Privacy Policy

StateDrive LLC ("StateDrive," "we," "us," or "our") provides cybersecurity consulting and managed security services. This Privacy Policy explains what personal information we collect through statedrive.net (the "Site"), how we use and protect it, and the choices you have. It applies to the Site and to inquiries you send us; personal information processed in the course of a client engagement is governed by the applicable services agreement and any data protection addendum, which control in the event of a conflict.

1. Information we collect

Information you provide. When you submit our contact form or email us, we collect the information you choose to give us: your name, email address, company or agency name (optional), service of interest (optional), and the content of your message.

Information collected automatically. When you submit the contact form, we record the originating IP address and browser user-agent string strictly for abuse prevention, rate limiting, and security logging. General Site browsing does not require an account and is not associated with your identity by us.

What we do not collect. We do not set advertising or tracking cookies, do not operate cross-site tracking, do not use social-media pixels, and do not buy or enrich visitor data from data brokers.

2. How we use information

• To respond to your inquiry and communicate with you about the services you asked about, including proposals and scoping.
• To detect, prevent, and investigate spam, abuse, and security events affecting the Site.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

We do not sell or rent personal information, and we do not share it with third parties for their marketing. We do not use the contents of your inquiries or any client data to train artificial-intelligence models.

3. Legal bases

Where laws such as the EU/UK GDPR apply, we process personal information on the following bases: our legitimate interests in responding to inquiries you initiate and in securing our systems; your consent, where you provide information voluntarily; performance of, or steps preparatory to, a contract; and compliance with legal obligations.

4. How information is stored and protected

Inquiry data is stored in an encrypted datastore on infrastructure we control, with access restricted to StateDrive principals on a need-to-know basis. Data is encrypted in transit (TLS 1.3) and at rest. Our public services are protected by an edge network providing DDoS mitigation and web-application filtering, and our administrative surfaces sit behind identity-aware, multi-factor access controls. A copy of each inquiry is delivered to our team inbox through a transactional email delivery service acting as our service provider under contract; such providers may process the message content solely to deliver it to us and are not permitted to use it for their own purposes.

5. Service providers

We use a small number of infrastructure service providers — an edge network and security provider, a cloud hosting provider, and a transactional email delivery provider — that process limited personal information on our behalf, under contractual confidentiality and data-protection obligations, solely to provide their services to us. A current description of these categories is maintained on our Security & Trust page; named lists are available to clients under NDA.

6. Retention and deletion

Inquiry records are retained for up to 24 months from last contact, then deleted, unless (a) you ask us to delete them sooner, (b) the inquiry leads to an engagement, in which case records are retained for the term of the engagement plus any period required by law or contract, or (c) retention is required to comply with a legal obligation or to resolve a dispute. Security logs are retained on a rolling basis and then aged out.

7. Your rights and choices

Depending on where you live (including the EU, UK, California, and other U.S. states with privacy statutes), you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. We honor these requests for all visitors regardless of jurisdiction. To exercise any right, email [email protected]; we will verify the request and respond within the time required by applicable law (and in any case acknowledge within three business days). We do not discriminate against anyone for exercising a privacy right.

8. International transfers

We are a United States company and process information in the United States. If you contact us from outside the U.S., you understand that your information will be processed in the U.S., where privacy laws may differ from those in your jurisdiction.

9. Children

The Site is a business-to-business service and is not directed to children under 16. We do not knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We will post any changes to this page and update the effective date above. Material changes will be noted prominently on this page.

11. Contact

StateDrive LLC
Franklin, Tennessee, USA
Privacy contact: [email protected]