Privacy Notice

1. Who We Are

Dr. Nolyn Johnson LLC — 5865 Ridgeway Center Pkwy, Suite 300, Memphis, TN 38120. We operate vCISO consulting services via drnolyn.com and Diliventa™, an AI-powered vendor security assurance platform at diliventa.io.

2. Information We Collect

Website: Name, organization, email, phone, and message from our contact form. No tracking pixels or advertising cookies.

Diliventa™: Account data, vendor assessment data, uploaded documents, billing info via Stripe, and usage logs.

Automatic: Server logs (IP, browser, pages) for security monitoring only.

3. How We Use It

• Respond to consultation requests
• Deliver vCISO services and engagement agreements
• Operate Diliventa™ platform accounts
• Process billing via Stripe
• AI-assisted vendor document analysis (Diliventa™)
• Security monitoring and immutable audit logs
• Legal compliance

We do not sell your data, send marketing emails, or use your data for advertising.

4. Sub-Processors

• Webflow — website hosting
• Cloudflare — CDN, API, R2 storage
• Neon — PostgreSQL database
• WorkOS — authentication
• Stripe — payments (PCI DSS L1)
• Anthropic — AI analysis
• Sentry — error monitoring
• VirusTotal — malware scanning
• Grasshopper — business phone

5. AI Processing

Diliventa™ uses Anthropic Claude to analyze vendor documents. Documents go to Anthropic only to generate analysis — they are not used to train AI models. All determinations require human sign-off. You may opt out via the manual scoring workflow.

6. Retention & Your Rights

Contact forms: 24 months. Diliventa™ data: subscription duration + 90 days. Audit logs: 7 years. Tennessee residents have rights under TIPA. Request access, correction, or deletion: njohnson@drnolyn.com. We respond within 45 days.