What we collect, what it’s for, and when it’s deleted.

We keep what you choose to hand us — an email address, the figures you type into a tool, a message — and we use it for exactly one thing: answering you and doing the work you asked about. Nothing is sold, nothing is shared beyond the handful of services named below, and nothing you send is used to train AI models. One written request deletes it.

Every question about this page goes to a person, not a queue: markus@ops2cash.com.

Browsing collects almost nothing. Site analytics run on Plausible, which counts visits in aggregate — no cookies, no personal identifiers, no cross-site tracking. We can see that fifty people read a page, never which fifty. There are no ad trackers and no third-party cookies, which is why there is no cookie banner: there is nothing to consent to.

The two cookies that exist, and when:

• o2c_attr — set only if you arrive through a campaign link (a utm_ or ad-click parameter in the URL). It records the campaign source, the page you landed on, and the date; expires after 30 days; and never leaves this site. If you later write to us, it tells us which door you came through — that is its whole job.
• o2c_portal — set only when a client signs in to the portal. It keeps you signed in; nothing else.

The Snapshot’s email gate, the Check’s take-away packet, and the contact form all collect the same kind of thing: your email address, plus whatever you choose to add — a name, a company, a message, the figures you typed into the tool. It is stored in our own records, delivered by email where needed, and used to reply to you and deliver what you asked for. We may use software, including AI tools, to research an inquiry and draft the reply — a person reads and sends everything.

Tool sessions clean up after themselves: a Check session you abandon without leaving an email is deleted after 14 days, and completed results are deleted after 90 — unless they are held in an active client portal account so you can re-open them.

If you send a direct message or a comment to our Facebook Page or Instagram account, Meta delivers it to this site and we store who wrote, what was written, and when — so it can be read and answered. We may use software, including AI tools, to draft a reply; a person reads every message and personally releases every reply. The same handling applies to LinkedIn messages we are notified about by email.

Those messages live in the same private records store as everything else, are never used for advertising, and are deleted on request — write to markus@ops2cash.com and name the account you messaged from. What Meta and LinkedIn do with messages on their own platforms is governed by their privacy policies, not this one.

Clients in a Diagnostic or a partnership hand over more — agings, financial statements, WIP summaries — through the portal, and that material has its own confirmed rules:

• It goes into a private store, readable only by you and the people working your engagement — never a public link, never an email attachment.
• Source records are deleted 90 days after the engagement closes. Your deliverables stay re-openable in the portal while your account is active.
• A written request deletes your source records within 30 days, engagement open or closed — and we confirm it happened, in writing.
• The portal sends nothing to an AI model, we never access your systems, and no client’s figures ever appear in another client’s work or in our marketing.

Every service that touches data on our behalf, named:

• Vercel — hosts the site and stores uploaded files, privately.
• Airtable — holds the records: inquiries, messages, engagement data.
• Resend — sends email: sign-in links and notifications.
• Plausible — aggregate site analytics; sees no personal data.
• Anthropic — powers the drafting help described in 03, under terms that do not train on the data.
• Meta — delivers the messages you send on Facebook and Instagram.

No other third party receives your data, and none of it is ever sold.

One address, read by the founder: markus@ops2cash.com. Ask what we hold about you, ask for a copy, or ask for deletion — deletion happens within 30 days, and we confirm it in writing.

If this page changes, the change is posted here with a new effective date. We don’t retroactively loosen the rules on data you already gave us.