Privacy Policy

2. What I collect

Information you give me:

• When you book a call: your name, email address, time zone, your answers to the booking questions (about your business and what you’d like help with), and a phone number if you choose to add one. Cal.com collects this through its booking widget.
• When you subscribe: your name, email address, billing address, and payment method. Stripe collects and stores these. I see your name, email, billing country and postal code, the card brand and last four digits, and payment status. I never see or store full card numbers.
• When we talk: video calls booked through Cal.com run on Cal Video, and calls and texts to or from my business number run through Quo. Calls may be recorded, with an automatic transcript or summary, so I don’t miss anything. I tell you at the start of the call, either with a recorded announcement or by asking you myself, and staying on the call means you agree. If you’d rather not be recorded, tell me and I’ll stop recording. After a recorded video call, Cal.com may email you a link to download the recording. Quo also keeps the number you call or text from, the time and length of each call, voicemails you leave, and text messages.
• When we work together: your emails and messages, files you send, logins and credentials you share, information about your business, and what you add to your private request board.
• When you refer someone, or someone refers you: the referrer’s name and contact details, the new client’s name, how to pay the reward (such as a Venmo, Zelle, or PayPal handle), and, when tax rules require it, the referrer’s legal name and tax information.

Information collected automatically:

• Analytics: the Website uses Google Analytics and PostHog to understand how it’s used: pages viewed, time on page, clicks, the site you came from, approximate location (city level, worked out from your IP address), and device and browser type. They set cookies, or use similar identifiers, to recognize a returning browser. PostHog may also capture how a page is used, such as scrolling and clicks, with anything you type masked. I don’t connect analytics data to your name or email, and I don’t use it for advertising.
• Server logs: Amazon Web Services, which hosts the Website, keeps logs of requests, including IP address, browser type, pages requested, and timestamps, for security, troubleshooting, and performance. I keep them for a limited time.
• When you scroll to the booking calendar, Cal.com’s widget loads. It may set its own cookies and collect usage information under Cal.com’s privacy policy (opens in a new tab). Stripe’s checkout and billing pages do the same under Stripe’s privacy policy (opens in a new tab), including for fraud prevention.

I don’t collect precise location or information about children, I don’t use call recordings to identify anyone by voice or face, and I don’t ask for sensitive categories of information. If you include something sensitive in a message, I treat it as confidential and use it only for your request.

3. Cookies

Cookies are small files a website stores in your browser. The Website uses:

• Analytics cookies from Google Analytics (names starting with _ga) and PostHog (names starting with ph_), which recognize a returning browser so visits aren’t double-counted. They last up to two years unless you delete them.
• Cookies set by Cal.com inside the booking widget and by Stripe on its checkout and billing pages, so those services work and can prevent fraud.
• While I’m running ads: Meta’s pixel cookie (_fbp), lasting up to 90 days. It lets Meta count that a visitor who clicked one of my ads reached the site, booked a call, or subscribed, and Meta may use it to show my ads to that person again. It isn’t set when your browser sends a Global Privacy Control signal, and ad blockers stop it.
• No other advertising or social-media cookies.

You can delete or block cookies in your browser settings, and the Website still works without them. You can also opt out of Google Analytics on every site with Google’s browser add-on (opens in a new tab). Google describes its side in How Google uses information from sites that use its services (opens in a new tab).

4. How I use it

I use personal information to:

• respond to you and hold the intro call;
• take accurate notes of our calls, from recordings and transcripts when you’ve agreed to them;
• understand how the Website is used and improve it;
• provide the Services, communicate about your requests, and keep a record of what we decided;
• bill you, and handle failed payments, refunds, and disputes;
• send service notices, such as receipts, changes to the Terms, and notice of a transfer to a business entity;
• keep business, tax, and legal records;
• protect against fraud, abuse, and security incidents; and
• comply with the law.

I don’t use your information to build advertising profiles, and I don’t make automated decisions about you. I won’t send marketing email unless you opt in, and any marketing email would include an unsubscribe link.

5. Who else sees it

I don’t sell personal information. Apart from the ads pixel described in Section 3, I share it only with the services I use to run MyTechGuy, each under its own terms and security practices:

• Cal.com, for scheduling calls, and for Cal Video, which hosts our video calls and stores their recordings and transcripts;
• Quo, for my business phone number: calls, voicemails, text messages, and call recordings, transcripts, and summaries;
• Stripe, for payments, the billing portal, and fraud prevention;
• Amazon Web Services, which hosts the Website and keeps its server logs;
• Google Analytics and PostHog, for website analytics (Section 2);
• Meta (Facebook and Instagram), for the ads pixel while I’m running ads (Section 3);
• Google, for email and calendar;
• Linear, for the private board where your requests and progress are tracked (request titles, descriptions, files you attach, and comments);
• a password manager, for credentials you share with me;
• Venmo, Zelle, or PayPal, to pay referral rewards;
• private code and file storage (such as GitHub), for project work; and
• AI assistants from providers such as Anthropic and OpenAI, used under business terms with training on my inputs turned off where that option exists (see Section 6 for how I limit what goes into them).

