Privacy Policy

For the purposes of this Privacy Policy:

• "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to a particular individual or household, as defined under the California Civil Code Section 1798.140(v) and applicable state laws.
• "Sensitive Personal Information" includes Social Security numbers, financial account details, precise geolocation data, biometric information, health data, and other categories identified by applicable state laws.
• "Processing" means any operation performed on personal information, including collection, use, storage, disclosure, deletion, or modification.
• "Service Provider" means a third party that processes personal information on behalf of IpOctet pursuant to a written contract that restricts the use of such information to the specified business purpose.
• "Sale" means the disclosure of personal information to a third party for monetary or other valuable consideration, as defined under applicable state laws.
• "Sharing" means the disclosure of personal information for cross-context behavioral advertising purposes, as defined under the CCPA/CPRA.

We collect the following categories of personal information:

A. Identifiers

Name, email address, phone number, mailing address, IP address, and online account identifiers.

B. Professional & Employment Information

Job title, employer, professional qualifications, certifications, licenses, work history, and education background.

C. Commercial Information

Records of services engaged, project scopes, invoices, purchase orders, and contractual agreements.

D. Internet & Network Activity

Browsing history on our website, search queries, page interactions, referral URLs, browser type, operating system, and device identifiers.

E. Geolocation Data

Precise GPS location data from field technician devices and company vehicles during active work assignments, used exclusively for dispatch optimization, safety monitoring, and client billing verification.

F. Audio, Visual & Sensory Data

Site survey photographs, project documentation imagery, and recorded calls for quality assurance (with prior notification).

G. Protected Classification Characteristics

Age, gender, veteran status, and disability status collected solely from job applicants on a voluntary basis for Equal Employment Opportunity (EEO) compliance purposes.

H. Education Information

Degrees, industry certifications, and training records relevant to employment qualifications.

I. Inferences

Profiles generated from the above data categories to optimize service delivery, workforce allocation, and dispatch efficiency.

We collect personal information from the following sources:

• Directly from you: Contact forms, careers applications, phone or email inquiries, service requests, and in-person interactions.
• From client organizations: Client-provided project data, site access requirements, building plans, and network diagrams necessary for service delivery.
• Automatically from your devices: Cookies, web beacons, server logs, analytics tools, and device telemetry when you interact with our website or digital platforms.
• From field operations systems: Dispatch management platforms, time-tracking tools, GPS-enabled fleet management systems, and project management software.
• From third-party sources: Background check providers, credit reporting agencies, professional licensing verification databases, and staffing partners — subject to applicable consent and legal requirements.

IpOctet processes personal information for the following business purposes:

• Service Delivery: Dispatching field technicians, managing project logistics, inventory coordination, quality assurance, and SLA compliance monitoring.
• Employment & HR: Recruiting, hiring, onboarding, payroll processing, benefits administration, performance management, and workforce scheduling.
• Client Relationship Management: Contract administration, invoicing, account management, and client communication.
• Safety & Compliance: OSHA compliance, site safety audits, incident reporting, workers' compensation, and insurance claims management.
• Business Operations: Financial reporting, tax compliance, audit preparation, insurance underwriting, and corporate governance.
• Communications: Service announcements, newsletters, and operational updates (with opt-out available).
• Legal Obligations: Responding to lawful subpoenas, regulatory inquiries, litigation holds, and government investigations.
• Security: Fraud prevention, access control, network security monitoring, and incident response.
• Website Operations: Analytics, performance optimization, and user experience improvement.

IpOctet may disclose personal information to the following categories of recipients:

• Service Providers: Cloud hosting providers, CRM platforms, payroll processors, background check companies, and analytics services — all bound by contractual obligations to protect your data.
• Client Organizations: Project-related data disclosed to clients as necessary for service delivery under contractual agreements.
• Government Entities: Tax authorities, OSHA, licensing boards, and law enforcement — only when legally required or compelled by valid legal process.
• Professional Advisors: Legal counsel, independent auditors, and insurance carriers for business operations and risk management.
• Business Transaction Parties: In connection with potential or actual mergers, acquisitions, or asset transfers, subject to confidentiality obligations.

Our website uses the following categories of cookies and tracking technologies:

Strictly Necessary Cookies

Essential for basic website functionality, session management, security, and load balancing. These cannot be disabled.

Performance & Analytics Cookies

Help us understand how visitors interact with our website by collecting anonymous usage statistics. We use these to improve site performance and content relevance.

Functional Cookies

Remember your preferences (such as language settings or form data) to provide a more personalized experience.

