Privacy Policy
How ACORN CREEK CAPITAL LLC handles personal data on the ACC website and platform.
Version 2026-08-07 · published at acornteck.com
1. Scope
This policy covers the website at acornteck.com and the ACC messaging platform operated by ACORN CREEK CAPITAL LLC. It applies to account holders, visitors, and people who contact us. It should be read together with the Terms of Service.
2. Data we collect
- Account data — email address, mobile phone number, and a salted hash of your password (never the password itself), plus timestamps of account creation.
- Consent records — the exact text and version of the terms you accepted and of the optional communications consent, with the decision (granted or declined) and its time. We keep declined decisions too, so your choice is provable.
- Session data — opaque session cookies; only a cryptographic hash of the session token is stored server-side.
- Contact messages — what you send to the routing desk through the contact form, with your name and email.
- Traffic metadata — for platform use, message routing metadata such as destination, timestamps, and delivery receipts, retained for billing and audit.
3. How we use data
- to provide, secure, and bill the Service;
- to answer messages you send to the desk;
- to send product and route updates by email or SMS — only if you granted the optional communications consent, which you can withdraw at any time;
- to meet legal, tax, and anti-fraud obligations.
We do not sell personal data.
4. Cookies
The site sets one strictly necessary cookie: an HttpOnly session cookie after sign-in. There are no advertising or third-party analytics cookies.
5. Sharing
Message routing necessarily shares message content and destination numbers with the carrier networks that deliver them. Beyond that, we share data only with service providers that host our infrastructure, when required by law, or in a corporate transaction affecting the Service.
6. Security
Passwords are stored as salted scrypt hashes. Session tokens are stored only as hashes and expire automatically. Access to production systems is restricted and logged. No method of transmission or storage is perfectly secure, but we design so that a single leaked table does not become a working credential.
7. Retention
Account and consent records are kept for the life of the account and for the period required for legal and audit purposes afterwards. Contact messages are kept as long as needed to handle the inquiry. Traffic metadata follows billing retention requirements.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to withdraw the optional communications consent. Write to [email protected] and we will respond within a reasonable period.
9. Changes
Updates to this policy are published on this page with a new version date; material changes are notified to account holders by email. The current consent statement version is 2026-08-07.
10. Contact
Privacy questions go to [email protected], operated by ACORN CREEK CAPITAL LLC.