Privacy Policy

Effective Date: June 15, 2026

MD Business AI ("we," "us," or "our") operates www.mdbusiness.ai. This Privacy Policy describes how we collect, use, disclose, and protect personal data collected from users, particularly residents of the State of Colorado, in compliance with the Colorado Privacy Act (CPA).

Under the CPA, a "Consumer" means a Colorado resident acting only in an individual or household context. It does not include individuals acting in a commercial (B2B) or employment context.

1. Categories of Personal Data We Collect

We collect information that is linked or reasonably linkable to an identified or identifiable individual. We may collect the following categories of data:

• Identifiers: Name, business name, professional email address, phone number, and physical billing address.

• Commercial Information: Services purchased, operational data provided during your AI Practice Success Assessment, and payment processing records.

• Internet/Network Activity: IP address, browser type, browsing history, and interactions with our website.

2. Purposes for Processing Personal Data

We process your data strictly to fulfill specified, legitimate operational purposes:

• To administer, score, and deliver your AI Practice Success Assessment or AI Readiness Audit.

• To set up and manage your client portal or online store integration via our website platform.

• To communicate updates, provide executive consulting, and deliver marketing materials regarding our city tour seminars.

3. Sharing and Disclosure of Personal Data

We do not sell your personal data for monetary or valuable consideration. We share personal data only with the following categories of third parties to fulfill business operations:

• Service Processors: Secure cloud hosting, software infrastructure platforms (e.g., Wix hosting), and standard US-based secure merchant payment gateways.

• Compliance Partners: Legal or regulatory authorities if strictly required by applicable law.

4. Your Colorado Privacy Rights

If you are a Colorado resident, you possess specific statutory rights regarding your personal data:

• Right to Access: You can confirm if we are processing your personal data and request a portable copy of that data.

• Right to Correction: You have the right to correct inaccuracies in your personal data.

• Right to Deletion: You may request the deletion of personal data provided by or obtained about you.

• Right to Opt-Out: You have the right to opt-out of the processing of your data for targeted advertising, the sale of data, or significant profiling. (Note: We do not sell data or engage in profiling with legal or significant impacts).

5. Universal Opt-Out Mechanisms & Consent

We recognize user-selected Universal Opt-Out Mechanisms (such as Global Privacy Control) broadcast via your browser. Furthermore, we do not collect or process "Sensitive Data" (e.g., precise geolocation, biometric data, or health conditions) without obtaining your prior, explicit, unambiguous opt-in consent.

6. Data Security and Retention

We implement and maintain reasonable, industry-standard administrative and technical security measures appropriate to the size of our business to safeguard your information. We retain your personal data only as long as reasonably necessary to fulfill the operational consulting services requested.

7. How to Exercise Your Rights & Appeals

To submit a request to exercise your rights, please contact us at info@mdbusiness.ai.

If we deny your privacy request, you have the right to appeal our decision within 60 days of receiving our denial. To file an appeal, please email us with the subject line "Privacy Request Appeal." If your appeal is denied, you may contact the Colorado Attorney General.