Privacy Policy

IFG, LLC d/b/a IFG Quantum ("IFG," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ifgquantum.com, use our CBOM Scanner, or engage with our services.

1. Information We Collect

1.1 CBOM Scanner Usage

When you use the CBOM Scanner at ifgquantum.com/cbom:

• Domain names you submit for scanning. These are processed in real-time and not permanently stored.
• Scan results are delivered directly to your browser and are not stored on our servers after delivery.
• IP addresses may be temporarily logged for rate limiting and abuse prevention. These logs are automatically purged within 30 days.

1.2 Contact & Assessment Forms

When you submit a contact form, Typeform, or request an assessment, we may collect:

• Name and job title
• Email address
• Organization name
• Domain scanned (passed via URL parameters)
• Sector of interest (pipeline, water, electric)
• Scan risk score and vulnerability count (passed via URL parameters)

1.3 Automatically Collected Information

Like most websites, we automatically collect:

• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent
• IP address and approximate geographic location

2. How We Use Your Information

We use collected information to:

• Deliver scan results and reports you request
• Respond to assessment inquiries and schedule consultations
• Improve the Scanner and website functionality
• Prevent abuse and enforce rate limits
• Communicate with you about our services (only if you've submitted a form)
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your information for targeted advertising.

3. Data Sharing & Third-Party Services

We may share information with the following categories of third parties, only as necessary:

We do not share scan results, domain names scanned, or assessment data with any party other than the user who initiated the scan.

4. Cookies & Tracking

Our website may use essential cookies required for site functionality (such as session management). We do not use third-party advertising cookies or tracking pixels.

If we implement analytics in the future, this policy will be updated to reflect the specific tools and data collected.

5. Data Retention

• Scan results: Not stored. Delivered to user's browser in real-time and discarded.
• Server logs (IP, domain): Retained up to 30 days for abuse prevention, then purged automatically.
• Contact form submissions: Retained for the duration of the business relationship and as required by law.
• Assessment engagement data: Retained per applicable contractual and regulatory requirements.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS), access controls, and secure infrastructure configurations. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information
• Object to processing of your personal information
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@ifgquantum.com. We will respond within 30 days.

California Residents (CCPA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To submit a request, email privacy@ifgquantum.com.

EU/EEA Residents (GDPR)

If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation, including the right to data portability and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is legitimate interest (providing the service you requested) and consent (where you submit a form).

8. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of the website or Scanner after changes constitutes acceptance of the revised policy.

10. Contact Us

For questions or concerns about this Privacy Policy or our data practices: