Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Contact information (name, email address, phone number)
• Company information
• Communication preferences
• Contact and engagement details submitted through our intake forms

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our services
• Communicate with you about our services
• Send you technical notices and security updates
• Respond to your comments and questions
• Process and manage your engagements

3. Information Sharing

We do not sell, trade, or otherwise transfer your information to third parties without your consent, except as described in this policy or as required by law. We may share information with service providers who assist in our operations, subject to confidentiality obligations.

4. Data Security

We implement appropriate technical and organizational security measures to protect your information. This includes encryption of data in transit and at rest, access controls, and secure artifact handling procedures. However, no security system is impenetrable and we cannot guarantee the security of our systems 100%.

5. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Opt out of marketing communications

To exercise these rights, contact us at privacy@tkoresearch.com.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Artifacts and engagement data are retained according to engagement agreements and applicable legal requirements.

7. Cookies & Analytics

With your permission, we use Google Analytics for website usage, Datadog browser diagnostics for reliability and performance, and Vercel Web Analytics and Speed Insights for usage and page performance. Optional telemetry is disabled until you accept it. It can include:

• Pages you visit on this site
• Referring pages, with URL query values and fragments removed or the telemetry omitted
• General usage events, such as opening a resource or using a tool
• Browser and device information, page timing, resource requests and technical errors

Our tools process system selections and generated report text in your browser. Tool usage events do not include your Blast-Radius Mapper, OWASP Explorer or Go/No-Go Assessment selections or calculated results. Personal intake text is not sent as analytics event data. Our telemetry code removes query values and fragments from page, referrer and resource URLs. Datadog session replay and automatic interaction capture are disabled.

The analytics banner controls these optional services. You can decline or change your choice below. Declining stops optional collection; it does not delete data already received by a provider. Contact privacy@tkoresearch.com about deletion requests. See our Cookie Policy for browser storage details.

Website hosting, submitted forms and server-side security logging operate independently of the analytics choice. Dedicated security canary page and reference requests are recorded with random visit IDs, timestamps, IP addresses, user agents and selected request metadata.

8. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Pennsylvania, United States. Any disputes arising from this policy or our privacy practices shall be resolved in the state or federal courts located in Philadelphia County, Pennsylvania.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@tkoresearch.com
• Phone: +1 (445) 895-1790
• Location: Alexandria, VA / Washington, DC metro