Bag Carriers
Privacy Policy
Effective Date: June 1, 2026 ยท Last Updated: July 5, 2026
This Privacy Policy describes how Bag Carriers LLC ("Bag Carriers," "we," "us," or "our") collects, uses, shares, and protects information when you use the Bag Carriers agent portal application (the "App") and related services. The App is a business tool used by authorized Bag Carriers sales representatives, partners, and administrators. This Policy also describes how Bag Carriers communicates with prospects, leads, and enrolled clients by telephone call and text message (SMS/MMS); see Section 1.
1. SMS & Voice Communications (Calls & Text Messages)
This section governs Bag Carriers' telephone and text-message program and is provided to satisfy mobile carrier (A2P 10DLC) and Telephone Consumer Protection Act (TCPA) requirements. It applies whenever Bag Carriers places phone calls to, or sends SMS/MMS text messages to, prospects, leads, and enrolled clients.
1.1 What Calls and Messages We Send
With your consent, Bag Carriers may contact you by phone call and/or text message for purposes that may include:
- Appointment scheduling, confirmations, and reminders
- Account, billing, enrollment, and service notifications
- Sales follow-ups and responses to inquiries you initiate with us
- Customer support and service updates
- Occasional offers or promotions, only where you have separately opted in to marketing messages
1.2 How We Obtain Your Consent
We only call or text individuals who have given prior express consent. We obtain that consent in one or more of the following ways:
- Web form or enrollment checkbox: you check a clearly labeled opt-in box on a Bag Carriers web form, lead form, or at bagcarriers.com/enroll, shown next to disclosure text describing this program.
- Verbal or in-person: you verbally agree to receive calls or texts during a phone call or meeting, and we record the date and source of that consent.
- Existing business relationship: you provided your phone number to us in the course of doing business (for example, on a signed agreement or project intake form). In that case we send only transactional, service-related messages (not promotional messages) unless you separately opt in.
Consent to receive calls or texts is never a condition of purchasing any goods or services. Message frequency varies based on your account activity and your interactions with us.
1.3 Your Mobile Information Is Never Sold or Shared for Marketing
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
No mobile information, including your phone number and your SMS opt-in and consent, will be shared with, or sold to, any third parties or affiliates for their marketing or promotional purposes. We disclose phone numbers only to the subprocessors identified in Section 4 that are strictly necessary to deliver our own calls and messages to you (for example, our telephony and messaging carrier). Text-messaging originator opt-in data and consent are expressly excluded from any data sharing and will not be shared with any third parties.
1.4 Opting Out and Getting Help
- To stop texts: reply STOP to any text message from us at any time. You will receive a single confirmation message and then no further texts, unless you opt back in.
- For help: reply HELP to any text, or contact us at frank.lechner@bagcarriers.com or 814-935-0001.
- To stop calls: ask to be placed on our internal Do Not Call list during any call, or contact us using the details above. We honor opt-out requests promptly.
1.5 Rates, Timing, and Delivery
- Message and data rates may apply, depending on your mobile carrier and plan.
- Non-emergency calls and messages are placed only between 8:00 AM and 9:00 PM in your local time zone.
- Message delivery depends on your carrier's network. Mobile carriers are not liable for delayed or undelivered messages.
2. Information We Collect
When you use the App, we collect the following types of information:
2.1 Account & Profile
- Authentication data: Email address, hashed password, and Sign in with Google / Sign in with Apple identifiers if used.
- Profile information: Your full name, role, and optional avatar image.
2.2 Business Activity
- Lead and prospect records you create, including business name, contact name, phone, email, address, vertical, deal value, stage, notes, follow-up dates, close probability.
- Activity history for each lead: stage changes, notes, meeting bookings, communications.
- Client enrollment data: agreement terms, billing types, monthly amounts, NMI subscription identifiers.
- Campaign, payout, and earnings data related to your work.
2.3 Cope AI Assistant Data
When you use the Cope AI assistant features:
- Conversation transcripts: both text messages and voice transcriptions are stored to maintain context across sessions and devices.
- Voice audio: when you use voice mode, audio is captured by your device microphone and sent to OpenAI's Whisper API for transcription. Audio recordings are not retained after transcription completes.
- AI-extracted memories: Cope generates short summarized statements ("memories") about you, your work patterns, family, prospects, and preferences, used to personalize responses in future conversations. You can view, edit, or archive any memory at any time through the in-app Notebook.
