Privacy Policy

Effective date: April 19, 2026 · Last updated: April 19, 2026

1. Introduction

UnRiskIT, LLC ("UnRiskIT," "we," "us," or "our") is a Texas limited liability company that develops and markets UnRiskIT® probabilistic decision and well-economics software. This Privacy Policy explains what personal information we collect from visitors to unriskit.net (the "Website"), how we use and protect it, and the choices and rights available to you.

By using the Website or submitting a demo, trial, or partnership request, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Website.

2. Scope

This Privacy Policy applies only to information we collect through the Website. It does not cover information collected through our products or services under a separate software license or services agreement, which are governed by the applicable agreement and any supplemental privacy notice.

3. Information We Collect

3.1 Information you provide

When you submit a demonstration, trial, or partnership request through our request form, we collect the information you choose to enter, which may include:

• First and last name
• Work email address
• Company or organization name
• Your role (for example: drilling engineer, project manager, researcher)
• Primary industry domain (oil & gas, geothermal, CCUS, hydrogen storage, or other)
• Request type (demo, trial, or partnership)
• Free-form message content you provide

You may also contact us directly by email. Any information you include in your email (your email address, signature, and message content) will be retained as part of our correspondence records.

3.2 Information collected automatically

When you submit the request form, our server records the following technical metadata alongside your submission:

• The IP address of the device used to submit the form
• The user-agent string reported by your browser
• The date and time of submission

We collect this metadata solely to investigate abuse, debug problems, and confirm authorship of a submission if questions arise. We do not use it to build advertising profiles.

3.3 Local browser storage

The Website uses localStorage (a browser storage mechanism) for a single purpose: to remember your light/dark theme preference between visits. The value stored contains the string "light" or "dark" under the key unriskit-theme. It contains no personal information and is never transmitted to our servers. You can clear it at any time through your browser's "Clear site data" controls.

We do not set any advertising or tracking cookies on the Website.

3.4 Server access logs

Our hosting provider maintains standard server access logs (including IP addresses and request paths) as part of operating the Website. Those logs are used for security and reliability purposes and are subject to the hosting provider's retention policy.

4. How We Use Your Information

We use the information described in Section 3 for the following purposes:

• To respond to your demonstration, trial, or partnership inquiry and schedule follow-up communication
• To provide trial access credentials and onboarding materials when you request them
• To evaluate and pursue research, teaming, or commercial opportunities that you initiate
• To maintain records of our business communications
• To operate, secure, and improve the Website
• To comply with applicable legal obligations and to establish, exercise, or defend legal claims

We do not sell, rent, or trade your personal information. We do not share it with advertisers or use it for automated profiling.

5. Legal Bases for Processing (EEA and UK Visitors)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:

• Performance of a contract or pre-contractual steps — processing your request for a demo, trial, or partnership is necessary to respond to your inquiry and prepare a potential engagement.
• Legitimate interests — maintaining security, preventing abuse of our Website, and keeping records of business communications are legitimate interests that we balance against your rights and freedoms.
• Consent — where you voluntarily provide us with information beyond what is required to respond to your request.
• Compliance with legal obligations — where processing is necessary to comply with law.

6. How We Share Information

We share personal information only in these limited circumstances:

• Service providers. We use third-party infrastructure providers to operate the Website and deliver form-submission emails. Our primary service provider is SiteGround, which hosts the Website and the email mailbox that receives form submissions. These providers process personal information on our behalf under their own privacy practices and appropriate contractual safeguards.
• Legal and safety. We may disclose information if required by law, subpoena, court order, or other legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
• Business transfers. If UnRiskIT is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before any such transfer that would result in materially different handling of your information.

7. Data Retention

We retain form-submission records for as long as reasonably necessary to respond to your request, for ongoing business communication, and for a reasonable period of audit and follow-up thereafter. We may retain records longer where required by law or for legitimate recordkeeping, dispute resolution, or legal compliance purposes. If you ask us to delete your information, we will do so promptly except where we have a legal or legitimate business reason to retain it.

8. International Data Transfers

UnRiskIT is based in the United States, and our Website and hosting infrastructure are located in the United States. If you access the Website from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for transfers of personal data from the EEA or UK to the United States.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, and destruction. Form submissions are transmitted over HTTPS. Submission records stored on our server are placed outside the publicly accessible web directory and access is restricted to authorized personnel. No method of transmission over the internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security.

10. Your Privacy Rights

10.1 Rights available to EEA and UK residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights with respect to your personal information, subject to certain legal conditions and exemptions:

• Right of access — to request a copy of the personal information we hold about you
• Right to rectification — to have inaccurate or incomplete information corrected
• Right to erasure — to request deletion of your personal information
• Right to restrict processing — to ask us to limit how we process your information
• Right to data portability — to receive your information in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on your consent, at any time
• Right to lodge a complaint — with your local data protection authority if you believe we have not handled your information lawfully

10.2 Rights available to California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) provides you the following rights, subject to certain exceptions:

• Right to know — what categories and specific pieces of personal information we have collected, used, disclosed, and (where applicable) sold or shared
• Right to delete — personal information we have collected from you
• Right to correct — inaccurate personal information
• Right to opt out of sale or sharing — we do not sell or share personal information as those terms are defined by the CPRA, so there is nothing to opt out of, but the right is preserved if our practices change
• Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes that would trigger this right
• Right to non-discrimination — we will not deny you services, charge different prices, or provide different quality of service because you exercised any of these rights

For purposes of the CCPA/CPRA, the categories of personal information we collect are: identifiers (name, email, IP address), professional or employment-related information (company, role, industry domain), and electronic network activity information (user-agent, submission timestamps). We disclose these categories to service providers as described in Section 6. We have not sold or shared personal information in the preceding twelve (12) months.

10.3 How to exercise your rights

To exercise any of the rights above, email us at info@unriskit.net with the subject line "Privacy Request" and describe your request. We will verify your identity (typically by confirming information you previously provided) before acting on a request. We will respond within the time period required by applicable law. You may designate an authorized agent to act on your behalf; we may require the agent to provide proof of authorization.

11. Do Not Track and Global Privacy Control

The Website does not use tracking technologies that respond to "Do Not Track" browser signals in a meaningful way, because we do not engage in cross-site tracking. Where required by law, we honor Global Privacy Control (GPC) signals as an opt-out of any sale or sharing of personal information (we do not engage in either, as noted above).

12. Children's Privacy

The Website is directed to business professionals, not to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided personal information to us, please contact us at info@unriskit.net and we will take appropriate steps to delete it.

13. Third-Party Links

The Website may contain links to third-party sites (for example, pages on our legacy domain or external references on the DOE partnership page). This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" and "Last updated" at the top of this page. If the changes are material, we will provide additional notice (for example, by posting a prominent notice on the Website). Your continued use of the Website after a change becomes effective constitutes your acceptance of the revised Privacy Policy.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Texas and the United States, without regard to conflict-of-laws principles. Any dispute arising out of or relating to this Privacy Policy shall be brought exclusively in the state or federal courts located in Texas, and you consent to the jurisdiction of those courts.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

UnRiskIT, LLC
PO Box 1150
Montgomery, TX 77356
United States
Email: info@unriskit.net