Privacy Policy

Who runs this site

CMMCg runs cmmcg.com. In this policy, “we” and “us” mean CMMCg. For any privacy question, email hello@cmmcg.com.

What we collect

We collect only what you give us through the site, plus a small record of how the site is used.

• The readiness call form on the contact page: company name, your role, number of employees, whether you handle Controlled Unclassified Information (CUI), your Supplier Performance Risk System (SPRS) score status, your contract deadline, your name, your work email and, if you choose, a phone number.
• The short form that can appear when you go to leave a page: your company name and work email.
• The Resource Library form: your name, company, business email and industry. We also record which documents you download and which pages you read afterwards, so we know what was useful to you.
• The assistant: the questions you type and the answers it gives. We store each conversation against a random id, not against your name.
• Site usage: which pages are viewed, the referring page, and steps such as opening the assistant or finishing the readiness check. For the readiness check we keep the summary result, not your individual answers.

Why we use it

We use what you send to reply to you, to prepare for a conversation about your compliance program, and to understand which pages and documents are useful. We do not sell your information. We do not share it with anyone for their own marketing. The site has no advertising trackers.

Who processes it for us

These companies process data on our behalf to run the site:

• Vercel hosts the website. Like any web host, it handles standard request data such as your IP address to serve and protect the site.
• Neon hosts the database where form submissions, downloads, assistant conversations and site usage are stored.
• Resend delivers the email that tells our team a form was submitted.
• OpenRouter sends your assistant questions to the artificial intelligence model that writes the answer.
• Google Analytics measures visits to cmmcg.com.

This website is built and maintained by Fishtown Development, who can access site data only to run and support it.

The assistant

The assistant is automated. Your messages are processed by an artificial intelligence model through a third-party provider. Do not enter Controlled Unclassified Information, export-controlled data, passwords or other sensitive information. Answers can be wrong or out of date. Check anything that matters with us or against the source regulation.

Cookies and browser storage

• Resource Library cookie. When you complete the Resource Library form, we set one cookie that remembers you for a year, so you do not have to fill in the form again and so we can see which documents you use. It holds a signed id, not your name or email. Nobody gets it without filling in the form.
• Browser storage. The site keeps a random id for your current tab, which is deleted when you close it. It also remembers whether you have already sent us a form, so it does not ask again.
• Google Analytics sets its own cookies on cmmcg.com. To opt out, use Google’s Analytics opt-out browser add-on or block cookies in your browser settings.

You can clear cookies and site storage in your browser at any time. The site still works without them.

How long we keep it

We keep information as long as we need it to provide the service, or as long as the law requires.

Your choices

To see what we hold about you, correct it, or ask us to delete it, email hello@cmmcg.com. We will reply from that address.

Children

This site is for businesses. It is not directed to children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we will post the new version here and update the date at the top. The Terms of Use cover the rest of how the site may be used.