Scope
This notice supplements the Privacy Policy for U.S. residents. State privacy rights depend on a law’s applicability thresholds, definitions and exceptions. This notice does not represent that every state consumer privacy law applies to 4SI or to every processing activity.
Categories and sources
| Category | Examples | Sources |
|---|---|---|
| Identifiers and contact data | Name, email address, organization, correspondence identifier, Daily Risk Briefing confirmation and subscription status | Directly from you and delivery status from Resend |
| Internet or electronic activity | IP-derived request data, page path, referrer, browser, device, interaction label, duration and scroll depth | Browser, hosting edge and optional consented analytics |
| Approximate geolocation | Country and city derived at the network or hosting edge; never GPS-level precise location | Hosting edge and network lookup |
| Professional information | Organization and professional context supplied in an inquiry | Directly from you |
| Inferences | Probable network type or organization inferred from IPinfo Lite, RDAP, reverse DNS and GLEIF | Network request and public registries after analytics consent |
| Public-source research information | Organization, official role, event, source and location information necessary for a sourced public record | Official sources and cited publishers |
The public site is not designed to collect government identification numbers, financial account credentials, health information, biometric identifiers, precise geolocation or private communications, except if a person unnecessarily includes such information in a message.
Business purposes
- deliver, secure, troubleshoot and measure the public website;
- respond to inquiries and evaluate a requested relationship;
- confirm, deliver and administer the Daily Risk Briefing you requested;
- prevent abuse of the contact and analytics endpoints;
- understand aggregate page use and approximate organization-level interest after consent;
- maintain the public research record, source integrity, methodology and corrections;
- comply with law and establish, exercise or defend rights.
Retention
- raw Signal Analytics events and associated pseudonymous network and attribution fields: 90 days;
- contact correspondence: normally up to 24 months, longer only for an active relationship, legal obligation or claim;
- Daily Risk Briefing subscription: until unsubscribe or service termination; suppression status as needed to honor the opt-out;
- runtime rate-limit keys: normally 10 minutes;
- provider operational and security logs: under provider configuration and operational necessity;
- public research records: while needed for the sourced record, corrections and methodological accountability, subject to review;
- rights-request records: while needed to handle and demonstrate the request or protect legal rights.
State privacy rights
Residents of states providing applicable rights may request access or knowledge, deletion, correction or a portable copy; appeal a denied request; and exercise applicable opt-out or limitation rights. 4SI does not discriminate for exercising an applicable privacy right.
Email contact@by4si.com. State your jurisdiction and identify the relevant service or record. An authorized agent must provide appropriate authority; 4SI may verify the individual directly. A denial will be explained and an appeal route provided where required.