Privacy Policy
The attestiqa™ application stores ALL engagement workpaper data locally in your web browser (localStorage). No engagement data is ever transmitted to attestiqa servers, third-party services, or any external system. The application runs entirely in your browser. This Privacy Policy applies solely to your interactions with the attestiqa.com marketing website, including any contact forms, email communications, and website analytics.
1. Introduction
This Privacy Policy describes how Walter W. Larkins, doing business as attestiqa (“attestiqa,” “we,” “us,” or “our”) collects, uses, and discloses information about you when you visit our website at attestiqa.com (the “Site”) and when you contact us.
By accessing or using our Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree to this policy, please do not use the Site.
This Privacy Policy is compliant with the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act (CCPA / CPRA).
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide to us when you:
- Contact us via email or telephone to request information or a demonstration;
- Subscribe to product updates or newsletters (if offered);
- Respond to surveys or questionnaires;
- Request a product license or pricing information.
The types of information collected include: your name, email address, telephone number, company name, professional credentials, and any information you voluntarily include in your communications with us.
2.2 Information Collected Automatically
When you visit our Site, we may collect certain technical information automatically, including:
- IP address and approximate geographic location (country/city level);
- Browser type, version, and operating system;
- Pages visited, time spent on pages, and navigation paths;
- Referring URL (how you arrived at our Site);
- Date and time of your visit.
This information is used for Site administration, security monitoring, and understanding how visitors use our Site in aggregate.
2.3 Cookies and Similar Technologies
Our Site may use cookies and similar tracking technologies. Cookies are small data files placed on your device. You can control cookie settings through your browser preferences. Disabling cookies may affect certain Site functionality.
We do not use third-party advertising cookies or sell your browsing data to advertising networks.
2.4 Information We Do NOT Collect
We do not collect:
- Any SOC 2 engagement data created using the attestiqa application (this data never leaves your browser);
- Client names, control evidence, or workpaper content from the application;
- Payment card numbers (we use a third-party payment processor if and when payment functionality is offered).
3. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries, requests, and communications;
- Provide product demonstrations, license keys, and customer support;
- Send product updates, security notices, and newsletters (to the extent you have opted in);
- Improve and maintain the Site;
- Monitor and analyze Site usage and trends;
- Detect, prevent, and address security incidents and fraud;
- Comply with applicable laws and legal obligations;
- Enforce our Terms of Use and End User License Agreement.
We do not use your personal information for automated decision-making or profiling.
4. How We Share Your Information
We do not sell, trade, rent, or license your personal information to third parties for their marketing purposes.
We may share your information with:
- Service Providers: Third-party vendors who assist with website hosting, email delivery, analytics, and payment processing, who are contractually obligated to protect your information and use it only as directed;
- Legal Compliance: We may disclose your information when required by law, court order, or governmental authority, or to protect the rights, property, or safety of attestiqa, our users, or others;
- Business Transfers: If attestiqa is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections described in this policy.
5. CalOPPA Disclosures (California Online Privacy Protection Act)
In compliance with CalOPPA, we make the following disclosures:
- Do Not Track: Our Site does not currently respond to browser “Do Not Track” signals. We will update this policy if our practices change.
- Third-Party Behavioral Tracking: We do not permit third-party behavioral tracking on our Site.
- Policy Updates: We will notify registered users of material changes to this policy via email and will post the updated policy with a new effective date.
6. California Consumer Privacy Act (CCPA / CPRA) Rights
If you are a California resident, you have the following rights with respect to your personal information:
- Right to Know: The right to request information about the categories and specific pieces of personal information we have collected about you, and how it is used and shared.
- Right to Delete: The right to request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: The right to request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. There is nothing to opt out of.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
- Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CPRA.
To exercise any of the above rights, please contact us at the information provided in Section 10 below. We will respond to verified consumer requests within 45 days as required by law. We may need to verify your identity before processing your request.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When information is no longer needed, we securely delete or anonymize it.
Contact records are typically retained for the duration of our business relationship and for up to three (3) years thereafter for compliance and audit purposes.
8. Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include secure email communications and access controls on any systems that store contact information.
No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using commercially reasonable means.
The attestiqa application itself uses AES-256-GCM encryption with PBKDF2-SHA256 key derivation (100,000 iterations) for all locally stored engagement data. This is a function of the application, not the website, and is described here for your awareness.
9. Children’s Privacy
Our Site and application are intended for use by licensed Certified Public Accountants and accounting professionals. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete such information.
10. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Walter W. Larkins, doing business as attestiqa235 E Broadway, Ste 624, #118
Long Beach, CA 90802
Email: Walter@AttestIQA.com
Phone: 562.449.0394
For CCPA requests, please include “CCPA Privacy Request” in the subject line of your email.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on this page with an updated “Last Updated” date. If we make material changes, we will provide additional notice, such as an email notification to contact records on file.
We encourage you to review this Privacy Policy periodically. Your continued use of the Site after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
12. Governing Law
This Privacy Policy is governed by the laws of the State of California. Any disputes relating to this policy shall be resolved in the courts of Los Angeles County, California.