Privacy Policy

Who we are

CMMC.Live is a service of Brevardhost.net (“we”, “us”). This policy covers this website, cmmc.live, and the CMMC.Live sites we run for our customers.

On this website

• Messages and demos. When you send a message or book a demo, we keep what you type: your name, email, company, phone and message, and the time you chose. We use it to answer you and to run the demo.
• The newsletter. If you ask for CMMC news by email, your email goes to our newsletter service, MailerLite. Every email has a link to stop it.
• The chat. Questions you type in the chat at the bottom of each page go to OpenAI to write the answer, with the page you are on and your last few questions. We do not keep them. We count how many questions each visitor asks a day, by a code made from their internet address, and keep that count two days. OpenAI may keep what is sent for up to 30 days to check for abuse.
• Visits. We use Google Analytics to count visits and see which pages help. Google reCAPTCHA protects our forms from spam. Our security software records basic details of each visit, such as the address it came from, to block attacks.
• Cookies. The site uses cookies to work, to count visits and to keep you signed in if you have an account.

In a customer’s CMMC.Live site

• Accounts. Each person’s name, email and role, so they can sign in and be given work.
• The CMMC work. Answers, notes, actions, dates, reports, policy drafts and where your proof is kept. Your evidence itself stays in your own storage.
• Support requests. What you write to us, and any pictures you add. They reach us on our own systems.
• No CUI. CMMC.Live is not meant for CUI, classified information or passwords. Please never put them in.

We use this only to run your site, support you, keep it safe and back it up. We look inside your site only to do those things, or when you ask us for help.

The AI helper

The AI helper sends what you ask, and the words of the page you are on, to OpenAI to write its answer. Names are swapped out first. Anything that looks like a password, an ID number or a CUI marking is not sent. OpenAI may keep what is sent for up to 30 days to check for abuse. Nothing the helper writes is kept in your site until you press to keep it.

Payments

Payments go through Authorize.net. Your card details stay with them. We see only what we need to match your payment to your invoice.

Who we share it with

We do not sell your information. We share it only with the services that help us run CMMC.Live and this website: Authorize.net for payments, OpenAI for the AI helper and the chat, MailerLite for the newsletter, and Google for visit counts and spam protection. We host CMMC.Live ourselves. We also share information when the law requires it.

How long we keep it

• Messages and demo bookings: as long as we need them to answer you and run our business.
• A customer’s site: until 30 days after the plan ends, then it is deleted for good. Copies in our backups are removed as those backups expire.
• Newsletter: until you stop it.

Keeping it safe

We keep every site up to date, behind a firewall, and backed up. No system is perfect, so we also keep what we hold to what we need.

What you can ask

You can ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete it, unless we must keep it by law. Ask through our Contact page.

Children

CMMC.Live is for businesses. It is not meant for children under 13, and we do not knowingly collect their information.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change matters to customers, we email their admins first.