1 Information We Collect
We collect information directly from you, automatically through your device when visiting our digital properties, and from public website sources:
- Contact and Account Information: Name, email address, telephone number, and communication preferences.
- Website and Infrastructure Details: Website URL, domain name, hosting provider, and related infrastructure details you provide.
- Temporary Login Credentials: If your website’s PHP version or security posture cannot be evaluated through publicly accessible endpoints, you may choose to provide temporary, limited administrative or hosting credentials. Providing credentials is strictly voluntary.
- Publicly Accessible Technical Data: Data collected from public DNS records, HTTP response headers, visible source files, public directory structures, and related open web findings.
- Cookies and Tracking Technologies: When you visit our website or landing pages, we and our third-party partners use cookies, web beacons, and tracking pixels (such as the Nextdoor Pixel, Google, or Meta pixels) to collect technical data (IP address, browser type, device information, pages viewed) for performance analytics and ad retargeting.
2 How We Use Your Information
We use the information we collect to:
- Perform the requested PHP website vulnerability assessment.
- Deliver assessment findings and security recommendations through secure channels.
- Communicate with you regarding technical questions, follow-ups, and customer support.
- Market ScaleOut LLC services to you via direct email, manual phone calls, text messages (SMS), and online retargeting advertisements across third-party platforms.
- Measure advertising effectiveness, track marketing attribution, and improve our services.
- Prevent fraud, comply with applicable laws, and maintain business records.
Important: We never use temporary login credentials or non-public data obtained through privileged access for marketing or advertising purposes.
3 Login Credentials and Privileged Access
Where non-public access is required to determine your PHP environment or vulnerability status:
- Minimum Access Principle: We request only the level of access necessary to perform the assessment. We encourage clients to provision a temporary, isolated user account rather than sharing primary administrative credentials.
- No Third-Party Sharing: Login credentials are used exclusively by ScaleOut personnel to conduct the requested technical evaluation and are never transferred, sold, or shared with third parties.
- Credential Deletion: All credentials provided to us are deleted immediately upon completion of the assessment, or earlier upon your request. We advise you to revoke or change any shared credentials once the evaluation is finished.
4 Assessment Data and Retention Policies
We distinguish between publicly accessible data and privileged findings:
- Privileged Assessment Findings: Any scan results, configuration reports, notes, or data collected through privileged access will be delivered to you via secure means. ScaleOut will permanently delete its copies of privileged assessment findings within 30 days of completion or immediately upon your written request.
- Public Website Information: We may retain publicly observable information regarding your website (such as open headers, domain records, and general tech stack details) indefinitely for historical context, business operations, and service development.
- Lead and Contact Information: We retain contact details (name, email, phone number, website URL, hosting provider) and marketing history indefinitely to maintain our business relationship with you, manage marketing communications, and track service history, unless you request deletion or opt out of our marketing communications.
5 Cookies, Retargeting, and Advertising Pixels
We use first- and third-party cookies and tracking pixels on our website and landing pages:
- Advertising and Retargeting: Tracking pixels collect information about your interaction with our site and share it with advertising networks (e.g., Nextdoor, Google, Meta). These networks use this data to display relevant ScaleOut advertisements to you on other websites and platforms.
- Opting Out of Tracking: You can configure your browser to block or alert you about cookies. To opt out of interest-based advertising, you may visit industry opt-out portals such as the Digital Advertising Alliance or the Network Advertising Initiative.
6 Marketing Communications and Your Choices
By submitting your contact information, you agree to receive marketing communications from ScaleOut LLC:
- Email: We send promotional and informational emails. Every marketing email includes a working unsubscribe link. You may opt out at any time, and we honor opt-out requests promptly in compliance with the CAN-SPAM Act.
- Phone Calls: We may reach out via manual phone calls from our team. We do not use automated robocalls or pre-recorded telemarketing messages. You may request to be placed on our internal do-not-call list at any time.
- Text Messages (SMS): We may send transactional and promotional text messages manually to the phone number you provide. Standard message and data rates may apply. You can opt out of SMS messages at any time by replying STOP, or ask for help by replying HELP.
- Transactional Notices: Opting out of marketing communications does not affect operational or service-related messages regarding an active vulnerability assessment you requested.
7 Service Providers and Third-Party Sharing
We do not sell, rent, or trade your personal information. We may share information with reputable, vetted third-party service providers who assist us in operating our business under confidentiality standards, including:
- Cloud infrastructure and secure hosting providers.
- Secure credential management and encrypted communication tools.
- Email delivery, CRM, and calendar scheduling platforms.
- Website analytics and advertising networks (for tracking and retargeting).
- Professional advisors (legal, accounting, and compliance).
We may also disclose information where required by law, subpoena, or regulation, or to protect the safety, rights, or property of ScaleOut LLC or our clients.
8 Data Security
We employ industry-standard administrative, technical, and physical safeguards to protect your data:
- Encrypted storage of client communications and assessment documents.
- Strict access controls limiting privileged information to authorized personnel.
- Short-lived, isolated access methods during technical assessments to limit exposure risk.
- Periodic review of third-party service provider security postures.
9 Your Rights and Choices
Depending on your jurisdiction, you may have the right to access, correct, restrict the use of, or delete your personal data. To exercise any of these rights, or to request a copy of the data we hold on you, please contact us using the information in Section 13. We will verify your identity before fulfilling your request.
10 Children’s Privacy
Our services are intended for commercial and adult users. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected such data, we will take steps to delete it and may discontinue service.
11 Changes to This Privacy Policy
ScaleOut LLC may update this policy from time to time to reflect changes in our practices, services, or legal requirements. Updates will be posted on this page with a revised “Last Updated” date. Continued use of our website or services after changes go into effect constitutes acceptance of the updated terms.
12 California Consumer Privacy Act (CCPA) Disclosure
For California residents, we affirm that we do not sell or share your personal information for advertising purposes as defined by the CCPA. Personal information may be disclosed to third-party service providers for a business purpose as described in Section 7. We do not sell, rent, or trade your data.
Categories of Personal Information Collected:
- Identifiers: Name, email address, phone number, and website URL.
- Commercial Information: Data relating to products or services of interest (e.g., interest in vulnerability assessments).
- Internet Activity: Data collected via cookies, web beacons, or tracking pixels (such as the Nextdoor Pixel) for retargeting and analytics.
- Professional or Employment-Related Information: Business name and job title provided during service inquiries.
California “Do Not Sell or Share” Request: If you are a California resident, you may submit a “Do Not Sell or Share My Personal Information” request by contacting us at the address or email below. We will process such requests in accordance with your rights under California law.
13 Contact Us
If you have questions about this Privacy Policy, or wish to exercise any of your rights or submit a request regarding your personal information, you may contact us:
ScaleOut LLC
4708 Peachtree Industrial Blvd NW #262
Atlanta, GA 30329
Email: hello@scaleout.us
Website: scaleout.us