The short version
We collect what we need to give you a quote and run your subscription. We don't sell your information. We don't share it with anyone except the few services we need to operate (QuickBooks for billing, Supabase for your account login, Resend for sending you emails). You can ask us to delete your data anytime.
What we collect
From everyone who uses the quote tool
- Name and email (and phone, if you give it to us) when you submit a quote
- The job address you enter (so we know where the work would happen)
- The scope of work you describe (line items, square footage, notes you write)
- Your IP address and browser info (logged automatically when you visit)
- Google reCAPTCHA token. Generated when you submit a quote or initiate a subscription payment, and used by BMG and Google to block automated abuse. Google may also use the token consistent with Google's own privacy policy.
Additionally, from subscribers
- Company name and business contact info
- A password (stored hashed — we never see the plain text)
- Payment information through QuickBooks Payments — we receive a token, not your actual card number. The card details are held by Intuit (QuickBooks's parent company), which is PCI-DSS compliant.
What we do NOT collect
- Your Social Security number
- Your real card number, CVV — those go directly to Intuit/QuickBooks Payments and never touch our servers
- Precise location data. The property address you type in is the only location-related data we use. Specifically:
- No browser geolocation prompt. The web app never asks your browser for permission to share your device location.
- No IP-to-coordinates conversion. We do not use MaxMind, ipinfo, or any equivalent service to translate your IP address into precise location coordinates.
- No crew or vehicle GPS tracking. We do not track real-time crew or vehicle locations or tie any such data to your account.
- Browsing history outside busbymanagementgroup.com
How we use it
- To send you your quote. Email + phone go to you so we can deliver the breakdown and follow up.
- To run your subscription. Payment token is used by QuickBooks Payments to charge your card monthly.
- To prevent account sharing. Every quote you generate is watermarked with your account name and IP address. We log every action you take in your portal. If we detect a non-subscriber using your account, we apply the $1,000 fine in your subscriber agreement.
- To stay in touch. We email you about your account (renewals, missed payments, terms changes). We do not send marketing emails to subscribers.
- To follow up on quotes. If you submit a one-off quote and don't book, we may follow up by email or phone within 30 days. After that we leave you alone unless you reach out.
- To process tier-change refunds. If you upgrade or downgrade your subscription, we use the payment information on file (held by Intuit/QuickBooks Payments) to issue a prorated refund for the unused portion of your prior tier.
Who we share it with
We share data with the minimum number of services required to operate. Each one has its own privacy policy and security obligations.
- QuickBooks / Intuit — for processing payments and storing your customer record. They hold your real card details, not us. Once your payment data is transmitted to Intuit, it is also subject to Intuit's Global Privacy Statement.
- Supabase — our authentication and database provider. Stores your login + subscriber record. Hosted in the US.
- Vercel — hosts the website and serverless functions. Sees your IP address and basic request logs.
- Resend — transactional email provider. Sees your email address when we send you a quote breakdown or account notice.
We do not sell, rent, or trade your data to anyone. We do not share it with marketers or data brokers.
If we ever receive a valid subpoena, court order, or law-enforcement demand, we'll comply if legally required — but we'll only share what's actually required, and we'll notify you if we're legally allowed to.
How long we keep it
- Quote leads (one-off quotes that never converted): 12 months, then deleted.
- Subscriber accounts: for as long as you're subscribed, plus 7 years after cancellation (required by IRS / Texas tax law for business records).
- Audit logs (login history, page access, payment events): 24 months, then auto-purged.
- Payment receipts: 7 years (tax requirement).
Your rights
You can:
- Ask what we have on you. Email us and we'll send you a copy of everything we've collected within 30 days.
- Correct errors. If something we have is wrong (your name, address, etc.), tell us and we'll fix it.
- Delete your account. Subscribers: cancel and ask us to delete. We'll keep tax-required records for 7 years but everything else gets wiped. Non-subscribers: just ask.
- Opt out of follow-up. Reply STOP to any email or text and we'll stop reaching out.
To exercise any of these rights: email busbymanagementgroup@gmail.com and we'll handle it within 30 days.
Texas appeals process
If BMG denies a request to access, correct, delete, or port your data, you have the right to appeal that decision. Submit your appeal within 60 days of the denial by replying to the denial email or sending a new email to busbymanagementgroup@gmail.com with the subject "DATA REQUEST APPEAL." BMG will respond to your appeal within 60 days of receipt. If we deny the appeal, you have the right to submit a complaint to the Texas Attorney General at texasattorneygeneral.gov.
Universal opt-out signals (Global Privacy Control)
BMG honors universal opt-out preference signals, including Global Privacy Control (GPC), as a request to opt out of any sale of personal data and any targeted advertising. We do not currently sell personal data and we do not engage in targeted advertising, so the practical effect of this commitment today is to confirm that posture.
Sensitive data
BMG does not collect or process sensitive data as that term is defined by the Texas Data Privacy and Security Act. We do not collect data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnoses, sexual orientation, citizenship or immigration status, genetic or biometric data, precise geolocation, or data of a known child under 18. If you believe you have inadvertently provided sensitive data through a quote note or message, contact us and we will delete it.
Cookies and tracking
We use a small number of cookies to make the app work:
- A session cookie to keep you logged in
- A preference cookie to remember things like which calculator tier you're using
We do NOT use Google Analytics, Facebook Pixel, advertising trackers, or any cross-site tracking. Browser logs are kept for 30 days for debugging then deleted.
Automated text messages (SMS)
Current status: BMG does not currently send automated text messages. If we add SMS in the future, we will follow the rules below.
What we will send
- Transactional only. Quote ready, dispatch confirmation, payment receipt, missed payment, subscription renewal reminder, and similar account-related notices.
- No marketing texts without your separate, prior express written consent. Receipts and account notices are not marketing.
How we collect consent
- Opt-in at signup. We will only send texts to phone numbers collected with an affirmative opt-in checkbox at signup, separate from the Terms of Service and Privacy Policy acceptance checkbox.
- Consent is not a condition of using BMG, getting a quote, or buying a subscription. You can use BMG fully without opting in to texts.
How to opt out and rate disclosures
- Reply STOP to cancel. We honor STOP requests within ten business days. Reply HELP for help.
- Message and data rates may apply. Your carrier may charge for incoming messages. BMG does not control those charges.
Children's privacy
This app is for licensed contractors and adult homeowners. We don't knowingly collect data from anyone under 18. If you believe a minor has signed up, contact us and we'll delete the account.
Texas residents and law enforcement
BMG is a Texas LLC taxed as an S corporation. This site is hosted in the US and operates under US law. Texas residents have the same rights described above. If you're outside Texas, those rights still apply, plus any additional rights your local jurisdiction grants.
Changes to this policy
We'll update this policy when we change how we handle data. The "Last updated" date at the top of this page reflects the most recent change. Material changes (new third-party services, new data uses) will be emailed to active subscribers at least 30 days before they take effect.
Questions or complaints
Reach out anytime:
Busby Management Group LLC
Kyle, TX
busbymanagementgroup@gmail.com
(201) 341-0224