Privacy Policy

Because the Service is used both by us and by other implementers, we handle information in two different capacities. It matters which one applies to you.

• Service provider to subscribing implementers (“Customers”). When an implementer subscribes to the Service and enters information about their own clients, prospects, team members and sessions (“Customer Data”), that Customer controls the data. We process it only to provide the Service to that Customer and as described in this Policy and our Terms of Service. If you are a client of an implementer who uses the Service, their privacy practices govern how your information is collected; contact them with questions about it.
• Operator of our own practice. When you interact with Power Up directly — as an EOS client or prospect, an Outgrow cohort member, a webinar registrant, or a visitor who submits one of our public forms — Power Up is responsible for that information, and this Policy applies directly.

Account information. When a Customer creates an account we collect the name, email address, password (stored hashed by our authentication provider), role (owner or assistant), timezone and practice details of each user.

Customer Data entered into the Service. Customers enter business contact information for their clients, prospects, referral partners and team members (names, titles, email addresses, phone numbers, mailing addresses, birthdays); company details; session schedules, agendas and notes; EOS tools such as Vision/Traction Organizers, Accountability Charts, Rocks, Scorecards and Issues lists; fees, invoices, payment plans and commissions; and travel arrangements. Session notes may include free-text observations about individuals at a client company.

Information from our public pages. Our Outgrow calculator, engagement-ROI, proposal, webinar and cohort pages ask for information such as your name, email address, company name, revenue and growth figures, and answers to program questions. Cohort members submit weekly activity logs through a personal link. Webinar and cohort registrations are received from our marketing platform (HighLevel) and stored in the Service.

Onboarding questionnaires. Before an engagement begins, an implementer may send each member of a client’s leadership team a personal link to a short questionnaire. It asks for contact details, role, birthday, and preferences that help the implementer take care of you at sessions — such as food and drink preferences, shirt size, music, hobbies, family and pets, how you like to be recognized, and any allergies or dietary needs. Answering is optional; the responses are stored in the Service for the implementer who sent the link.

Information from connected services. When a user connects a third-party account, we receive information from it as authorized: customer, invoice and payment records from QuickBooks Online; calendar events and file metadata from Google Calendar and Google Drive; and email messages and contacts from the connected email inbox. We store the OAuth tokens needed to keep those connections working, per user.

Communications. Emails sent and received through the Service, support requests, and correspondence with us.

Technical information. Server logs, IP address, browser type, timestamps and error reports generated when you use the Service. We do not run third-party advertising or analytics trackers on the Service or our public pages.

• To provide, operate, secure and support the Service, including authentication, scheduling, invoicing, email and task automation, and reporting.
• To perform actions a user has asked for in a connected account — for example creating a calendar event, uploading a session file to Drive, or issuing an invoice in QuickBooks.
• To run our own practice: scheduling and delivering sessions, responding to inquiries, sending onboarding, reminder, follow-up, and program emails, sending handwritten cards and gifts, and processing payments.
• To draft content with AI assistance, as described below.
• To communicate with Customers about their account, billing, security and changes to the Service.
• To comply with law, enforce our Terms, and protect the rights, safety and property of Power Up, our Customers and others.

We do not sell personal information, and we do not use personal information for targeted advertising.

Some features send information to Anthropic’s Claude API to generate a draft — for example a post-session follow-up email drafted from session notes, or a Vision/Traction Organizer extracted from an uploaded screenshot. The content sent is limited to what the feature needs (such as the relevant session notes, participant first names and the email being answered), and a user always reviews and edits the draft before anything is sent or saved.

Anthropic processes this content as our service provider under its commercial API terms, which do not permit it to use API inputs or outputs to train its models. We do not use Customer Data to train AI models ourselves.

We share information only as needed to run the Service, with the following categories of service providers (“subprocessors”), each bound by their own terms and security commitments:

• Supabase — database, authentication and file storage (hosted in the United States).
• Vercel — application hosting, serverless functions and scheduled jobs.
• Google (Google Workspace, Calendar, Drive, Gmail) — when a user connects a Google account.
• Intuit (QuickBooks Online) — when a user connects a QuickBooks company.
• Anthropic — AI drafting, as described above.
• Handwrytten — printing and mailing physical cards when a user sends one; the recipient’s name and mailing address are shared for that purpose.
• HighLevel — Power Up’s marketing and registration platform for webinars and Outgrow programs.
• Stripe — payment processing for Power Up’s cohort programs. Payment card details are entered on Stripe’s hosted checkout and never touch our servers.

We may also disclose information when required by law or legal process, to protect the security of the Service, in connection with a merger, acquisition or sale of assets (with notice to Customers), or with your direction or consent.

We do not share, sell or transfer personal information to data brokers, advertising networks or credit agencies.

Venzy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice this means: we use Google Calendar, Drive and Gmail data only to provide user-facing features of the Service that you have turned on (creating and syncing session events, storing session files, and reading and sending email from your own inbox); we do not transfer that data to anyone except as necessary to provide those features, with your consent, for security, or to comply with law; no human at Power Up reads your Google data except with your permission, for security or abuse investigation, to comply with law, or in aggregated, de-identified form for internal operations; and we never use Google data for advertising or for training generalized AI models. You can disconnect Google at any time from the Service’s settings or from your Google Account permissions page.

The Service uses first-party cookies solely to keep you signed in and to maintain your session securely. Our public pages set no cookies other than those needed for the page to function. We do not use advertising, analytics or cross-site tracking cookies. Your browser’s theme preference is stored locally on your device and is not sent to us.

We protect information with encryption in transit (TLS) and at rest, row-level security policies in the database, role-based access within an account, hashed passwords, secret-protected scheduled jobs, and standard web security headers. Access to production systems is limited to Power Up personnel who need it to operate the Service.

Power Up may access a Customer’s account for support and troubleshooting, as described in our Terms of Service. No method of transmission or storage is completely secure; if we learn of a breach affecting your information we will notify affected Customers without undue delay and as required by law.

We keep account and Customer Data for as long as the Customer’s subscription is active and for a short wind-down period afterward so the Customer can export it. After that, or on a Customer’s written request, we delete or de-identify it, except for records we must keep for legal, tax, accounting or dispute-resolution purposes (for example invoice history) and routine backups, which expire on their own schedule.

For our own practice, we keep client, prospect and program records for as long as we have a business relationship or a legitimate need, such as tax and contract records.

• Access, correction and deletion. Customers can view and edit their data in the Service and can ask us to export or delete it. If you are a client of an implementer who uses the Service, please direct requests to that implementer; we will assist them.
• Connected accounts. You can disconnect QuickBooks, Google or email at any time, which stops further data flow. We will delete stored tokens when a connection is removed.
• Email. Program and marketing emails from Power Up include a way to opt out. Transactional messages about your account or a scheduled session may still be sent.
• Depending on where you live, you may have additional rights under applicable privacy law. We honor verified requests to the extent the law requires and will not discriminate against you for exercising them.

To make a request, email lyn@powerupconsultants.com.

The Service and our public pages are intended for business use by adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

We are based in the United States and our service providers store data there. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

We may update this Policy from time to time. We will post the revised version at this address with a new “Last updated” date and, for material changes, notify Customers by email or in the Service before the change takes effect.

Questions or requests about this Policy: Power Up Consultants, LLC, a Louisiana limited liability company. Email lyn@powerupconsultants.com.