Privacy Policy
The short version
We collect what you type into our forms, plus anonymous counts of how the site is used. We use it to do the thing you asked us to do. We do not sell it, rent it, or trade it. Want to see what we have, or want it gone? Email [email protected].
The rest of this page says the same thing with the details filled in.
What we collect, and what it's for
When you book a free assessment
The form at /book/ asks for your name, email, phone, preferred way to reach you, company, website, industry, team size, revenue range, the workflows you want to talk about, and how you heard about us. After you submit, you can optionally add prep details for the call.
We use this to reply within 24 hours, schedule your assessment, and prepare for it. Your submission becomes two emails: one to the advisor who prepares your call, and a confirmation to you. There is no marketing database behind the form, and booking an assessment does not add you to our newsletter.
When you take the AI-Ready Score
The AI-Ready Score collects your answers and, if you want the full report, your email. Your submission is stored in the Score application's database so your report keeps working at its link. When you finish, three things happen: you get one report email, we get notified that someone completed the Score, and your email is added to The Ampersand (our newsletter, run on beehiiv) along with a summary of your result — your score, phase, industry, and headcount band — so any notes we send you are relevant.
The promise on the Score itself holds here too: Your answers stay between us. One report email, occasional notes from the book, unsubscribe in one click. We do not sell lists. And the deletion path is real: Want your data gone? Email [email protected] and we delete everything — your submission from the Score database and your newsletter subscription.
If you book a call from your report, scheduling runs through Calendly, which collects your name, email, and meeting time under its own privacy policy.
When you use the ROI calculator
Nothing. The calculator runs entirely in your browser. The numbers you enter are never sent to us, stored, or seen by anyone but you.
When you apply to work with us
The application form at /careers/ asks for your name, email, a link to your work, and a cover note, plus an optional phone number, an optional note on where you heard about us, and an optional résumé (PDF, DOC, or DOCX). Applications are relayed to our inbox by Formspree, a form-processing service.
The promise on the form stands: we use your details only to consider your application. We never share them. Applying does not add you to any list.
When you subscribe to The Ampersand
The signup form sends your email directly to beehiiv, the platform that publishes our newsletter. One field, no spam, leave anytime — every issue has a one-click unsubscribe link.
Analytics and logs
- Main site: we use Plausible, a privacy-focused analytics service. It counts page views and button clicks in aggregate, without cookies and without building a profile of you. When we track that a "book" or "score" button was clicked, the event records which button and where it sits on the page — not who clicked it.
- Score pages: the /score experience uses Google Analytics (GA4) to measure how people move through the assessment. Google Analytics uses cookies. It runs only on the Score pages, not the rest of the site.
- Server logs: our hosting providers (Cloudflare for the site, Vercel for the Score app) keep standard server logs — IP address, browser type, pages requested — for security and operations, on their usual retention schedules.
- Spam control: when you submit the assessment form, your IP address may be used to rate-limit repeat submissions. That record is kept for at most one hour.
- Fonts: our pages load type from Google Fonts. Like any web request, fetching a font shares your IP address with the server that hosts it — in this case, Google.
What we never do
- We do not sell, rent, or trade your personal information. We never have.
- We run no ad pixels, no retargeting, and send nothing to data brokers.
- The main site sets no tracking cookies. The one exception is Google Analytics on the Score pages, disclosed above.
How long we keep it
- Assessment and contact requests: for as long as we have an active or prospective relationship with you, then as long as tax and business records require. Ask and we delete sooner.
- Score submissions: for as long as the Score runs, so your report link keeps working. Deleted on request.
- Job applications and résumés: up to one year after the search closes, in case a fit opens later. Deleted sooner on request. If we hire you, your application becomes part of your employment records.
- Newsletter subscriptions: until you unsubscribe.
- Spam-control IP records: one hour.
Service providers
A small, named set of companies helps us run things. Each one processes your data only to provide its service to us, under its own terms and privacy policy.
- Cloudflare — hosts and serves this site. Handles server logs, form traffic in transit, and spam rate-limiting.
- Vercel — hosts the AI-Ready Score application and its database. Holds Score answers, emails, and reports.
- Resend — sends our transactional email. Carries form submissions, confirmations, and Score reports in transit.
- beehiiv — publishes The Ampersand. Holds subscriber emails and, for Score takers, the result summary described above.
- Formspree — relays careers applications, including résumés, to our inbox.
- Plausible — main-site analytics. Aggregate, cookieless counts; no personal data.
- Google — Analytics on the Score pages; web fonts sitewide.
- Calendly — schedules calls booked from your Score report.
Your rights
California's Consumer Privacy Act and the Colorado Privacy Act give residents rights over their personal data. Those laws technically bind businesses far larger than ours. We follow them anyway, for everyone, in every state:
- Know and access: ask what we hold about you and get a copy in a usable format.
- Correct: fix anything we have wrong.
- Delete: ask and we delete it, everywhere we put it.
- Opt out of sale and targeted advertising: there is nothing to opt out of. We do neither.
- No retaliation: exercising these rights never changes how we treat you.
To use any of them, email [email protected] from the address we have on file — that is how we verify it's you. We respond within 45 days. If we ever refuse a request, you can appeal by replying to our response; Colorado residents can also raise a denied appeal with the Colorado Attorney General.
Children
This site is for businesses. It is not directed to anyone under 16, and we do not knowingly collect information from children. If you believe a child has given us personal data, tell us and we will delete it.
Security
Every page and form on this site is served over an encrypted connection. Your data flows to the small set of providers named above and to our own inboxes — not into a sprawling stack — and access is limited to the people doing the work. No system is perfect. If a breach ever affects your data, we will notify you as the law requires, and sooner if we can.
Changes to this policy
When this policy changes, the version number and dates at the top change with it. If a change is material — new data collected, a new provider, a new use — we will say so plainly on this page.
Contact
Main & Machine · Denver & Phoenix
[email protected] · 480-805-9983