Aspendora Technologies
Menu

Legal

Privacy Policy

Last updated August 26, 2026

This policy covers aspendoracompliance.com, operated by Aspendora Technologies (Houston, TX). We sell compliance work, so it would be a poor look to be vague here. Below is what this website actually collects, where it goes, and how to stop it.

The short version

  • We do not sell your personal data, and we never have.
  • Advertising and analytics tags from Google, Microsoft, and Meta do not load until you accept them in the banner. Decline, and they are never placed.
  • Our own first-party analytics runs without cookies and does not follow you to other websites.
  • You can ask us to delete anything we hold about you by emailing hello@aspendora.com.

What you hand us directly

Our contact form, "get started" form, security scorecard, and compliance checklist ask for some combination of your name, work email, phone number, company name, website, role, employee count, and whatever you type into the message box. The scorecard and checklist also record your answers about your own security posture and the score they produce, because that is the thing you asked us to send you.

Booking a call goes through Cal.com, which collects your name, email, and the time you picked, and is subject to Cal.com's own privacy policy.

We use all of this to prepare and deliver what you requested, to follow up about compliance work, and for nothing else. Providing it is optional — the site is fully readable without ever filling in a form.

What gets collected automatically

We run a self-hosted analytics service on our own server at hub.aspendoracompliance.com. It records page views, referrers, approximate location from your IP address, device and browser type, clicks, and scroll depth. It is configured not to set cookies, and the data stays on our infrastructure — it is not shared with an advertising network.

With your consent, we also capture a sampled session replay — a reconstruction of page layout, mouse movement, and scrolling for a fraction of visits, used to find broken and confusing pages. Everything you type is masked before it leaves your browser: we cannot read form field contents from a replay. Replays are not collected unless you accept analytics in the banner.

If you accept analytics and later submit a form, we store a one-way cryptographic hash of your email address so we can connect your visits into one history. We do not store your readable email address in our analytics system, and a hash cannot be reversed back into your address.

Third parties, and only with your consent

If you accept marketing cookies, the following tags load and receive your IP address, the pages you view on this site, and — where you submit a form — the fact that a lead or booking happened. If you decline, none of them are ever loaded.

Tag Operator Why it's here
Google Analytics 4 Google LLC Which pages get visited, and which campaigns bring people here.
Google Ads Google LLC Tells Google which ad clicks led to a form or a booking.
Microsoft Advertising (UET) Microsoft Corporation Same job as Google Ads, for Bing search ads.
Meta Pixel Meta Platforms, Inc. Measures Facebook/Instagram ad results and allows retargeting.

These companies act as independent controllers of the data they receive and process it under their own policies. Sharing data with them for advertising purposes may be considered "targeted advertising" or "sharing" under some state privacy laws — which is exactly why it is off until you turn it on.

Service providers who process data for us

Form submissions are passed to systems we control or contract, purely to deliver the service: our automation server (automations.aspendora.com), our customer records system, our email delivery provider, and Cal.com for scheduling. They act on our instructions and are not permitted to use your information for their own marketing.

Your choices

  • Change your mind any time — use the link, also in the footer of every page.
  • Ask what we hold, or have it corrected or deleted — email hello@aspendora.com and we will respond within 45 days. We may need to confirm your identity first.
  • Opt out of targeted advertising — declining marketing cookies in the banner accomplishes this on our site. We honor Global Privacy Control browser signals automatically.
  • Stop emails — every message we send has an unsubscribe link.

Texas residents have rights under the Texas Data Privacy and Security Act, including access, correction, deletion, portability, and opting out of targeted advertising. If we deny a request you may appeal by replying to our decision; if the appeal is denied you may complain to the Texas Attorney General.

Retention and security

Lead and customer records are kept while you are a prospect or client and for as long afterward as we need them for tax, contractual, and legal reasons. Analytics records are kept for up to 24 months. Session replays are kept for up to 90 days. We protect all of it with the same controls we sell: access limits, multi-factor authentication, encryption in transit, and monitoring.

Children

This is a business-to-business website. It is not directed at children and we do not knowingly collect information from anyone under 18.

Changes

If we change what we collect or who receives it, we update this page and the date at the top, and material changes reset the consent banner so you get to choose again.

Contact

Aspendora Technologies · Houston, TX
hello@aspendora.com · (281) 941-4028