Privacy Policy

Who we are and what this policy covers

Inscribe Technologies (“Inscribe,” “we,” “us,” or “our”) is an information technology (IT) and cybersecurity services provider based in Omaha, Nebraska. This Privacy Policy explains how we collect, use, share and protect personal information when you visit inscribe.biz (the “Site”), complete our discovery intake form, or otherwise communicate with us about our services.

This policy does not govern information we access or process inside a client’s own systems while delivering contracted services, such as files, email, user accounts, devices or logs we touch while supporting your environment. That information belongs to our client and is handled under the confidentiality, security and data-handling terms of our written service agreement with that client. If you are an employee or customer of one of our clients, please contact that organization with privacy questions about its data.

Our customer portal at portal.inscribe.biz may be operated on a third-party platform and may present its own terms or notices, which apply alongside this policy.

Information we collect

Information you give us

When you complete our discovery intake form, request a fit call, email us or call us, you may provide:

• Contact details: your name, job title, business email address and phone number, and your preferred follow-up method.
• Company details: company name, a description of what the business does, number of employees and devices, office locations and remote staff, five-year outlook, business hours and target start date.
• IT and security environment: the platforms and cloud services you use, computer types, compliance standards that apply to you, whether multi-factor authentication is enforced, security tools in place, cyber insurance status and requirements, backup practices, connected systems such as cameras or internet providers, critical systems and tolerable downtime.
• Support history and preferences: how often technical issues occur, recent cybersecurity incidents or outages and a description of what happened, who supports you today, planned IT projects, billing and service-model preferences, budget range and decision timeline.
• Communications: the content of emails, calls, messages and meeting notes you exchange with us.

Some of this information, such as security gaps or past incidents, is sensitive to your business. We treat it as confidential. Please do not send passwords, access keys, payment card numbers or health, financial or government identification numbers through the Site or by email. If we need credentials to deliver a service, we will arrange a secure method.

Information collected automatically

• Server logs: like most websites, our hosting provider records technical details of each request, such as IP address, browser type, the page requested, referring page and the date and time. We use these logs to operate and secure the Site.
• Bot and abuse protection: our intake form uses Cloudflare Turnstile, which evaluates signals from your browser and device to tell people from automated bots. We also apply rate limits based on IP address.
• Fonts: the Site loads the Poppins typeface from Google Fonts, so your browser connects to Google, which receives your IP address and browser information.

We do not use advertising cookies, analytics trackers, tracking pixels or session-replay tools on the Site. The Site itself does not set cookies.

Information from other sources

We may receive business contact information from referral partners, mutual contacts, event organizers or publicly available business sources, such as your company’s website or professional profiles.

How we use information

We use personal information to:

• Respond to your inquiries and follow up using your preferred method.
• Evaluate your needs, size support coverage, recommend a service model and prepare proposals and quotes.
• Deliver, manage and bill for services if you become a client, including account administration and customer portal access.
• Protect the Site, our systems and our clients, including detecting and preventing spam, fraud, abuse and security incidents.
• Maintain business records, meet legal, regulatory, tax and insurance obligations, and enforce our agreements.
• Send occasional service updates or security advisories relevant to your business. You can opt out of non-essential messages at any time.
• Improve our services and the Site.

We do not use your information for automated decisions that produce legal or similarly significant effects about you, and we do not use intake information to train artificial intelligence models.

How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as described below:

Our service providers may use personal information only to provide services to us and must protect it. We may also disclose information:

• To professional advisers, such as lawyers, accountants and insurers, under duties of confidentiality.
• When required by law, subpoena or court order, or to protect the rights, property or safety of Inscribe, our clients or others.
• In connection with a merger, acquisition, financing or sale of all or part of our business, subject to this policy.
• With your direction or consent.

Cookies, tracking and browser signals

The Site does not use cookies for analytics or advertising and does not track you across other websites. Cloudflare Turnstile and Google Fonts process technical data as described above to provide their services; their use of that data is described in their own privacy notices.

Because we do not sell or share personal information for targeted advertising, there is nothing to opt out of through browser signals. We nonetheless honor Global Privacy Control (GPC) signals as a request not to sell or share your personal information.

Where information is stored

We are based in the United States, and we store and process personal information in the United States. Our client work stays in the United States. Some of our service providers may process limited technical data, such as bot-protection signals, in other countries under their own safeguards.

The Site is intended for businesses in the United States. If you contact us from elsewhere, your information will be transferred to and processed in the United States.

How long we keep information

We keep personal information only as long as needed for the purposes in this policy:

• Intake submissions and inquiries that do not become an engagement: generally up to three years after our last contact, so we can follow up and keep accurate records, unless you ask us to delete them sooner.
• Client records: for the term of our engagement and afterward as required by our service agreement, law, tax or insurance requirements, or to resolve disputes.
• Server and security logs: for a limited period set by our hosting and security providers, typically weeks to months.

When information is no longer needed, we delete it or de-identify it.

How we protect information

As a cybersecurity provider, we hold ourselves to the practices we recommend to clients. Safeguards include encryption in transit (HTTPS) on the Site, multi-factor authentication and least-privilege access on our business accounts, restricted access to intake submissions, keeping secret keys out of public web files, and bot protection and rate limits on our forms.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law, including Nebraska’s data breach notification law.

Your choices and privacy rights

You may ask us to:

• Confirm whether we process your personal information and give you access to a copy of it.
• Correct inaccurate information.
• Delete your information, subject to legal and contractual exceptions.
• Stop sending you non-essential emails. Every such email includes a way to opt out, or you can email us.

Depending on where you live, state privacy laws, such as the Nebraska Data Privacy Act and similar laws in other states, may give you additional rights, including data portability and the right to opt out of the sale of personal information, targeted advertising or profiling. Some of these laws do not apply to every business or to information collected in a business-to-business context. We honor reasonable requests regardless.

How to make a request: email [email protected] with the subject line “Privacy Request,” or call 402-989-0999. We will verify your identity using information we already hold, and we will respond within 45 days. If we need more time, we will tell you why. You may use an authorized agent, who must provide proof of authorization.

Appeals: if we decline your request, you may appeal by replying to our decision with the subject line “Privacy Appeal.” We will respond to appeals within 60 days. If you are not satisfied, you may contact your state attorney general.

We will not discriminate against you for exercising your privacy rights.

Children's privacy

The Site and our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Links to other websites

The Site links to other websites and services, such as our customer portal and the websites of vendors we mention. Their privacy practices are governed by their own policies, and we encourage you to review them.

Changes to this policy

We may update this Privacy Policy as our services, providers or legal requirements change. We will post the updated policy on this page and change the “Last updated” date above. If we make material changes, we will provide additional notice, such as a notice on the Site or an email to clients.

Contact us

Questions or requests about this Privacy Policy or our privacy practices: