What we collect, and what we don’t.

The short version

If you only read one paragraph: we have no way to know you visited this page, there is nothing here to consent to, and the diagnostic never sends your data anywhere. The only information we hold about you is whatever you choose to put in an email to us.

The rest of this page is the honest detail, including the two places where data unavoidably passes through somebody else.

This page

No cookies are set. No analytics or tag manager runs. No fonts, scripts, images or stylesheets are loaded from any other domain — everything you are reading was served from sub-iq.com and nowhere else.

That is enforced rather than promised. The site is served with a content security policy of default-src 'none', which means a request to any third party does not quietly succeed — it fails, and the page visibly breaks. We chose it that way so the rule cannot be forgotten later.

There is no signup, no account, no trial and no mailing list, so there is nothing for us to store about you even if we wanted to.

The server that delivers it

This site is static files on a commercial hosting provider. Like every web server in existence, theirs records ordinary request information — the page requested, the time, an IP address, a browser user-agent string — in order to serve traffic and absorb abuse.

We do not combine those logs with anything, do not use them to build a profile of anyone, and do not consult them to find out who has been reading. But it would be inaccurate to tell you nothing is recorded anywhere, so we are telling you instead.

If you email us

The only way to contact us is hello@sub-iq.com, and it is a real mailbox that a person reads. That mail is hosted on Google Workspace, so Google processes and stores it the same way it stores any business email.

What we keep is the correspondence itself: your name, your email address, your employer if you mention it, and whatever you tell us about your instance. We use it to answer you and to carry out work you ask us to carry out. We do not add you to a list, and we do not sell, rent or share it.

Ask us to delete your correspondence and we will, and confirm it. Ask us what we hold and we will tell you.

The diagnostic

This is the part most people are actually asking about, so it is worth being exact.

• We never receive credentials. No account is created for us, no integration user, no API key, no login.
• We are not in the path. Your own administrator runs the check inside your own instance. You get the file to read first — and have your platform team read it — before anything runs.
• Nothing is transmitted. The check makes no outbound calls. It does not report to us, and it does not report to anyone else either.
• It reads; it does not write. Nothing is created, updated or deleted. No account is deactivated, no role is changed, and nobody’s working day is interrupted.
• We only ever see what you send us. If you want a written summary of the findings, you send us the output. You decide what is in that, and you can redact it first.

We also do not read your contract. If a number from your order form matters to the work, you tell us what it is.

Things we do not do

• No advertising, no ad networks, no retargeting, no tracking pixels.
• No selling or renting of anyone’s information, under any circumstances.
• No profiling, scoring or automated decisions about you.
• No unsolicited contact. We do not cold call and we do not cold email — if you hear from us, it is because you wrote to us first.

Children

This is a business-to-business tool for people administering enterprise software. It is not directed at children and we do not knowingly collect information about them.

If this page changes

The date at the top is the date it last changed. If something changes that affects anyone who has already written to us, we will say so in reply rather than relying on you to re-read this page.

Questions about any of the above go to the same address as everything else, and a person answers them.