Last updated: 2026-09-23
This Privacy Policy explains how 3VS dba VERSUS VERSUS VERSUS LLC and Vantage Security, a subsidiary of Pegues OPSCORP LLC (together, “3VS,” “Vantage,” “we,” “us”) collect, use, share, and protect personal information when you use our client portal at web.3vs.io, order or pay for our services, contact support, or otherwise communicate with us.
1. Scope
This policy covers personal information we handle for our own business operations: client accounts, billing, support, communications, and the security of our systems. It does not cover data we process on behalf of a client while delivering a managed service (for example, monitoring, backup, or security findings about a client’s environment). For that data the client is the controller and we act as its processor under Section 6 of the Vantage Master Terms & Conditions and any applicable Offering Schedule or data processing agreement.
2. Information We Collect
2.1 Information you give us
- Account and contact details: name, company name, job role, email address, telephone number, postal address, and the contacts and users you add to your account.
- Sign-in details: your login email and password (stored in hashed form, never in plain text), and two-factor authentication settings if you enable them. If you choose to sign in with Google, we receive the basic profile information Google shares for that purpose, such as your name, email address, and account identifier.
- Billing information: orders, services, invoices, quotes, payment history, and tax details. Card and bank-account (ACH) payments are collected and processed by our payment processor, Stripe. Full card and bank-account numbers are entered directly with Stripe; we keep only the reference Stripe returns and limited details such as card brand, last four digits, and expiry date so you can recognise your saved payment method.
- Support and communications: the content of support tickets, emails, attachments, and any other messages you send us, and our replies.
- Preferences: your email and marketing preferences.
2.2 Information collected automatically
- Technical and log data: IP address, browser and device type, pages requested, and the date and time of requests, recorded in web server logs.
- Account activity: sign-ins, changes to your account, and other actions in the client portal, recorded with the time and IP address in our activity log.
- Security data: records of failed sign-in attempts, blocked requests, and other events generated by our intrusion-prevention and server security monitoring tools.
- Cookies and session data: see Section 5.
3. How We Use Information, and Our Legal Bases
| Purpose | Legal basis (where the law requires one) |
|---|---|
| Creating and administering your account; providing, supporting, and billing for the services you order | Performance of our contract with you |
| Processing payments, issuing invoices and receipts, collecting overdue amounts | Performance of contract; legal obligations (tax and accounting) |
| Answering support requests and sending service, security, and account notices | Performance of contract; legitimate interests |
| Protecting our systems and your account, detecting fraud and abuse, and investigating security incidents | Legitimate interests; legal obligations |
| Improving our portal and services | Legitimate interests |
| Sending news and offers by email | Your consent or, where permitted, legitimate interests. You can opt out at any time from your client-area email preferences or by writing to us. |
| Complying with law, court orders, and lawful requests from authorities, and establishing or defending legal claims | Legal obligations; legitimate interests |
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
4. How We Share Information
We share personal information only as needed for the purposes above, with:
- Payment processing: Stripe, for card and ACH payments.
- Email: Google Workspace, which we use for business email and to relay the email our client portal sends (invoices, ticket replies, and notices).
- Hosting and cloud infrastructure: DigitalOcean, which hosts our client portal, and Microsoft Azure, Amazon Web Services (AWS), and IONOS, which we use for infrastructure and services supporting our operations.
- Backups: Acronis, for backup of systems and data.
- Professional advisers such as accountants, auditors, and lawyers, under duties of confidentiality.
- Authorities and other parties where the law requires it, or where needed to protect the rights, property, or safety of 3VS, our clients, or others.
- A successor in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
Our service providers may use personal information only to provide their services to us, and may process it in the United States and other countries where they operate.
5. Cookies and Session Data
The client portal uses cookies that are necessary for it to work: a session cookie that keeps you signed in and your session secure, an optional “remember me” cookie if you select it at sign-in, and cookies that remember choices such as language and currency. Pages that collect payment details load Stripe’s payment components, which may set Stripe’s own cookies for fraud prevention. As of the date above, the client portal does not use third-party advertising or analytics cookies. You can block or delete cookies in your browser settings, but the portal will not work correctly without its session cookie.
