Privacy
Privacy policy
What data of yours we hold, what for, who we share it with and how to ask us to delete it. In effect from October 15, 2026.
Who we are
Known Surface is a cybersecurity service in Guatemala. For any question about your data, write to hello@knownsurface.com.
What we collect
If you visit this site. We use no cookies, no analytics and no third-party trackers, and the fonts are served from our own site. If you choose a light or dark theme, that preference is stored only in your browser and never reaches us. Our hosting provider logs technical data about each visit, such as the IP address, the browser and the page requested, to run and protect the site.
If you write to us. Your email address and what you write. The form on this site sends nothing to a server: it opens your own mail program with the message ready.
If you fill in our form on LinkedIn. Your first and last name, email, company and job title, and your answer about who runs IT at your company. LinkedIn also processes that data under its own privacy policy.
If you are a client. Data from a service contract is governed by the engagement letter we sign, not by this page.
What we use it for
To reply to you, schedule the four-questions conversation, prepare for it and follow up. Before we meet we may read your domain's public DNS records; that is a lookup of information your domain already publishes, not an assessment of your systems.
We do not sell or rent your data, we do not share it for third-party advertising and we do not add you to any newsletter without your permission.
Automated replies
The first reply to a form may come from an automated assistant built on Grok, by xAI. It only confirms that we received your message and offers you times to meet. It makes no decisions about you, and a person reviews every conversation. If you would rather deal only with a person, tell us and that is how it will be.
Who we share it with
Only the providers we need in order to serve you, and only the data each one needs:
- LinkedIn, for its ad forms.
- xAI, for the assistant that sends the first reply.
- Railway, which hosts this site.
- Our email provider.
These providers may process data outside Guatemala, mainly in the United States. Beyond them, we hand data to an authority only when the law requires it.
How long we keep it
If we do not end up working together, we delete your contact details twelve months after our last exchange. If you are a client, whatever the engagement letter says.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it or stop sending you automated replies. Write to hello@knownsurface.com and we will reply within thirty days at most.
How we protect it
Only the people handling your request see your data. The site is served over HTTPS only.
Legal framework
Guatemala does not yet have a general personal data protection law; bills are pending in Congress. We apply these rules anyway and will adjust them if a law is passed.
Changes to this policy
The date above says when it last changed. If we change anything important, we note it here with its date.