Privacy Policy

Information We Collect

Archway Advisory Group LLC ("Archway," "we," "us," or "our") collects information you voluntarily provide when you use our website at archwayadvisorygroup.com (the "Site") and related services, including our MCP server tools.

Contact and inquiry information. When you submit a form on our Site — including diagnostic intake forms, contact forms, or engagement scoping requests — we collect the information you provide, such as your name, email address, company name, job title, and the content of your inquiry.

Diagnostic and assessment inputs. When you use our governance diagnostic, engagement scoping, or R&D documentation risk screening tools (whether on the Site or via our MCP server), we receive the assessment inputs you provide. These tools run deterministic scoring logic — no AI models process your inputs on our server, and no inputs are used to train any model.

Usage data. We collect standard web analytics data through Google Analytics (GA4), including pages visited, referral source, browser type, device type, and approximate geographic region. This data is aggregated and does not identify you personally.

CRM data. Contact information submitted through our forms may be stored in our CRM system (HubSpot) for the purpose of managing inquiries, scheduling, and engagement tracking.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide requested services
• Produce diagnostic results, engagement scoping, and risk assessments
• Schedule consultations and manage client relationships
• Improve our Site and services
• Send follow-up communications related to your inquiry (you may opt out at any time by replying to any email or contacting us at the address below)

We do not sell your personal information. We do not use your information for automated decision-making that produces legal effects.

Information Sharing

We share your information only in the following circumstances:

• Service providers. We use third-party tools to operate our business, including HubSpot (CRM and forms), Google Analytics (web analytics), SendGrid (email delivery), Cloudflare (hosting and security), and Netlify (site hosting). These providers process data on our behalf under their respective terms of service.
• Legal requirements. We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify affected individuals before their information becomes subject to a different privacy policy.

We do not share your information with third parties for their own marketing purposes.

MCP Server Tools

Our MCP server (hosted on Cloudflare Workers) provides three tools: Governance Diagnostic, Engagement Scoping, and R&D Risk Screener. These tools:

• Run entirely on deterministic logic — no AI model processes your inputs on our server
• Do not require authentication or account creation
• Do not store your inputs beyond the duration of the request
• Do not transmit your inputs to any third party beyond Cloudflare's infrastructure
• Include firm attribution and contact links in every response

When you use these tools through a third-party platform (such as Claude by Anthropic), that platform's own privacy policy governs how it handles your interactions. We encourage you to review the privacy policy of any platform through which you access our tools.

Cookies and Tracking Technologies

Our Site uses cookies and similar technologies for the following purposes:

• Analytics. Google Analytics (GA4) sets cookies to measure site traffic and usage patterns. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Forms and CRM. HubSpot sets cookies to support form functionality, track form submissions, and associate return visits with existing contact records.
• Essential. Cookies necessary for basic site functionality.

You may disable cookies through your browser settings, though some Site features may not function as intended.

Do Not Track. Our Site does not currently respond to "Do Not Track" browser signals. There is no industry-accepted standard for how to respond to these signals, and we do not alter our data collection practices based on them.

Data Retention

We retain contact information and CRM records for the duration of our business relationship and a reasonable period thereafter (generally no longer than three years after last contact), unless you request deletion sooner. Web analytics data is retained according to Google Analytics default retention settings. MCP server tool inputs are not stored after the request completes.

Data Security

We use commercially reasonable measures to protect your information, including HTTPS encryption, access controls, and secure hosting infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach involving your personal information, we will notify affected individuals and applicable authorities as required by Georgia law (O.C.G.A. § 10-1-912) and any other applicable state or federal law, in the most expedient time possible and without unreasonable delay.

Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at the address below. We will respond to verified requests within 30 days.

International Users

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with applicable data protection laws, you may have additional rights, including the right to access, correct, delete, or port your personal data, the right to restrict or object to processing, and the right to lodge a complaint with your local supervisory authority. Where we process your data, our lawful basis is either your consent (for form submissions and marketing communications) or our legitimate interest in operating our business and responding to inquiries.

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) may provide you with additional rights regarding your personal information, including the right to know what information we collect and how we use it, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise any rights under the CCPA, contact us at the address below.

Children's Privacy

Our Site and services are not directed to children. We do not knowingly collect personal information from children under the age of 13 (as defined under the Children's Online Privacy Protection Act). If we learn that we have collected personal information from a child under 13, we will delete that information promptly. Our services are designed for business professionals and are not intended for use by individuals under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Archway Advisory Group LLC
Atlanta, Georgia
Email: Contact@ArchwayAdvisoryGroup.com
Web: archwayadvisorygroup.com/contact