Managing Cookies

You may control and disable cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect website functionality.

Do Not Track & Global Privacy Control

IpOctet honors Global Privacy Control (GPC) signals and Universal Opt-Out Mechanisms as required by applicable state laws including California, Colorado, and Connecticut. When we detect a GPC signal from your browser, we will treat it as a valid opt-out request for the sale or sharing of personal information.

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Right to Know / Access: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom it was shared.
• Right to Delete: Request deletion of personal information we have collected, subject to certain legal exceptions (e.g., legal obligations, ongoing contractual requirements, security purposes).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Data Portability: Receive your personal information in a structured, commonly used, and machine-readable format.
• Right to Opt Out of Sale/Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising.
• Right to Opt Out of Targeted Advertising: Opt out of the processing of your personal information for targeted advertising purposes.
• Right to Opt Out of Profiling: Opt out of automated decision-making that produces legal or similarly significant effects.
• Right to Limit Sensitive Data Use: Restrict our processing of your sensitive personal information to only what is necessary for the stated purpose.
• Right to Non-Discrimination: You will not be discriminated against for exercising any of your privacy rights.
• Right to Appeal: If we deny your privacy request, you may appeal our decision through the process described below.

How to Exercise Your Rights

Submit a verifiable request through any of the following methods:

• Email: privacy@ipoctet.com
• Phone: (602) 362-8601
• Web form: Contact page

We will verify your identity before processing any request. You may also designate an authorized agent to submit a request on your behalf, provided the agent presents a valid power of attorney or written authorization signed by you. We will respond to verified requests within 45 days, with the option to extend by an additional 45 days for complex requests (with prior notice).

Appeal Process

If your request is denied, you will receive a written explanation. You may appeal by responding to the denial within 60 days. We will review and respond to appeals within 60 days. If the appeal is denied, you will be provided with instructions on how to file a complaint with the appropriate state attorney general or regulatory authority.

California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act). In the preceding 12 months, IpOctet has collected the categories of personal information described in Section 3. We have not sold personal information. You may exercise your rights as described in Section 8. IpOctet honors GPC signals as valid opt-out requests.

Virginia Residents (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the processing of personal data for targeted advertising, sale, or profiling. Appeals may be filed with the Virginia Attorney General.

Colorado Residents (CPA)

Colorado residents have similar rights to Virginia residents. IpOctet recognizes universal opt-out mechanisms as required by the Colorado Privacy Act. Sensitive data processing requires opt-in consent.

Connecticut Residents (CTDPA)

Connecticut residents have the right to access, correct, delete, and port their personal data, and to opt out of sale, targeted advertising, and profiling. IpOctet honors universal opt-out mechanism signals from Connecticut residents.

Additional State Privacy Laws

IpOctet complies with all applicable state privacy laws as of 2026, including those enacted in Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Delaware (DPDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (INCDPA), Kentucky (KCDPA), Rhode Island (RIDTPPA), Maryland (MODPA), Minnesota, Nebraska, New Hampshire, New Jersey, Florida (FDBR), and Utah (UCPA). Residents of these states may exercise applicable rights as described in Section 8.

IpOctet primarily operates within the United States. Personal information collected is stored and processed in the United States. If you access our services from outside the United States, you acknowledge that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For clients or individuals subject to the European Union General Data Protection Regulation (GDPR) or UK GDPR, IpOctet will implement appropriate safeguards for cross-border data transfers, including Standard Contractual Clauses (SCCs) and supplementary technical measures (encryption, access controls, data segregation) as necessary.

If you are located in the EU/EEA, you have additional rights including the right to lodge a complaint with your local supervisory authority.

When you submit an application through our careers portal, we collect the following information:

• Full name, email address, phone number, and current location
• Resume/CV and cover letter content
• Professional certifications and documentation
• Position of interest, experience level, and availability

How Applicant Data Is Used

• Evaluating your qualifications for the applied position
• Communicating with you about your application status
• Conducting background checks and reference verification (with your consent)
• Complying with EEO and OFCCP recordkeeping requirements

Applicant Data Retention

Unsuccessful applicant data is retained for up to 3 years to comply with federal EEO and OFCCP recordkeeping requirements and to consider applicants for future openings. You may request deletion of your application data at any time by contacting privacy@ipoctet.com, subject to legal retention obligations.

Anti-Bot Protections

Our application form employs proof-of-work verification, honeypot fields, and rate limiting to prevent automated spam submissions. No personal information is collected by these mechanisms beyond what is necessary for verification.

