What this page covers

This covers cara-analytics.com: the website you are reading and the audit-request form on it.

It does not cover client data. If you hire us, the data your business hands over for us to work on is governed by our services agreement and its data-processing terms, which are stricter than this page and specific to your engagement.

What we collect, and why

Only what the form asks for:

• Your name — so the reply is addressed to a person.
• Your business (optional) — context before we talk.
• Your email address — so we can reply, and so the confirmation reaches you.
• What you would automate (optional) — so we arrive at the call having thought about it.

Two technical things happen alongside that. Your IP address is hashed and counted so the same address cannot flood the form; the count expires after an hour and the address itself is never written down in readable form. And the companies that host the site and send the email keep their own short-term operational logs, the way every host does.

The cost calculator on the home page is worth a specific mention: those numbers are calculated in your browser and never sent anywhere. We never see them.

What we never do with it

• We do not sell it, rent it, or trade it. Not now, not later, not as part of selling the business.
• We do not share it with anyone for their own marketing.
• We do not add you to a mailing list. If you want one, you will have to ask.
• We do not use it to train AI models, ours or anyone else's.
• There are no ad pixels, no retargeting tags, and no session recording on this site.

Who else handles it

Three companies touch your message on the way to us. Each acts on our instructions and none of them is allowed to use your details for their own purposes:

All three are US companies. If a legal order ever compelled disclosure, we would comply only as far as the law required, and we would tell you unless we were prohibited from doing so.

Cookies and tracking

This site sets no cookies of its own, runs no analytics, and loads no third-party scripts on page load. Nothing follows you from here to anywhere else.

The one exception is the spam check on the form: when it runs, Cloudflare may set a short-lived technical cookie to tell a person from a bot. It is not used to build a profile of you or to track you across other sites.

How long we keep it

• If we end up working together — for as long as the engagement runs, plus the period we are required to keep business records for tax and contract purposes.
• If we do not — we delete the inquiry within 24 months of our last contact.
• If you ask us to delete it sooner — we do, and that request is honored regardless of where you live.

Your choices

Email mike@cara-analytics.com and ask us to do any of the following:

• Send you a copy of what we hold about you.
• Correct something that is wrong.
• Delete it.
• Stop contacting you.

We will act within 30 days and there is no charge. You do not need an account for any of it. We may need you to confirm you control the email address in question, because handing someone's inquiry to the wrong person would be its own privacy problem.

Some of these are legal rights in some states and not in others. We are not going to make you check which. You get all of them either way.

Security

The site is served over HTTPS only, with a strict content-security policy and no third-party scripts. The form is validated on the server, rate-limited and spam-checked, and every key it uses lives in protected configuration rather than in the code.

No system is perfectly secure, so a practical request: do not put sensitive personal information into the form. Social Security numbers, account numbers, payroll figures, and anything about someone's health do not belong in a first contact message. If that material is part of what you need help with, say so in general terms and we will set up a proper channel for it.

Children

This site is aimed at businesses, is not directed at children under 16, and we do not knowingly collect information about them. If you believe a child has sent us something, email us and we will delete it.

Where this happens

We are based in the United States and the services above process data in the United States. If you are contacting us from elsewhere, that is where your message ends up.

Changes

If this policy changes in a way that matters, the effective date at the top of this page changes with it. There is no version of this where the rules get quietly looser after you have already written to us.

Who you are dealing with

Cara Analytics LLC, a Pennsylvania limited liability company. Questions about any of this, including anything you think is wrong or unclear, go to mike@cara-analytics.com and reach a person, not a ticket queue.