What we collect, and why.

Ferrok Security LLC, an Oklahoma limited liability company. For any question about this page or about data we hold, email r2founds@gmail.com.

When you submit the form on the home page, we record what you typed:

• Your name and email address (both required)
• Your company, if you give one
• What you are shipping, and what is prompting the review

The server also records two things you did not type, for abuse prevention:

• The IP address the submission came from, used to rate-limit the form to five submissions per hour
• Your browser user-agent string

That is the complete list. There is no account, no login, and nothing else is captured.

We use it to reply to you and to scope a possible engagement. That is the only purpose.

You are not added to a mailing list. We do not sell it, rent it, share it with data brokers, or use it to build a marketing profile. If a scoping conversation does not lead anywhere, the data is not repurposed.

Submissions are written to a Postgres database hosted by Supabase, and a copy of each submission is emailed to us through Resend. Both are US-hosted service providers acting on our instructions. No other third party receives it.

None. This site sets no cookies, runs no analytics, and loads no advertising, social, or tracking scripts. The only third-party request the page makes is to Google Fonts for the typefaces.

Intake submissions are kept while the inquiry is open and for up to 24 months afterwards, so we can pick up a conversation that restarts later. Records tied to a signed engagement are kept for as long as the engagement contract requires.

You can ask us to delete your submission at any time, for any reason, and we will do it and confirm. Email r2founds@gmail.com.

Ask us and we will tell you what we hold about you, correct it, or delete it. We do not require you to prove a legal basis for asking. If you are in the UK, EU, or a US state with its own privacy statute, the rights those laws give you apply here and we will honor them without argument.

This page covers the website only. Data handled during a paid engagement, including anything we touch while testing your systems, is governed by the mutual NDA and the statement of work, not by this page. Engagement findings are never published or shared without written permission.

If this page changes materially we will update the date below. Last updated 13 September 2026.