Privacy Policy
Effective January 1, 2026 • Last updated March 11, 2026
Who We Are
Archangel is operated by FinalBoss Technology Inc. (“we,” “us,” “our”), a Delaware corporation. Contact: abraham@finalbosstech.com.
Information We Collect
Contact form submissions. When you submit the contact form on /contact, we collect your name, email address, company name (optional), and message. This data is transmitted to:
- FormSubmit.co — a third-party email relay that forwards your submission to us. FormSubmit does not store submissions beyond delivery.
- Vercel function logs — a backup copy is logged server-side. Vercel function logs are retained for up to 7 days.
Scanner usage. When you run a scan, the domain name you submit and the scan results (grade, findings, exposure estimate) are stored in our receipt infrastructure. No personal information beyond the domain name is collected during scans.
Automatically collected data. We do not use Google Analytics, Meta Pixel, or any third-party tracking scripts. Vercel, our hosting provider, may collect standard web server logs (IP address, user agent, timestamps) as part of normal platform operation.
How We Use Your Information
- To respond to your contact form inquiries
- To generate and store scan receipts for verification purposes
- To improve our scanner and consent enforcement products
We do not sell, share, or rent your personal information to third parties for marketing purposes.
Your California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (Cal. Civ. Code §§ 1798.100–1798.199) gives you the following rights:
- Right to Know — request what personal information we have collected about you
- Right to Delete — request deletion of your personal information
- Right to Correct — request correction of inaccurate personal information
- Right to Opt Out — we do not sell or share your personal information, so there is nothing to opt out of
- Right to Non-Discrimination — we will not discriminate against you for exercising your rights
To exercise any of these rights, email abraham@finalbosstech.com with the subject line “CCPA Request.” We will acknowledge your request within 10 business days and respond within 45 calendar days.
Do Not Sell or Share
FinalBoss Technology does not sell or share your personal information as defined under the CCPA. We do not engage in cross-context behavioral advertising. Because we do not sell or share personal information, no opt-out mechanism is required. If this changes, we will update this policy and provide a visible opt-out link.
Data Retention
- Contact form data: retained until your inquiry is resolved, then deleted within 90 days
- Scan receipts: retained indefinitely for verification integrity (receipts contain domain names, not personal data)
- Vercel function logs: automatically purged by Vercel after 7 days
Security
All data is transmitted over HTTPS with TLS encryption. Scan receipts are cryptographically signed using HMAC-SHA256. We enforce strict transport security, content security policies, and frame protection headers.
Third-Party Services
- Vercel — hosting and serverless functions (privacy policy)
- FormSubmit.co — contact form email relay (service page)
- Upstash — Redis receipt storage (privacy policy)
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated effective date.
Contact
FinalBoss Technology Inc.
Email: abraham@finalbosstech.com