1. Who we are and what this policy covers
AAG Capital Management, LLC, doing business as BizScribe (“BizScribe,” “we,” “us,” or “our”), operates getbizscribe.com and its client portal.
This policy covers information we handle through this website, inquiries (including direct messages sent to @getbizscribe on Instagram), related service communications, and client portal accounts. If we process information on behalf of a business client, we follow the client's instructions and our agreement with them. That client's own privacy notice governs its collection from its customers and website visitors.
2. Information we collect and where it comes from
- Inquiries and preview requests: your name, email address, business name if provided, website URL, selected service, and the message or other details you send. We receive these directly from you through forms, email, or other service communications.
- Service records: business contact details, project instructions, files you supply, correspondence, approvals, and records needed to administer an engagement. Our public forms do not request payment-card details.
- Portal accounts: invited email address, user and organization identifiers, organization membership, authentication records, and security events. Supabase handles password authentication. Passwords are not displayed to BizScribe staff.
- Connected reports: website traffic and search performance metrics, dates, page URLs, search queries, and related report dimensions from the Google Analytics and Search Console properties you authorize us to access.
- Content review: draft posts and articles, images and files, planned dates, review deadlines, approval decisions, revision feedback, and records of who submitted a decision and when.
Instagram messages: Meta delivers messages sent to @getbizscribe to our website server. We look up your handle and profile name from Instagram, using your Instagram account ID (Instagram's number for your account).
Anthropic's AI reads each typed message or tapped question, and sometimes a few earlier ones, only to decide if it is about a website. A message that is not about a website is discarded, and its content is not stored. The exception is after you have asked about a website and write again. Any later message you type, or question you tap, then counts, whatever it says. Your recent messages in that chat, including the latest ones on any topic, are copied into a Notion lead record.
A website question that has no website address is not stored on its own. Besides the short-lived records described in section 7, we keep only a waiting marker, so we know if you write again. It is your Instagram account ID and the time, with no message content. We create a Notion lead record when you send your website address, or when you write again after a website question. When you write again, we read your recent messages in the chat back from Instagram and copy them into the record. If we cannot save the waiting marker, we create the record at once so your question is not lost. The record holds your Instagram handle, profile name, Instagram account ID, your message or messages, and website address if given. Later messages in the chat are added. If your chat started from one of our ads, we remember your account ID and the ad for up to 30 days.
- Technical information: our hosting and security providers may receive IP addresses, browser and device information, requested URLs, timestamps, referrers, and diagnostic or spam-check information when you use the website. Optional analytics can collect visit and interaction information when you accept it.
Please do not put passwords, Social Security numbers, payment-card details, health information, or other sensitive personal information in a public form or content feedback. If a project needs secure access, arrange the appropriate access method with us.
3. How we use information
We use information to respond to inquiries, prepare a requested homepage preview, deliver and administer services, provide client reports, manage content reviews, send service messages, maintain account access, prevent misuse, troubleshoot problems, and meet legal obligations.
A form submission may generate an automatic receipt to you and an inquiry notification to us. Portal messages may include invitations, password resets, review reminders, and status updates. These are service communications. Sending an inquiry does not subscribe you to a marketing mailing list.
We use an Instagram message to decide whether it is a question about a website. If it is, we save a lead record once you have sent your website address or written again, so we can follow up with you. If a lead record cannot be saved, we may receive a short email that names the Instagram handle. That email never includes your message.
Where we send optional marketing communications, you can unsubscribe using the message's instructions or contact us. With your analytics choice, we use website measurements to understand and improve our public website. We do not sell personal information or use portal records for cross-context behavioral advertising.
Where a law requires a legal basis, the basis depends on the activity: taking steps you request before a contract or performing our contract, our legitimate interests in running and securing the business, meeting a legal obligation, or your consent where required. You can withdraw consent without affecting earlier lawful processing.
4. Who receives information
We disclose relevant information to providers and authorized people who help deliver these functions:
- Netlify
- Website hosting, form submission storage, server functions, and associated operational and security logs.
- Supabase
- Portal authentication, database records, and content media storage.
- Google Workspace
- Business email, inquiry receipts and notifications, portal messages, and related communications.
- Google reCAPTCHA
- Spam protection on public inquiry forms. Google processes browser and interaction information for its risk analysis. Its Privacy Policy and Terms of Service apply to this service.
- Google Analytics, Tag Manager, and Search Console
- Optional public-site measurement and authorized client website and search reporting. The portal pages do not load marketing analytics tags.
- Notion
- Our workspace for tracking inquiries and planning content. Details you send through our website forms are recorded there so we can follow up. Lead records for Instagram messages are saved there once you send your website address or write again after a website question. Drafts and review decisions or feedback may be transferred between Notion and the portal to coordinate your engagement.
- Anthropic
- An AI service that reads the text of an Instagram message you type or a question you tap, and sometimes the last few earlier messages in the same chat, only to decide whether the message is about a website. Our site does not save the earlier messages for this step. Anthropic acts as a service provider for this purpose.
- Meta (Instagram)
- Instagram is where these messages come from. Meta delivers direct messages sent to @getbizscribe to our website server. We also ask Instagram, using your account ID, for your handle, profile name and recent messages in the chat. Meta's own privacy policy covers what Instagram keeps.
Authorized BizScribe personnel and contractors may access information needed for their work. We may also disclose information to professional advisers, to comply with applicable law or a valid legal request, to protect rights or safety, or in connection with a business reorganization or transfer, subject to applicable protections. If you direct us to publish approved content, that content becomes public on the destination you authorize.
5. How the client portal handles information
The client portal is for invited users. Reports and content are associated with your organization. Access depends on organization membership and authorized administrative roles. Other members of your organization may see organization reports and review records; authorized BizScribe administrators support the service.
When you grant access to a Google Analytics property or Search Console site, our reporting service reads authorized report data and stores results for display in your dashboard. You can remove that access in Google's property or site settings and contact us to stop future synchronization. Removing Google's access does not automatically erase previously stored reports.
Content approvals, requests for changes, and feedback are stored to coordinate delivery. Content review is available when enabled for your organization. Closing your portal account, withdrawing Google access, and deleting retained service records are separate requests; tell us which you want us to handle.
The portal stores authentication session tokens in your browser's local storage to keep you signed in. Unsaved review feedback can be stored in session storage for the current browser tab. Sign out when you finish on a shared device. Clearing browser storage may sign you out or remove unsaved feedback.
7. How long we keep information
Retention depends on the record and why it is needed. We keep inquiry records while responding and considering an engagement; client and portal records while supporting the relationship and its reporting or content history; and contract, accounting, security, and dispute records for applicable legal or business needs. Technical logs and backups may have separate provider retention periods.
Instagram messages: a message that is not about a website is discarded, and its content is not stored. The exception is after you have asked about a website and write again. Your recent messages in that chat, including the latest ones on any topic, are then copied into your lead record. A website question with no website address is not stored on its own. After one, we keep a waiting marker, which is only your Instagram account ID and the time, with no message content, for up to 30 days. We delete it when your lead record is created. We keep only a message identifier, with no content, for up to 7 days so the same message is not processed twice. When a chat starts from one of our ads, we remember your Instagram account ID and the ad it came from for up to 30 days, so a later website question can be linked to that ad. We also keep short-lived markers with no message content, for up to a day, so two copies of a message are not handled at once and follow-up messages reach your record. A daily cleanup deletes these records once they expire. A lead record in Notion is kept like our other inquiry records.
You can request account closure or deletion at any time. We assess the request and applicable exceptions, including legal obligations, security needs, and resolving disputes. Closing an account does not automatically remove records from every system. Backup copies may remain until their scheduled expiration. Contact us for information about a specific record or deletion request.
8. Security and international processing
We use safeguards appropriate to the service, including HTTPS, account authentication, organization-based access controls, and restricted administrative access. No website, transmission method, or storage system is completely secure. If an incident creates a legal notification obligation, we will provide the required notice.
BizScribe is based in the United States. Information may be stored or processed in the United States or other locations where our providers operate. Privacy laws may differ from those where you live. Where applicable law requires protections for an international transfer, those requirements apply to our handling of that transfer.
9. Your rights and how to make a request
Contact info@getbizscribe.com to request access to, correction of, or deletion of your personal information; to ask about a disclosure; to close an account; or to withdraw optional communications or analytics consent. Include the email associated with your inquiry or account and describe the request. Do not send a password or sensitive identity documents in your initial email. To delete data from an Instagram message, you can also follow the steps on our data deletion page.
Depending on your location and which laws apply, you may also have rights to obtain a portable copy, restrict or object to processing, opt out of certain uses or disclosures, appeal a denied request, or complain to a privacy regulator. If you want to appeal our response, reply to the same address and ask for a review.
We may need proportionate information to verify your identity or an authorized agent's authority before disclosing or deleting records. We respond within applicable legal time limits, explain any limitation or denial, and do not discriminate against you for exercising a legally protected privacy right. These rights can have exceptions. Requests about data we process on behalf of a client may need to be directed to that business.
10. Children and other websites
Our services are intended for business users, and this website and portal are not directed to children under 13. We do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and arrange appropriate removal.
Links and authorized publications may lead to websites or platforms run by others. Their privacy notices govern their own services. This policy does not replace a client's website policy or a third-party platform's notice.
11. Changes to this policy
We may update this policy as our services or legal obligations change. The date above identifies the latest revision. For material changes, we will provide additional notice or seek consent where required by applicable law.
12. Contact BizScribe
AAG Capital Management, LLC, doing business as BizScribe
Email info@getbizscribe.com with “Privacy request” in the subject line so we can route it appropriately.