Book a Security Consultation
Legal

Privacy Policy

Effective date: October 4, 2026

1. Who we are and what this policy covers

Cloudskope, LLC ("Cloudskope," "we," "us") is a cyber risk advisory and engineering firm based in Dallas, Texas. This policy explains how we collect, use and share personal information when you visit cloudskope.com and its subdomains (the "Site"), book a call with us, or receive communications from us.

This policy does not cover information we handle for clients during an engagement. Client data, including anything we see during assessments, forensic work or due diligence, is governed by our engagement agreements and non-disclosure terms, and is never used for marketing.

2. Information we collect

Information you give us. When you book a call, submit a form or email us, we collect what you provide: typically your name, business email, phone number, company, job title and the reason for your inquiry.

Information collected automatically. When you use the Site, we and our service providers collect technical and usage information through cookies, pixels and similar technologies. This includes IP address, browser and device type, approximate location derived from IP address, referring page, pages viewed, time on page, clicks, scrolling and mouse movement, and the date and time of your visit.

Information from partners. Visitor identification providers may associate your visit with information they or others already hold about you, such as your name, business email, job title, employer and professional profile. Company-level providers identify the organization associated with your network, not you personally. Section 3 explains this in detail.

3. Website visitor identification

We use visitor identification services to understand which organizations and professionals are interested in our work.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.

Person-level identification applies to visitors in the United States only. For visitors elsewhere, we receive company-level information at most. You can also ask us directly to delete any record created from your visit (Section 6).

4. Cookies and tracking technologies

The Site uses the following technologies. Each provider processes data under its own privacy policy.

TechnologyProviderPurpose
Google Analytics and Google Tag ManagerGoogleSite traffic measurement and tag management
Microsoft ClarityMicrosoftHeatmaps and session replay (clicks, scrolls, mouse movement) to improve the Site
Cloudflare Web AnalyticsCloudflarePrivacy-focused traffic and performance measurement
LeadfeederDealfrontCompany-level identification of visiting organizations
LinkedIn Insight TagLinkedInMeasures visits and form requests that come from our LinkedIn ads, and builds ad audiences from site visits. LinkedIn sets its own cookies under its privacy and cookie policies.
RB2B and its data partnersRB2BPerson-level identification of US visitors (Section 3)
LeadConnectorGoHighLevelBooking calendar, forms and CRM, including which page or campaign brought a visitor to the Site
WebflowWebflowSite hosting, security and performance
Email security check scan logCloudflareRecords the domain entered in our email security check and the time of the check, kept for about 13 months so we can see how the tool is used. No IP address or other visitor data is stored with it.
Dark web scan lookupsHave I Been Pwned, Hudson Rock, Shodan and Ransomware.liveWhen you run the dark web scan, our server checks the email address and company domain you enter against breach records, infostealer malware logs and internet-scan data held by these providers. Ransomware.live receives only the company domain, to check it against ransomware leak site listings. Each provider handles the lookup under its own privacy policy.
Dark web scan reportWebflow, Zapier and LeadConnector (GoHighLevel)When you run the dark web scan, your work email and the scan results are sent through our site form to our CRM so we can follow up. If you ask for the full report and confirm you are authorized to request it, the report is emailed only to that address and kept with the contact record under the retention terms in this policy. It is never sent to anyone else at your company.
CPA WISP proof check
Have I Been Pwned, Hudson Rock, Shodan, Ransomware.live, Cloudflare and Google public DNS; Webflow, Zapier and LeadConnector (GoHighLevel)
The check's scans run the work email and company domain you enter through the same lookups as the dark web scan, and read the domain's public email records (SPF and DMARC) through Cloudflare and Google public DNS. Your answers stay in your browser unless you ask for the proof pack. If you do, your answers, a scan summary and your contact details are sent through our site form to our CRM so we can send it and follow up.
PCI SAQ finder
Webflow, Zapier and LeadConnector (GoHighLevel)
The finder runs in your browser and makes no outside lookups. Your answers stay in your browser unless you ask for the summary. If you do, your answers, your likely SAQ and your contact details are sent through our site form to our CRM so we can send it and follow up.
Cyber insurance application check
Webflow, Zapier and LeadConnector (GoHighLevel)
Your answers stay in your browser unless you ask for the answer sheet. If you do, your answers, score and contact details are sent through our site form to our CRM so we can send it and follow up. No scan is run.

Managing cookies. Most browsers let you block or delete cookies in their settings. Blocking cookies may affect how parts of the Site work. You can opt out of Google Analytics with Google's browser add-on.

Do Not Track. The Site does not currently respond to browser Do Not Track signals.

5. How we use and share information

How we use it. We use personal information to:

  • respond to inquiries and schedule and hold advisory calls;
  • understand which organizations and professionals are interested in our services;
  • send business communications and marketing, which you can unsubscribe from at any time;
  • measure and improve the Site and our content;
  • protect the Site, detect abuse and meet legal obligations.

Who we share it with. We share personal information only with:

  • Service providers that run our Site, analytics, visitor identification, CRM, scheduling, email and workflow automation, under contracts that limit their use of it;
  • Professional advisers such as lawyers and accountants, under duties of confidentiality;
  • Authorities, when required by law or to protect our rights, clients or the public;
  • A successor business, if Cloudskope is involved in a merger, acquisition or sale of assets.

We do not sell personal information in exchange for money. Some state privacy laws treat certain identification and advertising technologies as a "sale" or "sharing" of personal information. You can opt out of these as described in Section 6.

6. Your choices and privacy rights

Opt-outs available to everyone.

Your rights. Depending on where you live, you may have the right to:

  • know what personal information we hold about you and get a copy;
  • correct inaccurate information;
  • delete your information;
  • opt out of targeted advertising, and of any "sale" or "sharing" of your information;
  • appeal our decision on your request.

To make a request, email privacy@cloudskope.com with the subject "Privacy Request". We may need to verify your identity before acting. We respond within 45 days, and will not treat you differently for exercising these rights. If we decline your request, you may appeal by replying to our decision.

7. Retention, security and international visitors

Retention. We keep personal information only as long as we need it for the purposes above or as the law requires. Marketing and visitor-identification records are deleted or anonymized after 24 months without interaction, or sooner on request.

Security. We protect personal information with administrative, technical and physical safeguards appropriate to its sensitivity. This includes access controls, multi-factor authentication and encryption in transit. No system is completely secure, and we cannot guarantee absolute security.

International visitors. Cloudskope is based in the United States, and our service providers process data in the United States and other countries. If you visit from outside the U.S., your information will be transferred to and processed in the U.S. Where the GDPR or UK GDPR applies, we rely on our legitimate interests in understanding and responding to business interest in our services, and on your consent where the law requires it.

Children. The Site is for business professionals. It is not directed to anyone under 16, and we do not knowingly collect their personal information.

8. Changes and contact

Changes. We may update this policy as our practices or the law change. We will post the new version here with a new effective date. For material changes, we will provide additional notice on the Site.

Contact us.