Privacy Policy
Changes in v1.4.0 (2026-08-21): we now describe Google Ads conversion measurement. Our Google Analytics property is linked to our Google Ads account, which sends some analytics traffic to a Google advertising domain and records a conversion on our contact page; the previous statement that we do not enable cross-site advertising trackers has been replaced with a description of what this measurement does and does not do, and of the settings we keep switched off. Google LLC’s entry in our list of service providers has been extended to cover it, retention periods for analytics data and cookies have been stated, and we describe one conversion event we intend to import into Google Ads.
Changes in v1.3.0 (2026-08-19): we now describe our use of Google reCAPTCHA to tell people apart from automated traffic when you verify your identity, and Google LLC’s entry in our list of service providers has been extended to cover it.
Changes in v1.2.0 (2026-08-18): the description of when we collect a phone number and a consent record now names the contact form alongside the Assistant and assessments, and states that this applies when you verify by text message. This is a clarification of existing practice: verifying by text message when sending us a message is an option we may offer on the contact form, and it collects the same phone number and consent record as the other two.
Changes in v1.1.0 (2026-08-18): we now use Google Analytics 4 to measure aggregated site usage — the cookie and analytics description below has been updated and Google LLC added to our list of service providers; Anthropic’s role is described more broadly to cover assessments and remediation sessions; and retention periods for assessment inputs, remediation reports, and the related transaction records have been stated.
Who we are
M@B Consulting (“M@B”, “we”) is a California consulting practice. Mailing address: 47000 Warm Springs Blvd, Ste 1 #221, Fremont, CA 94539. Questions about this policy: consulting@matb.ai.
What we collect
We collect only what the site’s features need: (a) questions you ask the CARS Act Assistant and its answers; (b) a phone number and your consent record when you verify by text message — whether to use the Assistant, to take an assessment, or to send us a message through the contact form; your acceptance record if you accept the Assistant’s disclaimer; and a record of any text-message opt-out you send us, including the message itself; (c) a name and email address if you choose to provide them; (d) contact-form submissions; (e) your IP address — held in hashed form for rate limiting and abuse prevention, and kept as recorded within consent and acceptance records so those records can show what was agreed to, when, and from where. We use one first-party cookie, which contains only a random signed identifier, lasts up to 60 days from your last visit, and is used to remember your Assistant usage, verification, disclaimer acceptance, and any purchased credits; it is not used for advertising or cross-site tracking. We use first-party session cookies and Google Analytics 4 cookies to measure aggregated site usage and traffic performance. Our Google Analytics property is linked to our Google Ads account, which turns on conversion measurement: on every measured page some of that analytics traffic is also sent to a Google advertising domain, and on our contact page Google sets one additional first-party cookie — a conversion linker, lasting about 90 days — and records that the page was reached. We do not enable Google Signals, and we disable Google’s ads personalization signals; those are the settings that would otherwise let this measurement be used to personalise advertising to you. We do not use remarketing or retargeting tags, and we do not display advertising on this site. We also intend to import one conversion event into Google Ads — a record that a message was successfully sent through our contact form — to measure the effectiveness of advertising campaigns we may run; that event records only that a message was sent, and carries no name, email address, telephone number, or message content. We do not respond to browser “Do Not Track” signals, and apart from the Google conversion measurement described here we do not permit third parties to collect personally identifiable information about your online activities over time and across other websites through matb.ai.
Protecting the site from automated abuse
When you verify your identity — to use the Assistant, to take an assessment, or to send us a message through the contact form — we use Google reCAPTCHA to tell people apart from automated traffic. reCAPTCHA collects device and interaction information from your browser and sends it to Google, which returns a score we use to decide whether to complete the request. Your use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.
How we use it
To answer your questions, verify that requests come from a real reachable person, respond to enquiries, send a one-time welcome email if you give us your email address, protect the site from abuse, and — if you purchase credits in future — deliver what you bought.
Who processes it for us
Service providers acting on our instructions: Anthropic (the AI service provider that powers our interactive tools, assessments, and remediation sessions), Twilio (text-message delivery and phone line-type checks), SendGrid (email delivery), Hostinger (website hosting), Google Workspace (business email), Google LLC (Google Analytics, Google Ads conversion measurement, and reCAPTCHA), and Stripe (payments, when purchases launch; your card details go to Stripe, not to us). These providers may process data outside California.
How long we keep it
Consent, verification, and opt-out records, lead records (name, email, phone), and contact-form submissions: 7 years from last contact. Assessment inputs, generated remediation reports, and the transaction records tied to them: 7 years from date of purchase. Assistant conversation logs: 12 months. Advisor session content is held by our AI service provider for the life of the session and is not separately stored by us; the generated report is retained as above. Google Analytics event data: 14 months; the Google Analytics cookies described above last up to 400 days from your last visit, and the Google Ads conversion linker cookie about 90 days. Hashed rate-limit data: automatically expires within days.
Your choices
You can use the Assistant without giving a name or email. You can opt out of text messages by replying STOP. You can unsubscribe from any non-essential email via its unsubscribe link. To ask what we hold about you, or to request correction or deletion, email consulting@matb.ai and we will respond within 30 days. We provide these access, correction, and deletion options voluntarily as a matter of business practice; doing so does not waive our position that the CCPA/CPRA does not apply to our business.
Children
The site is a business service and not directed to children under 16; we do not knowingly collect their information.
Changes
We will post any changes here with a new effective date; material changes will be noted prominently.