Clear about
what you share.

Updated September 16, 2026. BPGO is part of 1459731 B.C. LTD. Contact Jeff Penner at jeff@bpgo.ai with privacy questions or requests to access, correct or delete your information.

Business mailing address: 57-5556 Peach Rd, Chilliwack, BC, Canada.

When you use your own AI for an assessment

To begin, we collect your email address and create or connect your BPGO account. We send a sign-in link and open your exercise. You do not need to provide your business name, phone number or website first. Your AI asks the business questions in your own conversation.

If you later approve saving your findings, we also store the public business details and sources you choose to share. Earlier versions of the exercise collected additional contact and business details; those records remain private and can be accessed, corrected or deleted on request. We do not add new details from your AI conversation without your approval.

When you request a service

You choose a completed report you have already shared with BPGO. We check that it belongs to your verified account, then store your name, selected service, message and a reference to that report. Your contact email comes from your verified account and the business name comes from the selected report’s business record. Jeff uses this information to review your request and respond. Checking your saved reports does not itself send a service request or authorize paid work.

When you inquire about AI coaching

We store the name, email, optional business name, coaching interest and message you submit, with a record of your permission to be contacted and the submission time. The BPGO team uses these details to review and respond to your inquiry. No account, report upload, purchase or marketing subscription is created. An email entered on this form is contact information, not a verified account identity. Please do not include passwords, private AI conversations or confidential customer or employee information.

Inquiries you have already submitted

Previously submitted snapshot requests remain in BPGO’s private inquiry storage with the contact details, business information, optional context and consent record you provided. Jeff can use those details to respond. The separate prepared-for-me request route is no longer accepting submissions. You can ask us to access, correct or delete a previous request.

Your AI session stays yours

You run the assessment in your own ChatGPT Work or Codex session. The website supplies an exercise guide and any context you approved. It does not request your private conversations, files or AI account credentials. Your AI provider’s terms and privacy settings govern your session.

You choose when the report is saved

The agent can stage a report in this browser tab. That draft is kept in the tab’s session storage and is not sent to BPGO by the staging tool. When you choose Save to BPGO, the report and its sources are stored in your account and shared with Jeff. Corrections you submit are stored alongside it.

Your kit progress and optional feedback

The connected AI Website Kit can read its checklist and your saved work. When you approve saving, we store the checklist items, work colours, outcomes, notes, evidence and guide version you approved in your BPGO account. Unsaved checklist and feedback drafts stay in the open page’s memory and disappear when you reload or close it.

Feedback is separate and optional. When you approve sending a draft, the BPGO team receives the step, relevant question, what was tried, course version and a record of your approval linked to your account. We use it to review and improve the kit. We do not collect your full AI conversation. Downloads of your current guide include your saved work; share them only where you intend to. You can request access, correction or deletion using the contact above.

Accounts, storage and email

New inquiries can generate a notification to the BPGO team. That alert contains a private inbox link and request reference, not the contents of your inquiry. Only authorized team accounts can open the inbox. We retain delivery status to identify failed alerts.

Supabase provides account authentication, database storage and BPGO’s application APIs. The database is in BPGO’s Canadian project region; API requests may be processed in other regions. Resend delivers email and may process email addresses and delivery information outside Canada. Vercel hosts the website and processes requests and operational logs. Service providers process information as needed to provide these services.

Email preferences

Account messages, requested receipts and replies to your inquiries support the service you chose. The email-only exercise signup does not subscribe you to marketing. If you separately opted in through an earlier form, you can withdraw that choice by emailing Jeff. Any marketing messages will include an unsubscribe option.

What we keep

We retain your submitted details and saved work while they support your BPGO relationship, unless you ask us to delete them or retention is needed for an applicable obligation. Browser access to an unverified assessment expires after 24 hours. Expiry of browser access does not automatically delete the submitted form details.

Cookies and browser storage

The site uses necessary browser storage to keep your Supabase sign-in session. Tab storage keeps temporary exercise access, your unsaved draft and a return destination for up to one hour after sign-in is requested. Signing out clears your login and exercise access from that browser. Your optional measurement choices are saved in your browser for up to 180 days. Necessary storage does not depend on accepting optional measurement.

Optional site measurement

On the launched public site, you can separately choose Google Analytics for public-page visits, exercise signups, successful service and coaching inquiries, and the path to checkout; and Microsoft Clarity for homepage clicks, scrolling and masked session recordings. Neither service loads before your consent. Both are disabled in development and preview deployments. We do not enable advertising personalization.

Analytics events describe actions, not the contents of your form. We exclude private assessments and account pages, remove query strings from Analytics page addresses, and do not send your name, email, phone, business details or report content as event fields. Clarity is limited to the homepage and uses strict text masking; it does not run on forms or private reports.

Google and Microsoft may process permitted usage data, device information and cookie identifiers outside Canada under their respective privacy policies. Use Cookie settings on the public site to change or withdraw consent. We also honor Do Not Track and Global Privacy Control by disabling optional measurement. You can always start the free exercise without accepting either option.