Privacy Policy

1. Who we are

SEVERADAO SECURITY LLC, doing business as SeveraDAO Security (“SeveraDAO,” “we,” “us,” or “our”), is a Florida limited liability company providing cybersecurity consulting and security assessment services. For personal information covered by this Policy, SeveraDAO is the responsible business or data controller unless a separate written agreement states otherwise.

Questions and privacy requests may be sent to [email protected].

2. Scope of this Policy

This Policy applies to the public website at severadao.ai, its language versions, and inquiries submitted through the website or by email. Information processed during a client security engagement may be subject to a separate services agreement, statement of work, confidentiality agreement, or data processing agreement. If such an agreement conflicts with this Policy, the signed agreement controls for that engagement.

3. Information we collect

Information you provide

• Contact information such as your name, business email address, company, and professional contact details.
• Inquiry information such as the requested assessment type, target category, timing, business need, and scope summary.
• Communications and records created when you email us, request a proposal, or continue a business discussion.

Please do not submit passwords, private keys, production data, vulnerability details, regulated data, or other sensitive information through the public inquiry form.

Information collected automatically

• Server and security logs, which may include IP address, date and time, requested URL, response status, browser or user-agent information, referring page, and information used to detect abuse.
• A first-party language preference named site_language when you use the EN/RU language switch. It is used only to remember that choice and normally expires after one year.
• Security or load-balancing cookies and request metadata used by Cloudflare to deliver and protect the website.

As of the effective date, this website does not use advertising cookies, behavioral advertising pixels, Google Analytics, or similar audience-profiling tools.

4. How we use information

We use personal information to:

• respond to inquiries and determine whether a requested engagement is a fit;
• prepare proposals, define scope, and take steps requested before entering a contract;
• communicate about services, scheduling, authorization, contracting, and invoicing;
• operate, secure, troubleshoot, and improve the website;
• detect spam, malicious activity, and unauthorized use;
• maintain business records and comply with legal obligations; and
• establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, processing may be based on your request for pre-contractual steps, performance of a contract, our legitimate interests in responding to business inquiries and securing our systems, compliance with law, or consent where specifically requested.

5. Cookies and similar technologies

SeveraDAO uses a limited functional language preference as described above. You can remove it through your browser settings. Cloudflare may use strictly necessary cookies or similar technology for security, traffic management, and abuse prevention. Because the site does not currently use advertising or non-essential analytics cookies, it does not present a marketing-cookie consent banner.

6. Service providers and disclosures

We use a limited number of service providers to operate the website and communicate with prospective clients. These may include:

• Cloudflare for content delivery, TLS, availability, and security. See the Cloudflare Privacy Policy.
• FormSubmit to transmit website form submissions to our email inbox. Form fields and related request data pass through FormSubmit. See its privacy terms.
• hosting, email, storage, and communications providers needed to operate the site and respond to requests;
• professional advisers such as lawyers, accountants, or insurers where reasonably necessary; and
• government authorities or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, systems, or users.

We may also disclose information in connection with a merger, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality protections. We do not sell personal information or share it for cross-context behavioral advertising.

7. International processing

SeveraDAO is based in the United States. Our service providers may process information in the United States and other countries where privacy laws may differ from those in your jurisdiction. Where required, we use contractual or other lawful safeguards for international transfers.

8. Retention

• Ordinary web server logs are rotated daily and are normally retained for approximately ten days, unless a security event requires longer preservation.
• Unsuccessful or preliminary business inquiries are generally retained for up to 24 months so we can respond, maintain context, and manage follow-up.
• Records related to clients, proposals, contracts, authorization, invoices, security work, disputes, or legal obligations may be retained longer as required by the applicable agreement, professional needs, or law.

We may delete information earlier when it is no longer needed and may retain limited records when necessary to document a deletion request or comply with law.

9. Security

We use administrative, technical, and organizational measures intended to protect personal information, including encrypted transport, access controls, security monitoring, and limited collection. No Internet transmission or storage method is completely secure, so absolute security cannot be guaranteed.

10. Your privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, portability, or information about how your personal information is used; to object to certain processing; or to withdraw consent where consent is the legal basis. You may also have the right to complain to a local data protection authority.

To make a request, email [email protected] with “Privacy Request” in the subject. We may need to verify your identity and authority before acting. Rights are not absolute, and lawful exceptions may apply.

11. Children

This website and our services are intended for businesses and adults. They are not directed to children under 18, and we do not knowingly collect personal information from children through this website. Contact us if you believe a child has provided information so we can review and delete it where appropriate.

12. Third-party links

The website links to independent third-party sites. Their privacy practices are governed by their own policies, and SeveraDAO is not responsible for their content or handling of information.

13. Changes to this Policy

We may update this Policy to reflect changes in the website, service providers, law, or business practices. The revised version becomes effective when posted, and the date at the top will be updated. Material changes may be highlighted on the website when appropriate.

14. Contact

SEVERADAO SECURITY LLC
Florida, United States
[email protected]