I may also share information with professional advisers (an accountant or attorney) under confidentiality; with a business entity I form or a successor that acquires MyTechGuy, in which case clients are notified as the Terms describe; and with courts or law enforcement when the law requires it or to protect someone’s rights or safety.

If I start using a new kind of service that handles your information, I’ll update this list.

6. Information inside your business, when I work for you

When you give me access to your systems, such as your website, email, CRM, spreadsheets, or customer lists, I may see personal information about your customers, employees, or contacts. That information is yours, and you’re responsible for it. I handle it on your instructions, as your service provider, and I:

• use it only to do the work you asked for;
• don’t copy it out of your systems except temporarily when a task requires it, and delete those copies when the task is done;
• don’t put it into AI tools unless the task requires it and we’ve agreed;
• don’t sell it, share it, or use it for my own purposes;
• protect it with the measures in Section 8;
• tell you promptly if I learn of a security incident involving it; and
• return or delete it when our work ends, except for records the law requires me to keep.

If your business handles information with special rules, such as health or financial records, children’s data, or data about people in the EU or UK, tell me before giving me access so we can agree on how to handle it, or decide the task isn’t a fit. If you need a written data processing agreement, ask and I’ll provide one.

7. How long I keep it

• Booking details and call notes: up to two years after our last contact, unless you become a client. Cal.com keeps its own records under its policy.
• Call recordings, transcripts, and automatic summaries, including any copies I’ve made: deleted within 90 days, once I’ve written my notes, unless I need one to settle a dispute or the law requires me to keep it. The notes follow the rule above.
• Call logs, voicemails, and text messages in Quo: kept on the same schedule as booking details, or as client communications if you become a client.
• Client communications and project records: for as long as you’re a client, and afterwards for as long as tax and legal record-keeping require, typically up to seven years.
• Client files I hold: 30 days after your subscription ends, as the Terms describe, then deleted.
• Credentials you shared: deleted, and my access removed, when the work or the subscription ends.
• Billing records: kept by Stripe and by me for as long as tax law requires.
• Referral records: kept with billing records.
• Server logs: kept for a limited time, then deleted.
• Analytics data: kept in Google Analytics for up to 14 months and in PostHog for a limited period under its retention settings. Neither is tied to your name.

Backups may hold deleted information for a short time afterwards before they cycle out.

8. Security

I protect your information with encrypted devices, a password manager, unique passwords, and multi-factor authentication on every account that offers it. I use separate logins where you can give me one, access only what the work requires, and remove access and credentials when we’re done.

No method of storage or transmission is completely secure, so I can’t promise absolute security. If I learn of a security incident involving your information, I’ll tell you promptly and as the law requires.

9. Your choices and rights

You can ask me to show you the personal information I hold about you, correct it, delete it, give you a copy, or stop using it for a particular purpose. Email me and I’ll respond within 30 days. I may need to verify that it’s you. Some records, such as invoices, must be kept for tax or legal reasons, and I’ll tell you if that applies.

You can cancel your subscription anytime. You can ask me not to record a call, or to delete a recording. You can block or delete cookies in your browser, and the Website still works (Section 3 explains how). You won’t receive marketing email unless you opt in.

If you live in a state with a privacy law (such as California, Colorado, Virginia, or Utah): my business is currently below the size thresholds those laws apply to, but I honor these rights for everyone regardless of where you live. I don’t sell personal information. Sharing a visit with Meta through its pixel while I run ads may count as “sharing” under some of those laws, so I treat a Global Privacy Control signal as an opt-out: the pixel doesn’t load when your browser sends one. Any ad blocker stops it too.

If you’re in the EU or UK: I don’t target those markets, but if you contact me, I process your information to respond to you and perform our contract, for my legitimate interest in running the business, to meet legal obligations, or with your consent. You have the rights above plus the right to data portability and to complain to your local data protection authority. Your information is processed in the United States.

10. Do Not Track and similar signals

I don’t sell personal information or track you across other websites myself. While I’m running ads, Meta’s pixel can connect your visit to the ad you clicked and may be used to show you my ads again. If your browser sends a Global Privacy Control signal, the pixel doesn’t load; I treat Do Not Track the same way. Analytics cookies can be blocked as described in Section 3.

11. Children

The Website and the Services are for businesses and adults. I don’t knowingly collect information from anyone under 18. If you believe a child has given me personal information, email me and I’ll delete it.

12. Where information is processed

I’m based in the United States, and the Website is hosted there. If you use the Website from elsewhere, your information is transferred to and processed in the United States. The services listed in Section 5 may store information in other countries under their own safeguards.

13. Links and embedded services

The Website links to other sites and embeds the Cal.com booking calendar and Stripe’s checkout. Those services have their own privacy policies, and this policy doesn’t cover them.

14. Changes to this policy

When I change this policy, I’ll update the date at the top. For material changes, I’ll email clients at least 30 days before the changes take effect. Continuing to use the Website or the Services after that date means you accept the updated policy.