Privacy Policy
Effective date: {{EFFECTIVE_DATE}}
This policy explains what personal information Pacific Echelon ("Pacific Echelon", "we", "us") collects through pacificechelon.com and api.pacificechelon.com (the "Site"), why, and what choices you have.
1. What we collect
| Information | When | Why |
|---|---|---|
| Email address | When you sign in or send us an inquiry | Create and secure your account, send sign-in codes, reply to you |
| Name | From Google or Apple sign-in, or the inquiry form | Address you correctly and handle your inquiry |
| Sign-in provider and provider ID | When you use Google or Apple | Recognize your account on return visits |
| Inquiry details (company, message) | When you submit the "Interested in Echelon?" form | Respond to your request about our services |
| Cookie-consent record | When you make a cookie choice | Prove and honor your choices |
| Hashed IP address and user agent | On requests to our API | Rate limiting, abuse prevention and session security. We store a one-way hash of the IP, not the IP itself, for these purposes. |
We do not collect payment information through the Site and we do not knowingly collect sensitive personal information.
2. How we use information
- To provide sign-in and your account.
- To respond to inquiries and tell you about our services if you asked us to.
- To protect the Site against abuse, fraud and security threats.
- To keep records of consent and comply with law.
Where required, our bases are: performing a service you request, your consent (inquiries and optional cookies), our legitimate interests in security and running the Site, and legal obligations. We do not sell personal information and we do not share it for cross-context behavioral advertising.
3. Who we share it with
We share information only with service providers that help us run the Site, and as required by law.
- Cloudflare: hosting, content delivery, security and the Turnstile bot check. Cloudflare receives request data such as IP address.
- Amazon Web Services (Amazon SES): sends sign-in and transactional email.
- Slack: internal notification to our team when an inquiry is submitted. It contains the details you submitted.
- Google and Apple: if you choose to sign in with them, they authenticate you and give us your email, name and an account identifier. Their own privacy policies apply to their processing.
We may also disclose information to comply with legal process, protect rights and safety, or in a merger or sale of the business.
4. Retention
- Account data: until you delete your account or ask us to.
- Unverified email sign-ups: deleted after 24 hours.
- Sessions: expire after 30 days of inactivity.
- Inquiries: kept while we are in contact with you and for up to 24 months afterwards, then deleted.
- Consent records and hashed rate-limit data: kept for up to 24 months.
- Addresses that bounce, complain or repeatedly fail verification may be kept on a suppression list so we do not email them again.
5. Cookies
We use one essential cookie and store your consent choice in your browser. See the Cookie Policy.
6. Your rights
You can ask us to access, correct or delete your personal information, and to tell you what we hold. You can delete your account yourself from the welcome page after signing in.
California and other US state residents. Under the CCPA/CPRA and similar laws you may request to know, access, correct and delete personal information, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights. To make a request, email privacy@pacificechelon.com. We will verify your identity by email and respond within the time the law allows (generally 45 days). An authorized agent may submit a request on your behalf with proof of authorization. You may appeal a refusal by replying to our response.
We do not respond differently to browser "Do Not Track" signals, but we honor Global Privacy Control signals as an opt-out of sale or sharing, which we do not do in any case.
7. Children
The Site is for business use and is not directed to anyone under 16. We do not knowingly collect information from children. If you believe we have, contact us and we will delete it.
8. Security
We use encryption in transit, store session tokens only in hashed form, limit access to personal data, and rate-limit requests. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects you we will notify you as the law requires.
9. International users
The Site is operated in the United States and information is processed there. It is intended for users in the United States.
10. Changes
We may update this policy. We will post the new version here with a new effective date and, for material changes, notify you by email or on the Site.
11. Contact
Questions or requests: privacy@pacificechelon.com.