Privacy Policy

Who this covers

This policy explains what happens to information when you visit corvosec.com or use the contact form on it. The site is published by Corvo Security LLC, a Texas limited liability company. Privacy questions go to [email protected].

It covers this website only. It does not cover the PrOTect IT All podcast, The PrOTect IT All Security Brief newsletter, or any other platform this site links to. Those run on their own infrastructure under their own terms.

The short version

• The site is static. It sets no cookies of its own and runs no analytics, no tag manager, and no advertising or tracking pixels.
• The only place on this site where you can hand us information is the contact form, and that form is a third-party embed. Everything typed into it goes to our CRM.
• Loading any page pulls fonts from Google, so Google sees your IP address.
• We do not sell personal information and we do not run behavioral advertising.

What the website itself collects: nothing

corvosec.com is a static site. Pages are built ahead of time and served as plain HTML. There is no account, no login, no cart, and no server-side code that processes your visit. We do not run Google Analytics, Google Tag Manager, a Meta pixel, session recording, heatmaps, or any comparable script. We set no cookies of our own.

Hosting

The site is hosted on Netlify. Like any web host, Netlify processes standard request data in order to serve pages and defend against abuse. That typically includes your IP address, browser user agent, the URL requested, and a timestamp. That processing belongs to Netlify under Netlify's own privacy terms. We do not build visitor profiles from it.

Fonts

Every page loads three typefaces (Bebas Neue, DM Sans, and Share Tech Mono) from fonts.googleapis.com and fonts.gstatic.com. Your browser makes that request directly to Google, which means Google receives your IP address, your user agent, and the fact that a page on this domain was loaded. Nothing from that request comes back to us. A content blocker will stop it, and the site falls back to system fonts.

The contact form

The form on corvosec.com/contact is an embedded GoHighLevel form. It is not hosted on corvosec.com. It loads in an iframe from api.blackorchid.ai and pulls supporting scripts from GoHighLevel's CDN at stcdn.leadconnectorhq.com. Those domains can set their own cookies or browser storage under their own origins, outside our control.

What you can enter

• First name
• Last name
• Email address (the only required field)
• Phone number
• Company or organization
• A free-text message describing what you need
• A checkbox consenting to SMS notifications, alerts, and news
• A checkbox consenting to occasional marketing messages

What is captured alongside it

GoHighLevel records technical and attribution data with each submission, not just what you typed. That includes your IP address, browser user agent, the referring URL that brought you to the form, the page URL the form was submitted from, and a session identifier used to tie the submission to your browsing session. You are not asked about any of that, so we are telling you here.

Where it goes

Submissions land in a Corvo Security sub-account inside a GoHighLevel agency account operated by Black Orchid, an affiliated marketing company. GoHighLevel processes the data on our behalf as a platform provider. Administrators of that agency account can technically reach the records. We do not hand your submission to anyone else.

What we do with it

We use it to answer you, to scope potential work, and to keep a record of the conversation. If you ticked the consent boxes, we may also send SMS or marketing messages. You can stop those at any time by replying STOP to a message or by emailing [email protected]. Withdrawing marketing consent does not stop us from replying to an inquiry you sent us.

Do not send sensitive material through the form

It is a first-contact channel, not a secure one. Keep credentials, network diagrams, vulnerability detail, and live incident specifics out of it. For an active incident, email [email protected] with INCIDENT in the subject line and we will set up an appropriate channel.

Email

If you email us directly, we receive whatever you send and it sits in our mail system. We keep it as long as we need it for the conversation and our business records.

The newsletter

This site does not collect newsletter signups. Every subscribe button here is an outbound link to newsletter.protectitallpod.com, which runs on beehiiv. If you subscribe, you do it there, and beehiiv's terms plus the newsletter's own policy govern that data, not this page. corvosec.com transmits nothing about you when you click, beyond the ordinary referrer your browser sends to any site you follow a link to.

Podcast and newsletter listings on this site

The episode and article lists on /podcast and /insights come from public RSS feeds (Castos for the podcast, beehiiv for the newsletter). Those feeds are fetched by our build server when the site is built, not by your browser when you read the page. Reading those pages does not connect you to Castos or beehiiv. Clicking through to an episode or an article does.

Outbound links

This site links to third parties including protectitallpod.com, newsletter.protectitallpod.com, Apple Podcasts, Spotify, and YouTube. Once you follow a link, that service's own privacy policy applies and this one stops.

What we do not do

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We run no ad networks, no retargeting, and no profiling on this site. This site is not directed at children, and we do not knowingly collect information from anyone under 13.

How long we keep things

Contact form submissions and emails stay in our CRM and mail systems while we are in contact, and afterward as part of our business records. Ask us to delete yours and we will, unless we are required to keep it.

Your choices

Whatever state or country you are in, you can email [email protected] and ask us to tell you what we hold about you, correct it, delete it, or stop sending you marketing. We will respond within a reasonable time and may need to confirm who you are first. Residents of states with consumer privacy statutes, Texas included, may have additional rights, including the right to appeal if we turn a request down. Say so in your request and we will handle it on those terms.

Security

We take reasonable measures to protect what we hold, and for anything stored on the platforms named above we depend on their security as well as ours. No transmission or storage method is perfectly secure. That is exactly why we ask you not to put sensitive material into a web form.

Changes

We update this page when the site changes. The "Last updated" date at the top is the version marker, and a revision takes effect when it is posted.

Contact

Corvo Security LLC, Texas. [email protected]. See also our Terms of Service.