Last Updated: February 2005

Our Commitment to Your Privacy & Security

Protecting the privacy, integrity, and availability of the information you provide to us is a number one priority at Remote Vulnerability Assessment Solutions, Inc. otherwise known as RVASI.  Please read this privacy statement to learn about how we use and protect the information you provide.

This Privacy Statement governs the information you provide to us via this site.

Overview

The primary purpose of this statement is to disclose how RVASI helps to protect the privacy of personally identifiable information you voluntarily provide while visiting and/or using our Web Site (www.rvasi.com).  This statement does not apply to all other online or offline RVASI sites, services, or offerings.  By visiting and/or using the RVASI Web Site, you consent to all the data practices described in this statement. If you do not agree with the contents of this statement please do not use or access our Site.

By agreeing to our Privacy Statement and Terms of Use Agreement, you expressly consent to our use and disclosure of your information in accordance with this Privacy Statement. This Privacy Statement is incorporated into and subject to the terms of the RVASI Terms of Use Agreement.

Parties:  In this Agreement ("Agreement"), "we", "us" and "our" refers to Remote Vulnerability Assessment Solutions, Inc. otherwise known as RVASI, "you" and "your" refers to the individuals or entities accessing this website, and "Site" refers to our Web Site (www.rvasi.com).    

Table of Contents

I.      Children Visiting Our Site

Children (individuals under the age of 18) are not eligible to use the services we offer on our Site and are asked not to submit any personally identifiable information to us. If you are under the age of 18, you may only use this Site to view its contents.

II.      Information We Collect

General: We do not collect personally identifiable information unless you choose to provide it to us. RVASI only collects personally identifiable information via our Site that we consider necessary for fulfilling your request. The personally identifiable information we collect includes: your first and last name, job title/position, company/organization you are employed with, company/organization address, business phone/fax numbers, and email address.  

Submitting voluntary personally identifiable information to us constitutes your consent to the use of the information provided for the stated purpose(es). When a Site user clicks the "Submit" button on any of the Web forms found on our site they are indicating voluntary consent to use of the information they submit for the stated purpose.

In general, you can browse our Site without telling us who you are or revealing any personally identifiable information. Once you give us your personally identifiable information, you are no longer anonymous to us. If you choose to request information about our services or solutions offered, we require you to provide basic contact information and some specifics about the nature of your request. The forms on the Site indicate which fields are required and which are optional; you always have the option not to provide any information by choosing not to provide information via our forms.

Anonymous: Our Site uses various automatic tracking tools that may collect and retain certain information about your behavior while visiting on our Site. We use this information, which does not identify individual users, to analyze trends, to administer the site, to track users' movements around the site and to gather demographic information about our user base as a whole. This information includes your internet protocol (IP) address, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data.  We do not automatically link this collected data to any personally identifiable information. 

III.      Other Information Collectors

You also may decide to send us personally identifying information, for example, your first and last name, mailing address, and similar information in the form of an electronic mail message requesting that information be mailed to you. Information collected in this manner is used solely for responding to requests for information or records. 

If you choose to send us other types of correspondence, such as letters, a resume, an application for employment, or if other users or third parties send us correspondence about your activities, postings, or replies on the Site, we may collect such information into a file specific about you.

If you choose to post or reply to messages in the RVASI Information Security Discussion Forum area of our Site, we will collect and retain the information you provide. This information will be handled in accordance with stated Forum Registration Agreement Terms and as permitted by law.

IV.      Our Use of Your Information

We may use the personally identifiable information you provide in the following ways:

§         For the purpose of gathering general contact information in order to facilitate your request

§         To gain a general understanding of which RVASI services or solutions you are interested in

§         To begin the pre-assessment and scoping process based on the information you have requested

§         To establish a confidential client file containing the information you initially provide and subsequent information

The collection of this personally identifying information via forms on our Site allows us to begin the process of formulating and determining which services and solutions we offer that will most likely meet your requested needs.

V.      Our Disclosure of Your Information

As a matter of policy, we will not sell or rent your personally identifiable information, divulge lists of our clients' personally identifiable information to third parties, or use your personally identifiable information for commercial marketing purposes without your explicit consent.

RVASI fully cooperates with law enforcement inquiries when necessary, as well as other third parties officially designated to enforce laws. In view of that, verified requests made by law enforcement or other government officials relating to a criminal investigation or alleged illegal activity can result in the disclosure of your: name, title, profession, company/organization employed with, city, state/province, country, contact numbers, and email address provided you explicitly authorize us to do so.  Without limiting the above, in an effort to respect your privacy, we will not otherwise disclose your personal identifying information to law enforcement or other government officials without a subpoena, court order or substantially similar legal procedure.  However, if we firmly believe in good faith that the disclosure of your information is necessary to (1) prevent imminent physical harm or financial loss or (2) report suspected illegal activity, we will make an exception.

