, company websites, company size, industry, location, hiring information, and other professional or company attributes.

We use this information to identify organizations and professionals who may reasonably be interested in DefenScope's services.

Apollo.io operates under its own privacy policy and may independently determine how information within its database is collected and processed.

13. Third-Party Service Providers

We may use third-party providers to support our business operations, including providers for website hosting, infrastructure, analytics, monitoring, SEO research, B2B prospecting, email delivery, communications, scheduling, customer relationship management, cloud infrastructure, security monitoring, and payment processing.

These providers may receive or process information where necessary to provide their services to us.

Some third-party providers may act as processors or service providers on our behalf. Others may act as independent controllers of information under their own privacy policies.

Our use of third-party providers does not authorize them to use information received from DefenScope for unrelated purposes except as permitted by their own legal relationship with the relevant individual and applicable law.

14. How We Share Information

We may disclose personal information to service providers that assist us in operating our business.

We may also disclose information to professional advisers such as attorneys, accountants, auditors, insurers, or consultants where reasonably necessary.

We may disclose information where required by law, subpoena, court order, regulatory request, or other valid legal process.

We may disclose information where we reasonably believe it is necessary to investigate fraud, security incidents, abuse, attacks, illegal activity, or threats to DefenScope, our customers, or other persons.

Information may also be transferred in connection with a merger, acquisition, financing transaction, corporate restructuring, bankruptcy, or sale of all or part of DefenScope's business or assets.

We do not sell personal information for monetary consideration.

We do not knowingly share personal information for cross-context behavioral advertising unless such practices are separately disclosed and any legally required opt-out mechanism is provided.

15. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, destruction, or loss.

Security controls may include access restrictions, authentication controls, logging, infrastructure security controls, encrypted communications, monitoring, and other safeguards appropriate to the nature of the information being processed.

However, no system, network, website, storage platform, or transmission mechanism can be guaranteed to be completely secure.

16. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected.

Retention periods may depend on the nature of the information, our relationship with you or your organization, contractual requirements, security requirements, legal obligations, accounting requirements, dispute resolution requirements, and applicable statutes of limitation.

Information relating to unsuccessful business inquiries or prospective customers may be retained where reasonably necessary for business records, follow-up communications, suppression lists, or to avoid repeatedly contacting individuals who have opted out.

When information is no longer reasonably required, we may delete, anonymize, or securely archive it.

17. International Data Transfers

DefenScope LLC is a United States company.

Our service providers and infrastructure may be located in the United States or other countries.

If you interact with DefenScope from outside the United States, your information may therefore be transferred to or processed in jurisdictions whose privacy laws differ from those of your country.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information.

18. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

These rights may include requesting access to information we hold about you, requesting correction of inaccurate information, requesting deletion, restricting or objecting to processing, withdrawing consent, requesting portability of certain information, and opting out of marketing communications.

You may also object to the use of your professional information for B2B marketing or prospecting.

To exercise a privacy right, contact:

[email protected]

Please include enough information for us to identify the relevant records and understand your request.

We may need to verify your identity before completing certain requests.

Applicable law may permit or require us to retain certain information despite a deletion request.

19. European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, applicable privacy laws may provide additional rights regarding your personal information.

These may include the rights of access, rectification, erasure, restriction, objection, and data portability.

Where processing is based on consent, you may withdraw that consent at any time without affecting processing that occurred before withdrawal.

Where we rely on legitimate interests for B2B prospecting or other processing, you may object to that processing.

You may also have the right to submit a complaint to the data protection authority responsible for your jurisdiction.

20. California Privacy Rights

Residents of California may have additional rights under applicable California privacy laws, including the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").

Depending on whether applicable statutory thresholds and requirements apply to DefenScope, these rights may include access to categories or specific pieces of personal information, correction, deletion, and information regarding certain disclosures of personal information.

DefenScope does not sell personal information for monetary consideration.

If DefenScope becomes subject to additional disclosure, opt-out, or other requirements under California privacy law, this Privacy Policy and our privacy mechanisms will be updated accordingly.

21. Global Privacy Control and Do Not Track

Some browsers and extensions provide privacy preference signals such as Global Privacy Control ("GPC") or Do Not Track ("DNT").

Where applicable law requires recognition of a supported privacy preference signal, we will process such signals as required.

Because there is not a universally applicable standard for all browser privacy signals, our response may depend on the signal, jurisdiction, and technologies used by our website.

22. Children's Privacy

DefenScope provides professional services to businesses and professionals.

Our website and services are not intended for children.

We do not knowingly collect personal information from children under the age of 16 through our website.

If we become aware that such information has been collected, we will take reasonable steps to delete it where required.

23. Third-Party Websites

Our website may contain links to third-party websites, platforms, services, documentation, or resources.

DefenScope is not responsible for the privacy, security, availability, or content practices of those third parties.

Your interaction with a third-party service is governed by that provider's own terms and privacy policy.

24. Business Transfers

If DefenScope is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar corporate transaction, information may be disclosed or transferred as part of that transaction.

Any successor organization may continue to process information in accordance with this Privacy Policy unless otherwise disclosed.

25. Legal and Security Disclosures

We may preserve or disclose information when we reasonably believe doing so is necessary to comply with applicable law, respond to valid legal process, enforce our agreements, investigate misconduct, prevent fraud, respond to security incidents, protect our infrastructure, or protect the rights, property, or safety of DefenScope, our customers, or others.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, service providers, or legal requirements.

When we make changes, we will update the "Last Updated" date at the top of this page.

Where required by applicable law, we may provide additional notice regarding material changes.

27. Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or want us to stop using your information for marketing or prospecting, contact:

Email: [email protected]
Website: https://defenscope.io