Privacy Policy

Chlamys Piste Inc. (CPI)  |  techinpeace.com

Effective date: September 24, 2026    Last updated: September 24, 2026

1.Our privacy promise

We help people protect their data. We hold ourselves to the same standard.

We collect the least information we need to run our domain scanner, send our newsletter, and follow up with you by phone or text when you ask us to. We do not sell your personal information. We do not rent it. We do not use it for cross-site behavioral advertising. We do not share your phone number with anyone for their own marketing.

This policy explains what we collect, why, how long we keep it, who we share it with, and the choices you have.

2.Who we are

Chlamys Piste Inc. ("CPI," "we," "us") is a security and AI consulting firm based in New York, New York. We operate techinpeace.com and related pages, forms, and tools (together, the "Services").

This policy covers three Services:

• The Domain Scanner: a free tool that checks the public security setup of a website or email domain.
• The Newsletter: our email updates on security, privacy, and trust.
• Phone and SMS follow-up: calls and text messages we send only after you give us permission.

It does not cover paid client engagements. Those are governed by your service agreement and any data processing terms signed with it.

3.Information we collect

3.1 Domain Scanner

The scanner reads public records that anyone on the internet can see. It does not log in to your systems, test passwords, or try to break anything.

3.2 Newsletter

3.3 Phone and SMS follow-up

4.How we use information

We use your information only to:

• Run scans and deliver reports you request.
• Send the newsletter you signed up for.
• Call or text you when you have agreed to it.
• Answer your questions and schedule consultations you ask for.
• Protect the Services from spam, fraud, and abuse.
• Fix errors and improve the Services, using aggregated or de-identified data where we can.
• Meet legal obligations and enforce our terms.

We may use combined, de-identified scan statistics (for example, "40% of scanned domains lack DMARC") in articles and reports. These statistics never name you, your organization, or your domain.

5.What we do not do

• We do not sell or rent your personal information.
• We do not use your data for cross-context behavioral advertising.
• We do not publish or share your individual scan results.
• We do not share your phone number or SMS consent with third parties or affiliates for their marketing.
• We do not add you to the newsletter just because you ran a scan, unless you check the box to subscribe.
• We do not use your personal information or scan results to train AI models without your separate, clear permission.
• We do not collect sensitive data such as health, financial account, or government ID information through these Services.

6.Text messages and calls

6.1 Consent

We send marketing texts and make marketing calls only after you give prior express written consent, for example by checking an unchecked box and submitting a form with your number. Consent is not required to buy anything from us.

Sample consent language on our forms:

6.2 Your controls

• Stop texts: reply STOP, CANCEL, END, QUIT, or UNSUBSCRIBE. You will get one confirmation text and nothing after that.
• Get help: reply HELP or email support@cyberprotectionconsultingservices.com.
• Stop calls: tell us on any call, or email us. We will add you to our internal do-not-call list.

Carriers are not liable for delayed or undelivered messages.

6.3 Timing

We only call or text between 8 a.m. and 8 p.m. in your local time, unless you ask us to reach you at another time.

6.4 Mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except service providers that deliver messages on our behalf.

7.When we share information

We share personal information only with the service providers listed below, only as much as each one needs, and only to run the Services. Each provider is bound by contract or terms to protect it and use it only for us.

We may also disclose information when:

• You direct us to, such as forwarding your report to your IT provider.
• The law requires it, such as a valid subpoena or court order. Where allowed, we will tell you first.
• Safety requires it, to prevent fraud, abuse, or harm.
• The business changes, such as a merger or sale. We will notify you before your information falls under a materially different policy.

8.Cookies and tracking

We use only the cookies needed to run the site, keep forms working, and block bots. We do not use advertising cookies or third-party ad pixels.

If we use analytics, we choose privacy-friendly tools that do not build personal profiles, and we ask first where the law requires. Our newsletter may track opens and clicks. You can block this by turning off image loading in your email app, or by asking us to disable tracking for your address.

9.How long we keep information

10.Your rights and choices

Wherever you live, you can ask us to:

• Tell you what personal information we hold about you and send you a copy.
• Correct information that is wrong.
• Delete your information.
• Stop using your information for marketing.
• Stop analytics tracking tied to you.

Residents of California, Colorado, Connecticut, Virginia, and other states with privacy laws may have additional rights. We honor them. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of on that front. We will honor Global Privacy Control browser signals as an opt-out request.

To make a request, email support@cyberprotectionconsultingservices.com with the subject "Privacy Request." We will confirm your identity using only what we already have, usually your email or phone number. We will respond within 30 days, or sooner if the law requires. You may use an authorized agent. We will not treat you differently for using your rights. If we deny your request, you may appeal by replying to our decision.

11.Security

We protect your information with encryption in transit, access limited to people who need it, multi-factor authentication on our accounts, vendor review, and a written incident response plan. We follow the New York SHIELD Act.

No system is perfectly secure. If a breach puts your personal information at risk, we will notify you and the authorities as the law requires, without unreasonable delay.

12.Children

Our Services are for businesses and adults. We do not knowingly collect personal information from anyone under 16. If you believe a child gave us information, email us and we will delete it.

13.Where we process data

We store and process data in the United States. If you contact us from outside the U.S., your information will be transferred here. Where required, we use appropriate safeguards and will share details on request.

14.Changes to this policy

If we make a material change, we will post the new version here and email subscribers at least 30 days before it takes effect. We will not use information collected under an earlier version for a materially different purpose without telling you and, where required, getting your consent.

15.Contact us