6. Retention
- We keep account, billing, and support records for as long as you have an account with us and afterwards for as long as needed to meet legal, tax, and accounting obligations and to resolve disputes.
- Technical, activity, and security logs are kept for limited periods and rotated or deleted on a regular schedule; for example, service-integration debug logs are kept for 30 days.
- Backup copies are kept on a rolling schedule and replaced by newer copies over time.
- Data we hold on a client’s behalf in delivering a managed service is retained and deleted as set out in Section 6.4 of the Master Terms & Conditions and the applicable Offering Schedule.
7. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encrypted (HTTPS/TLS) connections to the client portal, hashed passwords, optional two-factor authentication for client accounts, restricted administrative access, intrusion prevention and server security monitoring, activity logging, and regular backups. No system is completely secure, and we cannot guarantee the security of information transmitted to us. Please keep your password confidential and enable two-factor authentication.
8. Your Rights and Choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct inaccurate or incomplete information (you can update most account details yourself in the client area);
- delete your personal information, subject to records we must keep by law or to complete transactions;
- object to or restrict certain processing, and receive your information in a portable format;
- opt out of marketing email at any time; and
- withdraw consent where we rely on it.
To make a request, email support@3vs.io or open a support ticket from the client portal. We will verify your identity before acting on a request, may ask an authorised agent for proof of authority, and will respond within the time the applicable law requires (for California requests, 45 days, extendable once as the law permits). We will not discriminate against you for exercising your rights. If you are in the European Economic Area or the United Kingdom, you may also complain to your local data protection authority.
9. California Privacy Notice (CCPA/CPRA)
If you are a California resident, the following applies in addition to the rest of this policy.
- Categories collected in the past 12 months: identifiers (name, email, phone, postal address, IP address, account identifiers); customer records and commercial information (orders, services, invoices, payment history); internet or other electronic network activity (log and activity data); professional information (company and role); and account login credentials, which are sensitive personal information.
- Sources: you, your organisation, your use of our portal and services, and our payment processor.
- Purposes: the business purposes described in Section 3.
- Disclosures: we disclose these categories for business purposes to the service providers listed in Section 4. We do not sell or share personal information as those terms are defined in California law, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.
- Sensitive personal information: we use account login credentials only to provide and secure your account, and not to infer characteristics about you.
- Your rights: to know, access, correct, and delete personal information, and not to be discriminated against for exercising these rights. Because we do not sell or share personal information or use sensitive personal information for other purposes, the rights to opt out of sale/sharing and to limit use of sensitive personal information do not currently apply. Submit requests as described in Section 8.
10. New York Residents (SHIELD Act)
We maintain reasonable administrative, technical, and physical safeguards to protect the private information of New York residents, as required by the New York Stop Hacks and Improve Electronic Data Security (SHIELD) Act. If a security breach affects the private information of New York residents, we will notify affected individuals and the required New York authorities as required by New York General Business Law § 899-aa.
11. Children
Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Third-Party Sites
Our portal and emails may link to third-party websites and services, including Stripe and Google sign-in. Those parties handle personal information under their own privacy policies, which we encourage you to review.
13. Changes to This Policy
We may update this policy from time to time. We will post the updated version on this page and change the “Last updated” date above. If we make material changes, we will also notify account holders by email or by a notice in the client portal before the changes take effect.
14. Governing Law
This policy is governed by the laws of the State of New York, without regard to conflict-of-laws principles, with venue in the state and federal courts having jurisdiction over Bronx County, New York, consistent with Section 10.1 of the Vantage Master Terms & Conditions. Nothing in this section limits rights you have under the privacy laws of the place where you live.
15. Contact Us
Questions or requests about this policy or your personal information:
- Email: support@3vs.io
- Client portal: open a support ticket at web.3vs.io
