Privacy Policy

Overview

Peak Security provides offensive-security research, reporting, and responsible-disclosure services. This policy explains how we collect, use, disclose, retain, and protect information when you visit peaksecurity.us, work with us, or connect a Google account to our services.

Information we collect

We may collect:

• Contact, company, and scheduling information you provide.
• Engagement information such as authorized scope, reports, findings, correspondence, and remediation status.
• Basic technical information needed to operate and secure our website and services, such as IP address and request logs.
• Google account information and Google Workspace data described below when you authorize our Google integration.

Google user data

With your permission, Peak Security may access your Google account email address, Google Drive files, Google Docs, Google Sheets, Gmail messages and metadata, and Google Calendar events. We also securely store OAuth tokens needed to maintain that connection.

We use this data only to provide requested Peak Security workflows, including creating and organizing reports, maintaining operational records, reviewing relevant communications, and coordinating scheduled work. We request only the permissions needed for those functions.

We do not sell Google user data, use it for advertising or credit decisions, or use Google Workspace API data to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

How we use information

• Provide, operate, secure, and improve our services.
• Communicate about engagements, findings, and support.
• Schedule meetings and maintain business records.
• Comply with law and protect our users, company, and others.

How we share information

We do not sell personal information. We may share information with service providers that help us host, secure, schedule, and operate our services; with professional advisers; when required by law; or with your direction or consent. Providers may process information only to perform services for us and are subject to appropriate confidentiality and security obligations.

Retention and deletion

We retain information only as long as reasonably needed for the purposes described here, to meet contractual or legal obligations, and to protect our services. We delete or de-identify information when it is no longer needed, subject to limited backup and legal retention periods. You may revoke Google access from your Google Account permissions page and request deletion by contacting us.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls and encryption in transit and at rest where appropriate. No system is completely secure, but we continually work to reduce risk.

Your choices

You may ask to access, correct, or delete your personal information, subject to applicable law. You can also disconnect Google access at any time. Contact us to make a request.

Third-party services

Our website may use third-party services, such as Cal.com for scheduling. Their handling of information is governed by their own privacy policies.

Updates and contact

We may update this policy and will post the revised effective date here. Questions or privacy requests can be sent to contact@peaksecurity.us.