Privacy Policy

01 Information We Collect

We collect personal information that you voluntarily provide to us when you use our website, submit forms, or communicate with us. The categories of information collected depend on which services you request.

Contact Form Submissions

When you submit our contact form, we collect:

• Full name
• Email address
• Organization name (optional)
• Service interest area
• Your message

Booking Form Submissions

When you book a consulting session, we collect:

• Full name
• Email address
• Session duration preference
• Payment information (processed by Stripe — we do not store card numbers)
• Stripe session ID and payment confirmation status

Information Services Intake Form

When you submit a request for background check, skip tracing, or Retrieve All services, we collect case-related information that may include:

• Your full name and email address
• Subject name, date of birth, and last four digits of Social Security Number (when voluntarily provided for identification purposes)
• Subject's last known address and state
• Case description and purpose of request
• Any additional context you provide

Sensitive intake data (such as partial SSN and date of birth) is transmitted securely and used exclusively for the purpose of conducting the requested research.

Automatically Collected Information

When you visit our website, we automatically collect limited analytics data including page path and referring URL for internal reporting purposes. We do not use third-party analytics platforms that track users across sites.

02 How We Use Information

We use the information we collect for the following purposes:

• To deliver the services you have requested (consulting sessions, background research, skip tracing, or Retrieve All reports)
• To confirm and schedule your consulting appointments
• To process payments through Stripe and verify payment completion
• To communicate with you about your inquiry, service request, or booking
• To send transactional email confirmations and service-related updates
• To respond to inbound inquiries submitted through contact or intake forms
• To maintain internal records of services rendered for business and compliance purposes
• To improve the functionality and content of our website

We do not use your personal information for advertising, behavioral profiling, or sale to data brokers.

03 How We Share Information

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

Service Delivery

Intake form data is shared internally with the licensed investigator responsible for fulfilling your request. No intake data is shared with third parties for the purpose of conducting your research without your knowledge.

Payment Processing

Payment information is handled by Stripe, Inc. We share only the information necessary to initiate and verify a checkout session. See Section 6 (Third-Party Services) for details.

Email Infrastructure

Transactional emails (booking confirmations, contact replies, inquiry alerts) are transmitted via Gmail SMTP or our email service provider. Email content is limited to what is necessary for the communication.

Legal Requirements

We may disclose information if required to do so by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

04 Storage & Security

Your information is stored in a PostgreSQL database hosted on Neon (a managed cloud database provider) with access restricted to authorized personnel only. Our application is hosted on Render, a managed cloud platform.

We implement reasonable technical and administrative safeguards including:

• HTTPS encryption for all data in transit (TLS)
• Access-controlled database environment
• Parameterized database queries to prevent SQL injection
• Password-protected administrative access with constant-time comparison to prevent timing attacks

No method of transmission over the internet or method of electronic storage is 100% secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security.

05 Data Retention

We retain personal information for as long as is reasonably necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Contact inquiries — retained for up to 2 years for business record purposes
• Booking records — retained for up to 3 years for transaction and compliance records
• Intake submissions — retained for the duration of the engagement and up to 2 years thereafter

To request deletion of your information prior to these retention periods, contact us at the information below. We will honor deletion requests where feasible and where retention is not required by law.

06 Third-Party Services

Our website uses the following third-party services. Each has its own privacy policy governing their data practices.

Stripe (Payment Processing)

Booking payments are processed by Stripe, Inc. When you complete a checkout, Stripe collects and processes your payment card information. We receive only a payment confirmation status and session identifier — we do not store card numbers, CVV codes, or banking details. Stripe's privacy policy: stripe.com/privacy

Google Fonts

Our website loads fonts from Google Fonts. Google may log the request including your IP address. Google's privacy policy: policies.google.com/privacy

Email Delivery

Transactional and notification emails are sent via Gmail SMTP infrastructure. Email content is limited to what is necessary for the relevant communication (confirmation, inquiry reply, or internal alert).

Neon & Render

Our application infrastructure — database hosting and web server — is provided by Neon and Render. These providers may have access to server logs and infrastructure-level data as part of their service operations.

07 Virginia Privacy Rights

3SA Silver Stiletto Security Agency LLC is a Virginia-licensed business. Virginia residents may have rights under the Virginia Consumer Data Protection Act (VCDPA), which may include:

• The right to know what personal data we collect and process
• The right to access your personal data
• The right to correct inaccurate personal data
• The right to delete personal data you have provided
• The right to opt out of the sale of personal data (we do not sell personal data)

To exercise these rights, please contact us using the information in Section 11. We will respond within a reasonable timeframe consistent with applicable law. Note that we are a small service provider and these rights may be subject to exceptions depending on the nature and purpose of the data processing.

We recommend consulting with a licensed Virginia attorney for specific questions about your rights under the VCDPA.

08 Cookies & Tracking

Our website uses a minimal number of browser storage mechanisms:

• Analytics visitor ID — a randomly generated identifier stored in localStorage used solely for internal page visit counting. This does not identify you personally and is not shared with third parties.
• Session cookie — a signed session cookie used for admin authentication. This cookie is only set when logging into the administrative interface and expires after 8 hours.

We do not use advertising cookies, cross-site tracking cookies, or behavioral profiling cookies. We do not serve ads.

09 Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted personal information to us, please contact us immediately and we will take steps to delete that information.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.

Continued use of our website after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

11 Contact Us

For questions about this Privacy Policy, to request access to your data, or to submit a deletion request, contact us at:

We will respond to privacy-related inquiries within a reasonable timeframe, generally within 30 days.