Privacy Policy

Effective Date: January 2025

Last Updated: January 2025

1. Introduction

GoTopo, LLC ("GoTopo," "we," "our," or "us") values your privacy and is committed to protecting your personal information. This Privacy Policy describes the types of information we collect, how we use it, with whom we share it, and the rights and choices you have regarding your personal data. This policy applies to all users of our website, services, and platforms (collectively, the "Services"), and any interactions you have with us, whether online or offline.

We adhere to the highest standards of data protection and comply with applicable data privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other state, federal, or international regulations, as applicable.

2. Information We Collect

A. Personal Information You Provide Voluntarily

We may collect the following categories of personal data when you:

• Contact us via forms, email, phone, or chat
• Subscribe to our newsletters or updates
• Request or receive managed IT, cybersecurity, or consulting services
• Submit support requests
• Participate in a demo, survey, event, or promotion

Examples of personal data collected include:

• Name, job title, and business affiliation
• Email address and phone number
• Billing address and payment information (processed by PCI-compliant partners)
• System credentials or device identifiers (when onboarding for IT support)
• Any other information you voluntarily provide

B. Information Collected Automatically

When you use our Services, we may automatically collect data such as:

• Device information (type, OS, unique identifiers)
• Log data (IP address, browser type, referral URLs)
• Usage behavior (page views, clicks, session time)
• Location data (based on IP address or device settings)

This data is collected using cookies, pixels, log files, analytics tools (e.g., Google Analytics), and RMM/EDR software where applicable.

3. How We Use Your Information

We use personal data for the following purposes:

• To provide, operate, maintain, and improve our Services
• To respond to inquiries, requests, and provide customer support
• To fulfill contractual obligations (e.g., SLAs, project deliverables)
• To personalize content, communication, and service recommendations
• To send security alerts, technical notices, and administrative messages
• To send marketing communications (with opt-out capabilities)
• To monitor, detect, and prevent fraud, unauthorized access, and threats
• To comply with legal obligations, enforce agreements, or resolve disputes

4. Legal Bases for Processing (for GDPR-covered individuals)

We process personal data based on one or more of the following legal grounds:

• Consent (e.g., marketing emails)
• Contractual necessity (e.g., onboarding and support)
• Legal obligation (e.g., tax and accounting laws)
• Legitimate interest (e.g., security, improving services)

5. Sharing and Disclosure of Personal Information

We do not sell your personal information. We may disclose it in the following circumstances:

A. Trusted Service Providers

We use vendors to support our infrastructure, including:

• Cloud providers (e.g., AWS, GCP)
• Email and collaboration platforms (e.g., Google Workspace, Microsoft 365)
• RMM and MDM tools (e.g., NinjaOne, Addigy)
• EDR/MDR platforms (e.g., Huntress)
• CRM and ticketing systems (e.g., HubSpot, Zendesk)

These providers are contractually required to protect your data and use it only for the purposes we specify.

B. Legal and Compliance

We may disclose information when required to:

• Comply with legal obligations or court orders
• Respond to lawful government requests
• Protect our rights, privacy, safety, or property
• Detect, prevent, or address fraud and cybersecurity incidents

C. Business Transfers

In the event of a merger, acquisition, sale of assets, or other business reorganization, your information may be transferred to a successor organization.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, including:

• Active client engagement and service delivery
• Compliance with legal, accounting, or regulatory requirements
• Security and audit logs for operational integrity

Retention periods are defined in our internal data governance policy and may vary by data type.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you
• Request corrections or deletions
• Object to or restrict certain processing
• Withdraw consent (where applicable)
• Receive a copy of your data in a portable format

You can make these requests by contacting us at privacy@go_topo.com. We will respond within the timeframes required by law.

8. Marketing Preferences

You may opt out of receiving promotional communications from us by:

• Clicking the unsubscribe link in marketing emails
• Contacting us at privacy@go_topo.com

Even if you opt out of marketing emails, you may still receive service-related notices (e.g., support, system updates, billing).

9. Data Security

We implement a layered security strategy to protect your data, including:

• Encryption at rest and in transit
• Endpoint monitoring and EDR deployment
• Role-based access controls and MFA enforcement
• Secure development practices and code reviews
• Regular vulnerability scanning and patch management

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

• Recognize returning visitors
• Analyze traffic and user behavior
• Customize user experiences

You can control or delete cookies through your browser settings. For more information, see our Cookie Policy.

11. International Transfers

If you access our Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the U.S. or other countries where we or our service providers operate.

We use appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure adequate data protection when transferring data internationally.

12. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Third-Party Links

Our website may contain links to third-party websites or services not owned or controlled by GoTopo. We are not responsible for the privacy practices of these third parties.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes via our website or other contact methods.

We encourage you to review this policy periodically to stay informed of how we protect your information.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: