Vulcan Rampart ("we," "us," or "our") respects your privacy. This policy explains what information we collect through this website and our services, how we use it, and the choices you have. If anything here is unclear, contact us at contact@vulcanrampart.com.
1. Information We Collect
Information you provide directly
- Contact form submissions: your name, email address, and message text when you use forms on this site.
- Account information: for customers of the Vulcan Rampart platform, this includes username, email address, role, and optional profile fields.
- Multi-factor authentication (MFA) enrollment: a phone number you choose to register for SMS-based MFA codes, or public-key credentials for hardware security keys (WebAuthn).
- Billing information: when applicable, contact and billing details required to invoice and receive payment. Payment card numbers are handled by our payment processor and never stored on our systems.
Information collected automatically
- Log data: IP address, browser type and version, pages visited, timestamps, and referring URL. Used for security, abuse prevention, and diagnostics.
- Cookies and similar technologies: session cookies that keep you logged in, and CSRF tokens. We do not use third-party advertising or tracking cookies on this website.
2. How We Use Your Information
- To deliver, operate, and secure the Vulcan Rampart platform and this website.
- To send you the SMS one-time passcodes required for multi-factor authentication when you have enrolled a phone number.
- To respond to inquiries you send us through contact forms or email.
- To detect, investigate, and prevent security incidents, fraud, and abuse.
- To comply with legal obligations and enforce our terms.
We do not sell your personal information. We do not use it for advertising or profiling.
3. Service Providers and Third Parties
We share the minimum information required with a small set of vetted service providers who process it on our behalf:
- Amazon Web Services (AWS): hosting infrastructure and SMS delivery (via Amazon SNS). AWS receives the phone number and transactional message body for any SMS we send you.
- Payment processor: for billing, if applicable.
- Email delivery provider: for transactional messages you have opted into.
Each of these providers is contractually obligated to process your information only for the purposes we specify and to maintain appropriate security.
We may also disclose information when legally required (subpoena, court order) or to protect the rights, property, or safety of Vulcan Rampart, our customers, or the public.
4. SMS Program Terms
If you enroll a phone number for SMS multi-factor authentication:
- You will receive transactional SMS containing a 6-digit verification code when you log in.
- Message frequency depends on how often you log in. Typical volume is fewer than 10 messages per user per week.
- Message and data rates may apply. We do not charge you for these messages; check with your carrier for any applicable rates.
- You can opt out at any time by removing the phone number from your account profile, or by replying STOP to any SMS from us.
- For help, reply HELP to any SMS, or email support@vulcanrampart.com.
5. Data Retention
We keep information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. Specific retention windows:
- Account records: for the life of the account, plus 90 days after deletion.
- Server logs and MFA challenge records: 90 days.
- Audit logs (for security investigation): up to 3 years, depending on customer configuration and legal requirements.
- Contact form messages: 24 months.
6. Security
We use industry-standard measures to protect your information, including encryption in transit (TLS), password hashing with Argon2id, hardware-backed multi-factor authentication support (WebAuthn/FIDO2), access controls, and audit logging. No system is perfectly secure; we recommend enabling MFA and using unique, strong passwords for your account.
7. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your information, subject to legal retention obligations.
- Object to or restrict certain processing.
- Data portability — receive your information in a machine-readable format.
- Withdraw consent for processing based on consent (such as SMS enrollment) at any time.
To exercise any of these rights, email contact@vulcanrampart.com. We will respond within the timeframes required by applicable law.
Residents of California (CCPA/CPRA)
You have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of any “sale” or “sharing” of personal information — we do neither. We will not discriminate against you for exercising these rights.
Residents of the EEA / UK (GDPR)
The legal bases we rely on to process personal information are: performance of a contract (delivering the services you have signed up for), consent (SMS enrollment, marketing communications if any), legitimate interests (security, fraud prevention, product improvement), and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.
8. Children
Vulcan Rampart is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
9. International Data Transfers
Our infrastructure is primarily located in the United States (AWS us-east-2 region). If you access our services from outside the United States, your information will be transferred to and processed in the United States. When required, we use appropriate safeguards such as Standard Contractual Clauses.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on this page with an updated effective date. Continued use of the site after changes indicates acceptance of the revised policy.
11. Contact Us
Questions about this policy, requests to exercise your rights, or concerns about our data practices:
- General inquiries: contact@vulcanrampart.com
- Support: support@vulcanrampart.com