- Calendar access (optional): if you connect a Google Calendar or iCloud calendar feed, we read upcoming events to ground Cope's briefings. We do not write to or modify your calendar.
2.4 Device & Technical
- Push notification tokens: APNs (iOS) or web push subscriptions, used to deliver scheduled briefings and pipeline alerts.
- Device and version information: device type, operating system version, app version, used for support and debugging.
3. How We Use Your Information
We use the information we collect solely to operate the App, including to:
- Authenticate your access and protect your account
- Manage your sales pipeline, leads, meetings, campaigns, payouts, and client enrollments
- Provide the Cope AI assistant, including conversation continuity, memory recall, voice features, scheduled briefings, and calendar-aware suggestions
- Deliver push notifications you have opted in to receive
- Process payment-related metadata (subscription IDs and customer vault IDs through NMI) on behalf of enrolled clients
- Send email outreach blasts to leads you have explicitly selected, through our email delivery provider
- Place phone calls and send SMS/MMS text messages to prospects and enrolled clients who have consented, as described in Section 1
- Support, debug, and improve the App
We do not use your data to train any third-party machine learning models, sell your data, or use it for advertising.
4. Third-Party Services (Sub-Processors)
We share specific data with the following service providers, only as necessary to operate the App. Each provider is contractually obligated to protect your data and use it only to perform their service.
| Provider | Purpose | Data Shared |
|---|
| Supabase | Database, authentication, file storage | All account and business data |
| Netlify | Application hosting, function execution | Encrypted in transit only |
| Anthropic | Cope AI assistant (Claude) | Conversation text, memory context, your message, sent for response generation; not retained by Anthropic for training per their API terms |
| OpenAI | Voice transcription (Whisper) | Voice audio for transcription only; not retained beyond the request |
| ElevenLabs | Cope voice synthesis | Text of Cope's responses for speech output |
| Google Cloud (optional) | Google Calendar API | OAuth tokens and calendar event data, only if you connect your Google account |
| iCloud (optional) | iCloud public calendar feeds | Calendar URL only; we fetch publicly-shared events |
| Apple Push Notification service | iOS push delivery | Device token and notification payload |
| NMI | Payment processing for enrolled clients | Subscription and customer vault identifiers |
| Resend | Outbound email delivery | Recipient address and message content for blasts you initiate |
| Twilio | Telephony & SMS/MMS delivery (calls and text messages) | Recipient phone number and message or call content, solely to deliver our own calls and texts; not used for their marketing |
5. Data Storage and Security
Your data is stored in Supabase's managed cloud infrastructure. We use industry-standard security including:
- HTTPS / TLS encryption for all data in transit
- Encryption at rest for sensitive integration credentials (AES-256-GCM)
- Row-level security policies that limit access to your own data
- Admin-only access for cross-user data (e.g., team management features)
- Service role credentials kept server-side; never exposed to the client
6. Microphone and Speech Recognition
The App requests microphone access when you activate Cope's voice mode. Audio is captured locally on your device and transmitted over HTTPS to OpenAI's Whisper API for transcription. We do not retain the original audio after transcription. You can decline microphone permission and continue using the App's text features.
7. Push Notifications
The App uses Apple Push Notification service (APNs) on iOS and standard Web Push (VAPID) in browsers to deliver scheduled briefings and pipeline alerts. You may disable notifications at any time through your device settings or the in-app Notebook.
8. Your Rights: Access, Correction, Deletion
You have the right to:
- Access your personal data; most of it is visible within the App itself
- Correct your data through the App's editing features
- Delete your account from within the App at any time via Settings → Delete Account. Account deletion is permanent and removes your authentication credentials, profile, and personally-attributable activity records within 30 days. Business records (leads, campaigns) you created may be retained in anonymized form for business operations and legal compliance.
- Export your data on request
- Withdraw consent for optional integrations (calendar, push notifications)
To exercise any of these rights, use the in-app controls or contact us at the address below.
9. Data Retention
We retain your account and activity data for as long as you are an active user of the App. After account deletion, we permanently delete personally-attributable data within 30 days, except where retention is required by law. Aggregated, anonymized statistics may be retained indefinitely.
10. Children's Privacy
The App is intended exclusively for adult use in a professional business context. We do not knowingly collect personal information from anyone under the age of 13.
11. International Users
The App is operated from the United States. By using the App, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country of residence.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Material changes will be communicated through the App.
13. Contact Us
If you have any questions about this Privacy Policy, our SMS/voice program, or how we handle your data, please contact us: