Echo chat and client accounts
Echo is our AI website assistant. You can ask public questions, send an inquiry and book a call without an account. Echo+ provides client features for projects MTD Labs assigns to your signed-in account. An account alone does not grant access to other clients or their projects.
Messages and relevant submitted images or document text are processed by Anthropic to generate and check replies and help prepare requests. AI responses can be incorrect. Brandon reviews custom scope and quotes. Do not share passwords, payment credentials or sensitive personal records in chat or uploads.
Google sign-in provides your verified email and basic profile information for account identification. It does not grant access to your Gmail, Drive or Calendar. You can also request a single-use email sign-in link. We store account and profile details, project assignments, notification preferences and the records you submit.
Essential session cookies keep your session associated with the service and protect requests. Your browser may store an account-scoped conversation identifier so navigation can return to your active chat. Starting New chat changes the active conversation; it does not immediately delete previous messages. Network information is used for security and rate limiting.
You can opt in to email notifications when Brandon replies to your requests and turn those notifications off in your profile. Requested sign-in links and booking confirmations are separate service messages. Creating an account or supplying a callback number does not enroll you in marketing messages or automated texts.
Who this policy covers
MTD Labs LLC is a Florida limited liability company. This policy describes information handled when you visit mtdlabs.dev, contact us, request a quote or callback, join our referral program, or use services we operate. Contact support@mtdlabs.dev with privacy questions.
When we operate an agent for another business, we process that business's customer information to provide the agreed service. That business determines how its customer records are used and should provide its own privacy notice. Contact it first about those records; we will assist with requests as appropriate.
Information you provide
Inquiries may include your name, email, phone number or Discord contact, business details, project description, budget, timeline, and referral code. Callback requests also include your preferred day or time. Referral signups may include contact information, a preferred payout service, and a payout handle.
Project work may involve files, correspondence, approvals, invoices, and account access you choose to provide. Please do not put passwords, card details, government identifiers, or sensitive customer records in a general inquiry form.
Website requests and referral links
The project inquiry form sends the details you submit to our inquiry service. We first save your inquiry in a restricted server database, then deliver copies to our private Notion business records, business email, and Discord notifications. If a destination is temporarily unavailable, the server keeps the inquiry and retries delivery. A submission identifier helps prevent duplicates when a request is retried. Salted IP hashes used to limit repeated inquiries are pruned after 24 hours when new inquiries arrive. That service forwards the inquiry to an internal Discord channel and may also notify the owner by Discord or email. We do not save form drafts in your browser. Referral signup separately saves your name, email, optional phone number, preferred payout method, generated code, and signup time in our restricted server database. We also copy referral registration details into our private Notion business records to match referral codes to the people who registered. If Notion is unavailable, the server retains the registration and retries delivery. Your contact information is not included in the public link. We verify contact and payment details before paying rewards. Signup does not verify ownership of an email address or authorize payout changes. Your browser temporarily remembers the signup request identifier and resulting link for the current tab session so retries can recover the same link. A new session may create another link; contact us to reconcile registrations or recover a lost link. Salted IP hashes used to limit repeated signups are pruned after 24 hours when new signups occur.
A referral code in a link can prefill the inquiry form. We remember that code in browser session storage for the current tab so it stays available when you return from another page. If you send the form with that code, it becomes part of the inquiry so we can attribute the referral. This is separate from tracking your browsing across other websites.
Hosting infrastructure may process IP addresses, browser information, requested pages, and access times to serve and secure the website. The redesigned pages contain no advertising pixels or third-party analytics scripts, and load their images and fonts from the website itself. This describes these pages; linked services operate under their own policies.
Why we use information
We use information to answer requests, prepare quotes, arrange calls, deliver and support projects, operate requested services, keep business and payment records, administer referrals, and investigate errors or misuse. SMS consent records are used to document and respect messaging choices.
We do not sell or rent personal information or provide it to others for their own advertising. We do not use client-specific confidential content as portfolio material without permission.
AI receptionists and voice services
The MTD Labs receptionist is an AI service. It records call audio and saves transcripts, and tells callers that they are speaking with AI on a recorded line. These records can include your voice, the details you discuss, contact information, and appointment or project requests.
We use call information to respond to requests, prepare follow-up, and operate and troubleshoot the receptionist. Voice, transcription, AI, and hosting providers process information needed for their part of the service. If you prefer not to use the recorded line, contact support@mtdlabs.dev by email instead. Please avoid sharing passwords, payment credentials, or sensitive personal information during a call.
For a receptionist we operate for another business, recording and transcript storage depend on that business's service configuration and agreement. Its privacy notice and the notices given during the call should explain its practices. See the retention and privacy-request sections below for how to ask about records.
Text messages and your choices
If you choose to receive texts and provide the required consent, MTD Labs LLC may send inquiry replies, quotes, project updates, and appointment reminders. Message frequency varies. Message and data rates may apply. Consent is not a condition of purchase.
Reply STOP to opt out, HELP for help, or email support@mtdlabs.dev. We may send a confirmation of your opt-out. We keep the records needed to respect that choice. A number supplied only for a callback does not by itself opt you into marketing texts.
