Privacy statement

Last revised: August 12, 2025

Scope. This privacy policy explains how Vulpine Solutions, LLC (“Vulpine,” “we,” “us,” or “our”) handles personal information in connection with our public website, forms, email and phone communications, and marketing materials (collectively, the “Sites”). Personal information we process while delivering managed services to clients is governed by the signed Master Services Agreement (MSA) and its exhibits (including the Security Baseline), and, if applicable, a separately executed Data Processing Addendum (DPA). If these documents conflict, the MSA, exhibits, and DPA control.

Introduction

We respect your privacy and are committed to handling personal information responsibly. “Personal information” means information that identifies or can reasonably be linked to an individual or household. This does not include publicly available information or de-identified and aggregated data.

Notice at collection: categories & purposes

We collect the minimum necessary personal information to operate our Sites and respond to you. The table below summarizes typical categories and business purposes.

We do not intentionally collect sensitive categories through the Sites. If you need to share regulated data (HIPAA or PCI, for example) do so only under the MSA and a signed DPA.

How we collect

• Directly from you: forms, email, phone, meetings.
• Automatically, via limited analytics and server logs when you use the Sites.
• From service providers that support our operations (analytics, email delivery, payment processors) consistent with this policy.

How we use personal information

• Operate and secure the Sites; prevent fraud and misuse.
• Respond to inquiries; provide quotes, proposals, and service information.
• Administer accounts, invoicing, and records consistent with our MSA and terms.
• Comply with law, enforce agreements, and protect rights, safety, and security.
• Improve our services and user experience through aggregate, de-identified analytics.

How we share

• No sale of personal information.
• With vendors that help us operate: hosting, email, analytics, payment processing, security. They may use the information only to provide contracted services and must protect it appropriately.
• With professional advisors (accounting, legal) under confidentiality.
• When required by law or to protect rights, safety, and security.

Client production data handled during managed services is shared only as permitted under the MSA, its exhibits, and any applicable DPA or vendor terms.

Data security

We use administrative, technical, and physical safeguards appropriate to the services we offer: access controls, encryption in transit where applicable, logging and monitoring. No method of transmission or storage is 100% secure. We limit access to authorized personnel and vetted providers. Security controls specific to managed services are described in the MSA and the Security Baseline.

Retention

We keep personal information for as long as needed to fulfill the purposes described above and to meet legal, regulatory, tax, accounting, or reporting requirements. For managed services data, retention follows the MSA, its exhibits, and any signed DPA or statement of work.

RMM & EDR telemetry for managed services

When you enroll devices or accounts under our managed services, our Remote Monitoring & Management (RMM) and Endpoint Detection & Response (EDR/AV) tools collect operational telemetry to maintain, secure, and support your environment. Examples include:

• Device and software inventory, health and performance data, patch and compliance status.
• Security events, malware detections, and response actions such as isolating a device.
• Alerts and logs related to backups, networking, and Microsoft 365 where covered.

This telemetry is processed within our service delivery platforms and by vetted security and backup vendors to provide the contracted services. We use it only for service delivery, security, support, and reporting, not for advertising. The scope of these tools and required controls are described in your MSA and the Security Baseline. Removing these tools or disabling telemetry may make devices ineligible for coverage under the agreement.

Cookies & analytics

Our Sites currently do not set cookies for core functionality. We use a lightweight, privacy-focused analytics tool to understand aggregate website usage (pages visited and duration) configured not to identify individual visitors. You can block scripts or cookies via your browser; core features of the Sites should continue to work.

Marketing & unsubscribe

If you receive non-transactional marketing emails from us (newsletters, product updates, drip campaigns) each message includes an unsubscribe link or clear instructions to opt out.

• You can also email contact@vulpinemsp.com with the subject line “Unsubscribe.”
• We honor opt-out requests promptly and maintain suppression lists to prevent further sends.

Your choices & rights

• Access, update, or delete: email contact@vulpinemsp.com to request access, correction, or deletion, subject to verification and legal limits.
• Cookies and scripts: manage or block via your browser or device settings.
• Marketing: use the unsubscribe link or email us as described above.

Residents of certain jurisdictions, including California, may have additional rights under local law. We honor verifiable requests as required by applicable law.

Children

Our Sites are intended for business use by adults and are not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this privacy policy from time to time. The “Last revised” date above will be updated, and the current version posted on our Sites. Your continued use of the Sites after an update signifies acceptance of the revised policy.

Contact us

Questions or requests regarding this privacy policy:

Vulpine Solutions, LLC
contact@vulpinemsp.com · (727) 312-9686

This privacy policy covers the Sites and routine business communications. Managed services data, including telemetry from managed devices and backup/BDR data, is governed by your signed MSA and related exhibits and, if executed, a DPA. Nothing in this policy creates warranties or obligations beyond those agreements.

No street address is published

Vulpine Solutions does not publish a street address on this site, on its Google Business Profile, or anywhere else.