Privacy Policy

1. Who We Are

Guardian IT (“Guardian IT,” “we,” “us”) is a managed IT and cybersecurity provider based in Central Texas. This policy describes how we handle personal information across three surfaces: (a) our public website at guardianit.tech, (b) the Warden client portal at command.guardianit.tech, and (c) the managed IT and security services we deliver under a service agreement. Where this policy and a signed service agreement conflict, the service agreement controls for service-delivery data.

2. Information We Collect

Information you give us. Contact and waitlist submissions (name, work email, company), portal account details, support requests and ticket content, and billing information when you purchase a plan or token pack. Payment card details are collected and processed by our payment processor — we do not store full card numbers.

The free security assessment is different by design. Your answers, footprint counts, and score are processed in your browser and are not written to our database. If you choose “email me a copy,” the address you enter is used once to send the report and is not stored or added to any marketing list.

Service telemetry. When we manage your environment under a service agreement, our monitoring agents and security tooling collect technical data from enrolled devices and systems: device identifiers and health, installed software and patch status, security events and alerts, backup status, and uptime data. This telemetry exists to deliver the service you hired us for; it is scoped by your service agreement.

Collected automatically. Standard web logs (IP address, browser type, pages viewed) and the cookies described in Section 6.

3. How We Use Information

• To provide, secure, and operate the services and the portal (contract).
• To detect, investigate, and respond to security threats affecting you or us (legitimate interest — this is the core of what you hire us to do).
• To bill, invoice, and maintain business records (contract / legal duty).
• To respond to inquiries and provide support (contract).
• To send service and account communications — incident notices, maintenance windows, renewal notices. These are not marketing and cannot be opted out of while you are a client.
• To send marketing only where you have opted in (e.g., the waitlist); every marketing email includes an unsubscribe link (consent).
• To comply with law, and to establish or defend legal claims.

We do not sell personal information, and we do not use your data to train third-party advertising or AI models.

4. How We Share Information

We share personal information only with: (a) service providers that run parts of our stack under contract — hosting and content delivery, identity and authentication, transactional email, payment processing, scheduling, and the security/monitoring platforms we deploy into managed environments; (b) professional advisers (legal, accounting, insurance) under confidentiality; (c) authorities when required by law, subpoena, or court order, or to protect the rights, safety, or property of Guardian IT, our clients, or others; and (d) a successor in a merger, acquisition, or asset sale, subject to this policy. A current list of subprocessor categories is available on request.

5. Retention

We keep personal information only as long as needed for the purposes above: account and billing records for the life of the relationship plus the period required by tax and commercial law; service telemetry and security logs per the retention schedule in your service agreement; contact-form and waitlist submissions until you ask us to delete them or they are no longer needed. When a client relationship ends, we offboard and return or destroy client environment data per the service agreement.

6. Cookies

The website and portal use essential cookies only: session and authentication cookies (so you stay signed in securely) and preference cookies (such as theme). We do not run third-party advertising trackers. If we add product analytics, we will update this policy and, where required, ask for consent first.

7. Security

We apply the same discipline to our own systems that we sell: multi-factor authentication, least-privilege access, encryption in transit, logging and monitoring, and tested backups. No provider can promise absolute security; if we suffer a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law, including Texas breach notification requirements.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Texas residents have rights under the Texas Data Privacy and Security Act, including the rights to confirm processing, correct, delete, obtain a copy, and opt out of targeted advertising, sale, and certain profiling — we do not sell personal data or use it for targeted advertising. To exercise any right, contact us using Section 12; we will verify your request and respond within the time required by law. If we decline a request, you may appeal by replying to our decision.

Note for client-environment data: when we process employee data on behalf of a business client, that client controls the data — we will refer your request to them and assist as their processor.

9. Children

Our website and services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

10. Where Data Is Processed

We are a United States company and process data in the United States. If you access the services from outside the U.S., you understand your information will be transferred to and processed in the U.S.

11. Changes to This Policy

We will post any changes here with a new effective date and version number. For material changes, we will give clients reasonable advance notice by email or portal notice before the change takes effect — we will not change this policy silently.

12. Contact

Privacy questions and requests: Info@guardianit.tech · (512) 980-4999 · Guardian IT, Central Texas (registered address available on request and in your service agreement).