Last Updated: April 28, 2025
This Privacy Policy explains how MuniVendor (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our website [munivendor.com] (the “Site”). By using the Site, you agree to the terms outlined below.
1. Information We Collect
We collect data in two ways:
a) Automatically Collected Data (via Google Analytics)
When you visit our Site, we use Google Site Kit connected to Google Analytics to collect anonymized information about your interaction with the Site. This may include:
- IP address (anonymized by Google Analytics)
- Browser type and version
- Pages visited, time spent on pages, and referral sources
- Device type (e.g., mobile, desktop)
- Cookies and usage data (see Section 5 for details).
Google Analytics processes this data to help us analyze Site traffic and improve user experience. For more details, review Google’s Privacy Policy.
b) Voluntarily Submitted Data (Contact Form)
When you submit our “Contact Us” form, we collect the following details:
- Full name
- Organization name
- Organization address
- Work phone number
- Work email address
- Preferred time to call
This information is provided voluntarily and with your explicit consent.
c) Security-Related Data
We use a web application firewall (WAF) to monitor and protect the Site against cybersecurity threats. This tool automatically collects technical data about visitors, including:
- IP addresses (non-anonymized, for threat analysis)
- Browser/user agent details
- Request timestamps and URLs accessed
- Patterns indicative of bots, scrapers, or malicious activity
This data is used solely for cybersecurity purposes, such as identifying and blocking threats.
2. How We Use Your Information
- Automatically Collected Data: Used to analyze Site performance, improve content, and optimize user experience.
- Voluntarily Submitted Data: Used to respond to your inquiries, provide requested services, and communicate with you.
- Security-Related Data: To detect, investigate, and block malicious actors (e.g., bots, scrapers, or nefarious IP addresses), conduct cyber threat hunting, and protect the Site and its users.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
3. Sharing Your Information
We may share your data with:
- Service Providers: Third-party tools (e.g., Google Analytics, email hosting) that assist in operating the Site. These parties are contractually obligated to protect your data.
- Legal Compliance: If required by law, court order, or government request.
- Cybersecurity Providers: We share security-related data (e.g., blocked IP addresses) with third-party WAF providers and threat intelligence services to enhance protection.
4. Data Retention
- Google Analytics Data: Retained for up to 26 months, as per Google Analytics settings.
- Contact Form Data: Retained as long as needed to fulfill your request or until you ask us to delete it.
- Security Data: Retained for as long as necessary to investigate threats, maintain blocklists, and comply with legal obligations (typically up to ten years).
5. Cookies and Tracking Technologies
We use cookies via Google Analytics to track Site usage. You can manage cookie preferences through your browser settings or opt out of Google Analytics using Google’s Opt-Out Tool.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
6. Your Rights
Depending on your location (e.g., under GDPR or CCPA), you may:
- Request access to, correction, or deletion of your data.
- Withdraw consent for data processing.
- Opt out of analytics tracking.
To exercise these rights, contact us through the contact form below.
7. Security
We implement industry-standard measures (e.g., encryption, secure servers) to protect your data. However, no online transmission is 100% secure. We also employ a web application firewall (WAF) and advanced threat-hunting practices to safeguard the Site. This includes:
- Automatically blocking IP addresses associated with bots, data scraping, or malicious behavior.
- Analyzing traffic patterns to identify and mitigate emerging threats.
- Retaining security logs to audit and improve our defenses.
Note: Blocking decisions are automated and based on objective indicators of harm. If you believe your IP was blocked erroneously, contact us using the form below.
8. Policy Updates
We may update this policy periodically. Changes will be posted here with a revised “Last Updated” date.
9. Contact Us
For questions, requests, or concerns about this Privacy Policy, contact us through the form below. Please note that if you use the contact form below in a way that is not intended, then MuniVendor reserves the right to ignore your contact request and to block your IP from our site.