Privacy notice

Last updated October 11, 2026

Who we are

This site, securityaudit.pro, is the audit site of Elevate IT Solutions. Elevate IT Solutions decides how the information below is used. Our postal address is 117 S Lexington St, Ste 100, Harrisonville, MO 64701. Questions: security@elevateitpro.com.

What we collect

• The domain you check, and the results of the check.
• Check results belong to the domain, not to the person who ran them. Anyone who checks the same domain within 24 hours may see the same results. Results never show your name or email.
• If you ask for your report: your name, your email address and, if you give it, your business name.
• If you answer the optional questions after that: your phone number, your role, how many people work there, who handles your IT, and your industry.
• A keyed hash of your IP address (a scrambled code made with a secret key, not the address itself), used to limit abuse.
• Two small first-party cookies: a random session number and the campaign tag of the link you arrived from (for example, a QR code at an event). We use no advertising or analytics cookies.
• Which steps you took (started a check, saw your score, asked for the report, opened it, clicked to book a call or share), tied to that session number.

Why we use it

• To run the check and show you the results.
• To email your report. We'll email you the report, and someone from Elevate may reach out to talk through your results. That is about these results only, not a mailing list.
• Only if you ticked the box for it: occasional security tips and offers for small businesses. None are sent yet.
• If you ask to hear when the in-depth audit launches, we'll email you when it's ready, with any offer code that applies.
• If you ask us to help you get set up, we use your details to contact you about it.
• To keep the service working and stop abuse.

Who processes it for us

• Vercel: hosting (our servers run on Amazon Web Services through Vercel).
• Neon: database.
• Postmark: sending email.
• Cloudflare Turnstile: the bot check on our forms.
• Sentry: error reports, with personal data removed.
• Better Stack: uptime monitoring.
• Microsoft 365: email we receive when you reply to us or write to us.
• Google PageSpeed Insights: the speed test; it receives the address of the site you check.
• Google Web Risk: the unsafe-site list check; it receives the address of the site you check.
• Cal.com: booking calls; it receives the details you enter if you book a call.
• Our customer records system, run by Elevate IT Solutions on the providers above.
• Anthropic: the Claude AI assistant we use to work with those records.

These companies process information only to provide their service to us.

How long we keep it

• Checks with no email address are deleted after 30 days.
• Your details, your checks and the steps above are kept for 12 months after your last activity, or deleted sooner if you ask.
• Report links stop working after 90 days.
• A domain whose owner asked us not to check it stays on our opted-out list until the owner asks otherwise.
• A domain owner can opt back in by confirming from an email address at that domain. An opt-out also stops reports for earlier checks of that domain.
• IP addresses and email recipients in our logs are stored only as keyed hashes.
• If you ask us to stop emailing you, or to delete your details, we keep a scrambled code made from your email address (not the address itself) so we can make sure we don't email you again.

Stopping emails

Every email we send has a "Don't email me again" link. It stops report, follow-up and tips emails to that address and withdraws any consent to tips and offers you gave.

Your rights

You can ask to see, correct or delete the information we hold about you by emailing security@elevateitpro.com.

We don't sell your data

We don't sell or rent your information to anyone.