We do not sell, rent, or share mobile numbers or SMS consent with third parties or affiliates for their own marketing. Messaging providers may process this information to deliver requested messages and support the service.
Service providers and other disclosures
Depending on the project, information may be processed by hosting providers, email and collaboration services, Discord, business record systems, AI model and voice providers, telephony and messaging providers, and payment processors. We provide information needed for the relevant task. Their processing and retention also depend on their service terms and account configuration.
We may disclose information when legally required or reasonably necessary to address fraud, security incidents, or legal claims. Information shared in a client-operated service is handled under that client's instructions and agreement, subject to our own legal obligations. Providers may process information outside your state or country.
Payments
Payment services collect the payment credentials you enter on their pages. MTD Labs may receive transaction identifiers, payment status, amounts, billing information, and refund records for bookkeeping and support. Do not send full card numbers or bank login credentials to us by email, Discord, or a website form.
How long records are kept
- Chat messages: Guest messages are kept for up to 30 days and signed-in account messages for up to 90 days in the active chat system, with regular cleanup. New chat is not a deletion request.
- Project requests, attachments and replies: We keep these while a project is active. The planned cleanup period is twelve months after the recorded project end date. As of this revision, scheduled project-record cleanup is not enabled, so that twelve-month period is not an automatic deletion deadline. Records remain until reviewed or removed. Chat cleanup is separate.
- Permanent project assets: Owner-designated assets are retained separately until the owner removes them or the associated project is permanently deleted. They are excluded from routine ticket cleanup.
- Accounts and assignments: Chat expiry does not delete accounts. Accounts with assigned projects, including projects in Trash, are protected from the owner's account-Trash action until those assignments are resolved. Other linked records may also prevent permanent account removal.
- Recovery backups: Encrypted backups are scheduled nightly and stored locally and in restricted Google Drive storage. The configured retention target is 30 days. Older managed backups expire after a new backup succeeds and is verified, so failures can extend retention. Backups are separate from active records.
Inquiries, booking records, project agreements, billing records, security records and provider copies are retained as needed to respond, deliver services, resolve disputes and meet business or legal obligations. The chat periods do not apply to those separate records. Email, Calendar, Notion, Discord and other providers may retain their own copies according to their settings. For client-operated agents, retention also depends on the agreement and configured services.
Access, correction, and deletion
You can email support@mtdlabs.dev to ask what information we hold, correct it, or request deletion. We may need to verify your identity or authority before releasing or deleting records. We respond in accordance with applicable law and explain any records we must retain.
Privacy rights vary by location and by whether a particular law applies. If your information belongs to the customer records of a business using our agent, direct your request to that business. You can stop optional communications without cancelling a project or purchase.
Security and children
We use reasonable safeguards appropriate to the information and service, including restricting access to the people and providers who need it. No method of transmission or storage can be guaranteed secure. We will address and provide any required notices about a security incident in accordance with applicable law.
Our services are intended for businesses and adults, not children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
Policy changes
We will update this page when our practices change and identify the revision date. Where required, we will provide additional notice or obtain consent before materially changing how information is used. For project and payment terms, see our Terms of Service.
Portal requests and uploads
Submitted inquiries, project requests, attachments and private replies are separate business records from chat history. They are stored in our restricted portal and may be delivered to our private Notion workspace, email services and private Discord notifications so Brandon can handle the work. We do not routinely send full chat conversations to Discord. Access is limited by project assignment and owner permissions.
Accepted PDF and Word uploads are converted to plain text for review; original document files are not retained by the upload workflow. Formatting and embedded document images are not preserved. Images are re-encoded as JPEG or PNG, with transparency preserved where supported. Keep your own original files. An owner-approved permanent project asset is saved separately from the request that supplied it.
Appointment booking
Booking uses your name, phone number, chosen time, discussion details and optional email address. These details are stored in our booking records and added to MTD Labs' connected Google Calendar. We check calendar availability to reduce conflicting bookings. Your personal Google Calendar is not accessed through account sign-in.
A booking is confirmed only after the booking service accepts it and the interface shows confirmation. If you provide an email address, we send a confirmation through our email provider. Providing a phone number authorizes the requested call, not automated or marketing texts. To cancel or reschedule, use the instructions shown with your booking or contact support@mtdlabs.dev.
Trash and permanent deletion
Owner controls can move eligible requests, projects and client accounts to recoverable Trash. Trash hides the item from ordinary use but does not erase it. An owner can restore an eligible item or separately confirm permanent deletion.
Permanent deletion removes the selected portal records and associated files covered by that action. Project deletion also removes its portal requests and permanent assets; deleting a request preserves assets separately saved as permanent. Deleted portal items cannot be restored through normal Trash controls once permanent removal begins.
Portal deletion does not automatically cancel a Calendar event, erase delivered email, remove all Notion or Discord copies, or immediately erase recovery backups. Those systems require separate handling. When scheduled Notion cleanup is used, pages move to Notion trash rather than being immediately erased from every provider system. Contact us for a deletion request covering the relevant systems. We will explain applicable limits and any records we must retain.