Privacy Policy

Last updated: July 6, 2026

Who we are

Provenance Advisory, LLC ("Provenance Advisory," "we," "us," or "our") provides technical privacy assessment and evidence-based advisory services. This policy explains how we handle information collected through provenanceadvisory.com (the "Site") and our client workspace tools.

Information we collect

We collect information only when you choose to provide it to us:

• Consultation requests. When you submit the "Book a Consult" form, we collect your name, email, phone number (optional), company, job title (optional), the services you're interested in, your availability, and any additional notes you provide.
• Client workspace accounts. If you become a client, we create an account with your name, email, and role information so you can access your engagement's workspace, reports, and findings. Client data is strictly isolated — each client can only access their own information.
• Source code and technical artifacts submitted for scanning. If you engage us for a code or architecture assessment, you may provide source code, diagrams, or documentation for analysis. This is processed to generate your privacy assessment and is handled under the confidentiality terms of your engagement.

We do not collect information passively through cookies, analytics pixels, device fingerprinting, or any other tracking mechanism when you simply browse the Site.

Cookies and tracking

We do not use cookies for analytics, advertising, or tracking of any kind on this website. The only cookie the Site sets is a standard, functional session cookie used exclusively to keep you signed in after you log in to a client workspace or admin account — it does not track your browsing activity, is not shared with any third party, and is not used for any purpose beyond authenticating your session. If you don't log in, no cookie is ever set.

We do not run Google Analytics, Meta Pixel, or any similar third-party tracking or advertising script.

How we use your information

• To respond to consultation requests and schedule discovery calls.
• To deliver, manage, and communicate about your engagement if you become a client.
• To generate the privacy assessment artifacts (reports, data flow diagrams, findings) that are the subject of our services.
• To maintain the security and integrity of our systems.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

Data retention

We retain consultation request information for as long as reasonably necessary to respond to your inquiry and, if applicable, to support an ongoing or prospective engagement. Client engagement data is retained for the duration of the engagement and for a reasonable period afterward consistent with our contractual and recordkeeping obligations, after which it is deleted or anonymized upon request.

Your choices

You may ask us at any time to access, correct, or delete personal information we hold about you by contacting us using the details below. Because we don't use tracking cookies or analytics, there is no tracking-related opt-out needed for browsing the Site.

Security

We apply reasonable technical and organizational measures to protect information you share with us, including client data isolation, access controls, and secure storage for uploaded files and reports.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices. The "Last updated" date at the top of this page will reflect the most recent revision.

Contact us