What this site keeps about you, and for how long.

This policy covers the business advisory pages of michaelammaturo.com, including the assistant, the written form, and the QR contact card. I run the site myself, and I read everything that comes through it myself. The short version: I collect what you choose to give me so that I can get back to you, I do not sell it or hand it to advertisers, and conversations with the assistant are erased after ninety days.

What you give me, and what I do with it

The written form

The form asks for your name, your email, and a message. Phone number and business name are optional. The form records which page you sent it from, so I know what you were reading. It is delivered to my mailbox by email and is not stored anywhere else. A hidden field catches automated submissions; if a bot fills it in, the message is dropped.

The assistant

The assistant on the site is an AI, not a person. When you start a conversation, everything you type is kept, along with the details it asks for: your name, how to reach you (email or phone), your business and the kind of work it does, where you are, and a short summary of your situation in my terms. It also records which page you were on and which button you used afterward, so I know whether you booked a time, called, or emailed.

Each of your messages is sent to Anthropic, the company whose model generates the replies. Anthropic processes it under its commercial terms, which do not permit using it to train models. When you share a way to reach you, or when you leave a conversation after doing so, a brief is emailed to me with the summary and the transcript. The conversation itself is stored in Cloudflare's systems, in a per-conversation record and in a small database of inquiries.

Please treat the assistant as a stranger at a front desk: do not give it passwords, account numbers, or anything you would not put in an email to a business you have not met yet.

Booking a call

Booking opens a Google Calendar appointment page. Google's privacy policy applies to what you enter there; I receive the name, email, and notes you give it, and the appointment lands on my calendar.

The QR contact card

The card page offers my own contact details for download. It collects nothing from you.

Email and calls

If you email or call me directly, I keep the correspondence the way any business keeps its mail.

What happens automatically

Hosting. The site runs on Cloudflare. Like any host, Cloudflare sees your IP address, your browser type, and the pages you request, and keeps short-lived server logs for security. I do not store your IP address. The assistant uses it only to limit how fast one visitor can send messages, and that limit resets within a minute.

Bot check. Starting a conversation runs Cloudflare Turnstile, which looks at browser signals to tell people from scripts. Most visitors never see it. Cloudflare's privacy policy covers that check.

Analytics. Cloudflare Web Analytics gives me page counts and loading speed in aggregate. It uses no cookies and no fingerprinting, and I cannot identify anyone from it.

Cookies. This site sets no cookies of its own, and there are no advertising pixels, social-media widgets, or Google Analytics. Cloudflare may set a strictly necessary cookie as part of its security checks; it is not used to follow you across sites.

Who else sees it

Three companies process data on my behalf, each only for the job named above: Cloudflare (hosting, storage, email delivery, bot check, analytics), Anthropic (the assistant's replies), and Google (calendar booking). I do not sell personal information, share it for marketing, or let anyone else use it. I would disclose it only if the law required me to.

How long I keep it

Assistant conversations are erased ninety days after your last message: the name, contact details, business, summary, and transcript are removed, and only a count remains. Messages from the form and from email are kept as ordinary business correspondence for as long as the inquiry or the relationship lasts, and are deleted when you ask. If we work together, the records of that engagement are kept as the engagement requires, and invoices for as long as tax law demands.

Your choices

You never have to use the assistant. The written form, email, and a phone call all reach me. You may ask me at any time what I hold about you, ask me to correct it, or ask me to delete it. I will answer within thirty days. The only things I cannot delete on request are records the law requires me to keep, such as invoices. I offer these choices to everyone, wherever you live.

Children

These pages are written for people running or growing a business. I do not knowingly collect information from anyone under thirteen. If you believe a child has sent me something, tell me and I will delete it.

Security

Everything travels over HTTPS. Data sits in Cloudflare's systems, and only I have access. No system is perfect; if a breach ever affected you, I would tell you as the law requires.

Changes

If this policy changes, the date at the top changes with it, and anything material is explained here rather than buried.

How to reach me about privacy

Use the form on the home page, call the business line at 518-306-1235, or write to Bendicoot LLC, PO Box 27, Shushan, NY 12873-0027.