Legal / privacy
Privacy Policy
How information submitted through gkdata.io is handled. Do not send secrets or private vulnerability evidence through the public form.
GK Data LLC (“GK Data,” “we,” “us,” or “our”) operates gkdata.io. This policy explains what information this website collects, why it is used, and the choices available to visitors.
Information you provide
When you submit the contact form or email GK Data, we may receive your name, work email address, company, target or application name, requested service, message, and any other information you choose to provide. Do not send passwords, API keys, authentication tokens, private vulnerability evidence, regulated data, or other secrets through the website form. If you separately select the optional insights checkbox or request insights through the homepage newsletter form, we also receive your request to start double opt-in.
How information is used
- Review, route, and respond to service inquiries.
- Assess requested scope and determine whether GK Data can help.
- Maintain a non-marketing inquiry record to organize direct follow-up.
- Send a confirmation request and, only after confirmation, the insights you requested.
- Operate, secure, troubleshoot, and improve the website.
- Measure aggregate website use and content performance.
- Comply with legal obligations and prevent abuse, fraud, or security incidents.
Service providers
The site is operated on infrastructure managed for GK Data, with Cloudflare providing DNS, edge services, a Tunnel connection, and Turnstile. The contact form is processed on GK Data's server. Brevo may deliver transactional inquiry notifications and maintain a non-marketing inquiry record for follow-up. If you explicitly choose optional insights on the contact form or request them through the dedicated newsletter form, Brevo sends a double-opt-in confirmation email before adding you to a marketing list. PostHog may process anonymous, explicitly defined website events when analytics is enabled. Google Search Console is used to understand search indexing and performance.
Analytics and storage
At launch, PostHog is configured for explicit events only with memory-only persistence, no session replay, no autocapture, and no intentional collection of form values or URL query strings. The site does not create a persistent PostHog person profile. If these practices change, this policy and any consent mechanism will be reviewed before the change is deployed.
Retention and security
Inquiry emails and related correspondence are retained only as long as reasonably needed to respond, maintain business records, resolve disputes, enforce agreements, or meet legal obligations. Marketing subscription status and list membership are managed separately from direct inquiry follow-up; a marketing subscription begins only after email confirmation and can be withdrawn through the unsubscribe controls in those emails. The public site does not use an on-site inquiry database. Reasonable administrative and technical safeguards are applied, but no internet transmission or storage system can be guaranteed completely secure.
Sharing and disclosure
GK Data does not sell personal information. Information may be shared with service providers supporting website hosting, email delivery, analytics, security, or business operations; when required by law; or when reasonably necessary to protect GK Data, clients, visitors, or the public.
Your choices
You may ask about, correct, or request deletion of personal information associated with an inquiry, subject to legal and legitimate business-record requirements. You may decline a confirmation request or unsubscribe through any marketing email. You may also contact GK Data to raise a privacy concern.
Contact
GK Data LLC
Blaine, Minnesota, United States
[email protected]
