Privacy Policy
This Privacy Policy explains how VextaTech Solutions, LLC, operating under its trade name VextaTech Federal ("VextaTech," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with our website at vextafed.com (the "Site") and the compliance services and software we provide (the "Services"). VextaTech Federal is a registered trade name of VextaTech Solutions, LLC, a limited liability company organized in the Commonwealth of Virginia, United States.
1. Scope
This policy applies to information we process through the Site and through our Services for prospective and current clients. It does not apply to third-party websites or services that we do not control, even where we link to them.
2. Information We Collect
Information you provide
When you contact us, request a consultation, or otherwise communicate with us, we may collect your name, business email address, company name, job title, phone number (if you choose to provide it), and the contents of your message.
Information collected automatically
When you visit the Site, we may automatically collect standard technical and usage information such as IP address, browser type, device information, referring pages, and pages viewed. This helps us operate, secure, and improve the Site.
Client environment data (Services)
When we deliver Services to a client, our software reads configuration and security-posture information from the client's own cloud environment (for example, Microsoft 365 and Azure tenant settings and control states) in order to assess and remediate compliance controls and generate evidence.
Your data stays in your tenant. Our Services are designed so that a client's underlying data and controlled content remain inside the client's own cloud tenant. On our side we retain only the metadata needed to assess control status, produce compliance artifacts, and operate the Services. We do not use client environment data to train artificial- intelligence models, and we do not sell client data.
3. How We Use Information
- To respond to inquiries, schedule consultations, and provide the Services;
- To assess, remediate, and document compliance controls and generate evidence for clients;
- To operate, maintain, secure, and improve the Site and Services;
- To send administrative or service-related communications;
- To comply with legal, regulatory, and contractual obligations.
4. Legal Bases
Where applicable law requires a legal basis for processing, we rely on your consent, our legitimate business interests, the performance of a contract with you or your organization, and compliance with legal obligations.
5. How We Share Information
We do not sell personal information. We may share information:
- With service providers and subprocessors who support our operations (for example, cloud hosting and infrastructure providers) under contractual confidentiality and security obligations;
- Where required to comply with law, legal process, or lawful government requests;
- To protect the rights, property, or safety of VextaTech, our clients, or others;
- In connection with a business transaction such as a merger, acquisition, or asset sale, subject to this policy.
6. Data Retention
We retain information for as long as needed to fulfill the purposes described in this policy, to provide the Services, and to meet legal, regulatory, and contractual requirements, after which we delete or de-identify it.
7. Security
We maintain administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Cookies and Analytics
The Site may use cookies or similar technologies to enable core functionality and to understand how the Site is used. You can control cookies through your browser settings; disabling them may affect some features of the Site.
9. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, or to object to certain processing. To exercise these rights, contact us at info@vextafed.com. We will respond consistent with applicable law.
10. Children's Privacy
The Site and Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.
11. International Users
We are based in the United States, and information we process may be stored and handled in the United States. If you access the Site from outside the United States, you understand your information may be processed there.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact:
VextaTech Solutions, LLC (d/b/a VextaTech Federal)
Virginia, United States
Email: info@vextafed.com