Due to the existing regulatory environment, we cannot ensure that all of your private communications and other personal information will never be disclosed in ways not otherwise described in this Privacy Statement. By way of example (without limiting the foregoing), third parties may unlawfully intercept or access transmissions or private communications. Therefore, although we use industry standard practices like Pretty Good Privacy (PGP) encrypted E-mail to protect the privacy of your confidential information during transmission when and where possible, we do not promise, and you should not expect, that your personal information or private communications will always remain private.

VI.      Retention of Your Information

We destroy the information collected from you when the purpose for which it was provided has been fulfilled or at the conclusion of our business relationship unless otherwise mandated by legal or regulatory requirements.

VII.      Updating Your Information

RVASI understands the importance of maintaining current and accurate client records. We request that you help us keep your records accurate by contacting us at 402-350-8752, if any information provided needs to be updated or corrected.

VIII.      Use of Cookies

We use session and persistent data collection devices such as "Cookies" on certain pages of our Site to help maintain session state and to recall certain requested login behavior/credentials. Doing so, allows you to enter your password less frequently during new or established sessions and to opt to be automatically logged in upon your next visit. 

Generally speaking, "Cookies" are small files placed on your hard drive that assist us in providing the aforementioned Site services and/or features. Most of the cookies used by pages within our Site are "session cookies," meaning that they are automatically deleted from your hard drive at the end of a session. However, some cookies used on our Site are persistent cookies and can remain on your hard drive for an extended period of time. You can remove any persistent cookies set by our Site by following the directions provided in your Internet browser's "help" file. You are always free to decline our cookies if your browser permits but, you may not be able to utilize certain features or functionality on the Site and you may be required to reenter your password more frequently during a session visit.

You may also encounter "Cookies" or other similar devices when following a link to our online store hosted by CaféPress, third party links on our Resources page, or other links on our Site to third party advertisers. We do not control the use of cookies or other similar devices by these third parties and it is important for you to read the Privacy Statement for each third party site you visit to ensure that you fully understand how the site may use cookies.
 

IX.      Links to Other Sites

Our Site contains links to other Web sites. RVASI makes every effort to periodically review the appropriateness and soundness of linked sites however, we are not responsible for the content, accuracy or opinions expressed in such Web sites. Inclusion of any linked Web site on our Site does not imply approval or endorsement of the linked Web site by us. If you decide to leave our Site and access any third party linked sites, you do so at your own risk.

We strongly encourage you to read the Privacy and Security Statements and/or policies of each linked site visited especially before providing any type of personally identifiable information. 

X.      Business Transitions

In the event RVASI goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personally identifiable information will likely be among the assets transferred.  You will be notified via email about this change and a prominent notice will be displayed on our Web site for 30 days announcing any such change in ownership or control of your information.

XI.      Security and Storage of Your Information

RVASI is committed to protecting the security of your information with the highest standards of information security. We use a variety of security technologies and procedures to help protect your confidential information from unauthorized access, use, or disclosure. We also restrict access to your information to employees at RVASI with special privileges and a need to know in order to provide services or solutions to you. We ultimately store any and all information you provide on computer systems with limited access, which are located in controlled facilities, and not connected to the Internet.  Furthermore, the team at RVASI uses strong encryption technologies like PGP encryption to protect the sensitive/confidential data you provide to us while it is in transit and at rest. To learn more about how you can provide us your information via a Secure Channel (PGP encrypted E-mail) click here.

XII.      Changes to This Privacy & Security Statement

RVASI will periodically update this Privacy Statement as deemed necessary.  When this occurs, the "Last Updated" date displayed at both the top and bottom of this Statement will be changed to reflect the latest revision date.  We will also post a notification of this change to our homepage and other places throughout the Site we deem appropriate so that you are aware of the change.  RVASI will then obtain your opt-in consent for any updates to this Privacy Statement that materially broaden the sharing or use of your information in ways not previously disclosed at the time of collection.

XIII.      Contacting Us

If you have any questions about this privacy statement, RVASI's information handling practices, or your dealings with RVASI, you can contact us via email at privacy@rvasi.com, call 402-350-8752 Monday through Friday between the hours of 6am and 11pm CST/DST, or write to us at RVASI, P.O. Box 541025, Omaha, NE 68154.

Last Updated: February 2005