GPS & Location Tracking

IpOctet tracks the precise GPS location of company vehicles and field devices during active work assignments. This data is used exclusively for:

• Dispatch optimization and route planning
• Safety monitoring and emergency response
• Mileage verification and travel reimbursement
• Client billing accuracy and SLA compliance
• Time-stamped site arrival and departure logs for project documentation

Work Performance Data

We collect data related to work assignments, including dispatch records, time-tracking entries, project completion metrics, closeout documentation, and client feedback. This data is used for workforce management, performance evaluation, and continuous improvement.

In the course of providing field engineering services, IpOctet may access, process, or temporarily store client project data including:

• Building plans, floor plans, and site survey documentation
• Network diagrams, rack elevations, and cabling schematics
• Equipment inventories and configuration details
• Site access credentials and security protocols

Client Data Handling

• All client project data is handled in accordance with the applicable Master Services Agreement (MSA) and Non-Disclosure Agreement (NDA).
• Client data is classified, access-controlled, and encrypted both at rest and in transit.
• Upon project completion, client data is returned or securely destroyed per contractual requirements.
• IpOctet complies with client-specific data handling requirements, including those mandated by enterprise information security policies.

Surveillance System Installations

When IpOctet installs surveillance or security systems, we act as the service provider/installer. The client maintains full ownership and control of all recorded data. IpOctet does not retain surveillance footage after installation handoff and system acceptance. Any incidental recordings captured during installation, testing, or maintenance are deleted within 48 hours of project closeout.

IpOctet employs comprehensive security measures to protect personal information:

Technical Safeguards

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication (MFA) for all administrative access
• Role-based access control (RBAC) limiting data access to authorized personnel
• Network segmentation and firewall protection
• Endpoint detection and response (EDR) on all corporate devices
• Regular penetration testing and vulnerability assessments

Organizational Safeguards

• Industry-standard security controls and access management
• Mandatory security awareness training for all employees and contractors
• Vendor risk assessment program for all third-party service providers
• Documented incident response plan with defined escalation procedures
• Annual security policy review and update cycle

In the event of a data breach involving personal information, IpOctet will:

• Notify affected individuals without unreasonable delay and in compliance with applicable state breach notification laws.
• Provide written notice containing: a description of the incident, the categories of data affected, steps IpOctet is taking to investigate and remediate, and resources available to affected individuals.
• Notify the applicable state attorney general or regulatory authority where required by law.
• Offer credit monitoring and identity protection services when the breach involves financial or sensitive personal information.

Notification timelines vary by state. IpOctet targets notification within 30 days of breach discovery for all jurisdictions, exceeding the requirements of most state statutes.

IpOctet retains personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Our retention schedule:

Upon expiration of the applicable retention period, personal information is securely deleted or anonymized using industry-standard data destruction methods.

IpOctet's services are business-to-business in nature and are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16 (or 13, as applicable under COPPA). If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take immediate steps to delete such information.

If you believe that a child has provided personal information to IpOctet, please contact us immediately at privacy@ipoctet.com.

IpOctet may use automated processing in the following contexts:

• Dispatch Optimization: Algorithmic technician assignment and route optimization based on skills, location, certifications, and historical performance data.
• SLA Prediction: Stochastic modeling on historical ticket data to predict and prevent SLA breaches.
• Spam Prevention: Automated filtering of job applications using proof-of-work verification and pattern detection.

No automated decision-making processes used by IpOctet produce legal or similarly significant effects on individuals without human review. You have the right to opt out of profiling activities as described in Section 8.

While IpOctet implements comprehensive security measures, no method of electronic storage or internet transmission is 100% secure. IpOctet shall not be liable for any unauthorized access, breach, or disclosure that occurs despite our commercially reasonable security measures, except to the extent required by applicable law.

This Privacy Policy does not create contractual rights beyond those established by applicable privacy legislation. IpOctet's liability for privacy-related incidents shall be governed by the terms of any applicable Master Services Agreement and the maximum liability provisions therein.

IpOctet is not responsible for the privacy practices of third-party websites linked from our site, third-party service providers acting outside the scope of our instructions, or client-operated systems that IpOctet installs but does not control.

IpOctet reserves the right to update this Privacy Policy at any time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post a prominent notice on our website for at least 30 days
• Notify affected individuals via email when the changes materially affect how we process their information
• Maintain archived versions of prior policies upon request

We encourage you to review this policy periodically. Continued use of our services after the effective date of any updates constitutes your acknowledgment of the modified policy.

For privacy-related inquiries, data subject requests, or complaints, contact us at: