Privacy Policy

Last updated: 17 September 2026

1. Who we are

M2 CPA, LLC (“M2 CPA”, “we”, “us”) is a certified public accounting firm providing government contract accounting and DCAA compliance services, fractional CFO services, and tax and bookkeeping services to businesses and individuals. This policy applies to m2cpa.com and to information we collect in the course of providing professional services.

Questions about this policy can be sent to info@m2cpa.com or (775) 391-6255.

2. Information we collect

Information you give us

• Contact details such as name, business name, email address, and telephone number, submitted through our contact page, booking scheduler, or by email.
• Information about your business that you provide when enquiring, such as contract types held, accounting system used, and deadlines you are working to.
• Your name, email address, and answers when you ask us to email you the results of a self-check tool on our website. We use them to send your results and may follow up with you once about them. Answers you do not ask us to email stay in your browser and are not sent to us.
• Financial and tax information provided in the course of an engagement, including accounting records, payroll data, tax returns, contract documentation, and supporting workpapers.
• Identifying information required to prepare returns or filings, which may include Social Security numbers, Employer Identification Numbers, CAGE codes, and Unique Entity Identifiers.

Information collected automatically

• Standard web server data including IP address, browser type, device type, referring page, and pages viewed.
• Cookies and similar technologies used for site functionality and analytics. See section 8.

We do not purchase personal information from data brokers, and we do not collect information about you from third parties except where you have asked us to obtain records on your behalf.

3. How we use information

• To respond to enquiries and schedule consultations.
• To provide the professional services you engage us for, including accounting, compliance, tax, and advisory work.
• To prepare and file returns, submissions, and other documents on your behalf.
• To communicate about your engagement, deadlines, and matters affecting your business.
• To meet our legal, regulatory, and professional obligations.
• To operate, secure, and improve our website.

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

4. Professional confidentiality

Information you provide in the course of a professional engagement is treated as confidential under the standards of the American Institute of Certified Public Accountants and applicable state boards of accountancy, in addition to the protections described in this policy. Confidentiality obligations continue after an engagement ends.

5. Tax return information

Where we need your consent to use or disclose tax return information, for example to provide it to a lender or another advisor at your request, we will obtain that consent in writing and in the form required by the applicable Treasury regulations before doing so.

6. When we disclose information

We disclose information only in the following circumstances:

• At your direction. For example, providing records to your bank, attorney, insurer, prime contractor, or another advisor when you ask us to.
• To government agencies as part of the engagement. Including filing returns and submissions with the IRS, state tax authorities, and, on government contract engagements, providing requested records to DCAA, DCMA, or a contracting officer as part of an audit or submission we are supporting on your behalf.
• To service providers who process information on our behalf under confidentiality obligations. See section 7.
• Where required by law, including in response to a valid subpoena, court order, or regulatory or professional practice review.

7. Service providers

We use established third-party providers to operate our practice and our website. These currently include, among others, providers of accounting and tax preparation software, payroll processing, appointment scheduling, email and document storage, website hosting, and website analytics. Each is bound by its own terms and by obligations of confidentiality and security appropriate to the information it handles.

We do not authorise these providers to use your information for their own purposes.

8. Cookies and website analytics

Our website uses cookies for basic functionality and uses analytics services to understand how visitors find and use the site. Analytics data is aggregated and is used to improve the site, not to identify you personally.

You can block or delete cookies through your browser settings. Doing so may affect how parts of the site function. Most browsers also support a “Do Not Track” signal; because there is no common industry standard for responding to it, our site does not currently respond to those signals.

Our website is not used to serve behavioural advertising to you across other websites.

9. How we protect information

We maintain administrative, technical, and physical safeguards designed to protect the information we hold, consistent with our obligations under the Gramm-Leach-Bliley Act and the Federal Trade Commission Safeguards Rule, which apply to accounting firms. These include access controls limiting information to personnel who need it, encryption of data in transit, secure file exchange for sensitive documents, and vendor due diligence.

No method of transmission or storage is completely secure. Please do not send Social Security numbers, account numbers, or other sensitive information by ordinary unencrypted email. We will provide a secure method for exchanging documents.

10. How long we keep information

We retain client records for as long as necessary to provide services, and afterwards for the periods required by law, professional standards, and our own record retention policy. Tax and accounting records are generally retained for a minimum of seven years. Website enquiry data that does not result in an engagement is retained only as long as needed to respond and for a reasonable period afterwards.

11. Your choices and rights

• Access and correction. You may request a copy of the personal information we hold about you, and ask us to correct it if it is inaccurate.
• Marketing. You may opt out of non-essential communications at any time by replying to any message or emailing us. We will still send communications necessary to your engagement.
• Deletion. You may request deletion of personal information, subject to our legal and professional obligations to retain records.

Residents of California and of other states with comprehensive privacy laws may have additional rights, including the right to know what personal information is collected and the right not to be discriminated against for exercising those rights. Note that information we hold subject to the Gramm-Leach-Bliley Act is generally exempt from certain state privacy statutes. To make a request, contact us at info@m2cpa.com. We will verify your identity before responding.

12. Children

Our website and services are directed to businesses and adults. We do not knowingly collect personal information from children under 13, except where a parent or guardian provides a dependent’s information to us as part of preparing a tax return.

13. Links to other sites

Our website links to third-party sites, including government resources such as dcaa.mil and acquisition.gov. We are not responsible for the privacy practices of those sites, and this policy does not apply to them.

14. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes affecting how we handle client information will be communicated directly to affected clients.

15. Contact us

M2 CPA, LLC
Email: info@m2cpa.com
Telephone: (775) 391-6255
Web: m2cpa.com

This policy describes the practices of M2 CPA, LLC generally. Engagement letters and any separate consent forms you sign govern the specific terms of your engagement and, where they differ, take precedence over this policy. A separate privacy policy applies to our QuickBooks Online bookkeeping application and is available here.