Legal

Privacy policy.

Last updated October 19, 2026. This policy explains how Bussco handles information from our website, public demo and Strategic Workspace, including connected accounts, AI-assisted features and subscription billing. For privacy questions, email hello@bussco.com.

Who we are

This site and the Bussco Workspace are operated by My Groms LLC, doing business as Bussco ("Bussco", "we"). My Groms LLC is the legal entity and the controller for the information described on this page; Bussco is its trade name. We provide business strategy advisory, diagnostics, educational programs, and the subscription Strategic Workspace. We decide what is collected and why. When you create a Workspace account we also process your account details (name, email, login credentials), the business content you add, and usage and device data (such as IP address) to provide the service, keep it secure and improve it, on the basis of contract performance and our legitimate interests. You can reach us at hello@bussco.com for any privacy question, including access, correction, and deletion requests.

What we collect, and why

We collect information you submit and technical information generated when you use the service. You do not need an account to read the public website.

Contact and inquiry forms

Name, email, business, message

Used to read your inquiry, decide whether Bussco is the right fit, and reply. Kept as a record of the conversation.

Email list sign-up

Email, optional name

Used to send the writing and resources you asked for. You can unsubscribe from any email, and the link works immediately.

The Bussco Checkup

Answers, optional name and email

You can take the Checkup without giving us anything. If you ask for the written read, we store your name, email, business profile, and result so we can send it and pick up the conversation later.

Bookings and event registration

Name, email, selected time, notes

Used to hold your slot or seat, send confirmations and reminders, and prepare for the session.

Comments on articles

Name, comment text

Published on the site after moderation. Do not post anything in a comment that you would not want to be public.

Site usage

Public-page interactions and device information

Microsoft Clarity helps us understand public-site use through interaction measurements, heatmaps and session replay. This can include page visits, clicks, scrolling and browser or device information. It is not used to build advertising profiles. Workspace and onboarding paths are excluded from loading the Clarity script directly; this is not a claim that every signed-in interaction is untracked.

Workspace accounts and business content

Account, team, strategy and activity records

We store account details, business profiles, uploaded files, tool inputs and results, evidence, decisions, campaign content, support requests and related activity to provide your Workspace. Business access follows membership and assigned roles. Authorized Bussco administrators may access information for support; consulting access depends on assigned work.

Public interactive demo

Browser-local drafts

Demo details and illustrative outputs stay in browser storage rather than becoming saved Workspace records. Resetting the demo clears its draft. If you choose to create an account, your business name may prefill setup; demo results do not transfer. Public-page analytics may still measure interactions with the demo.

Our legal basis for using it

Where the GDPR or similar law applies to you: we handle inquiry, booking, and registration information because it is necessary to take steps at your request and to deliver what you asked for. We send marketing email on the basis of your consent, which you can withdraw at any time. We use aggregate analytics on the basis of our legitimate interest in understanding whether our writing is useful, in a way designed not to identify individuals.

Who processes it for us

We do not sell, rent, or trade your information, and we do not share it for anyone else's advertising. A small number of service providers process it strictly on our instructions so that the site can work.

Hosting and database

Site infrastructure

Our website, database, and file storage run on managed cloud infrastructure. Data is encrypted in transit and at rest by the platform, and access is restricted to Bussco accounts.

Email delivery

mail.bussco.com

Transactional and subscription email is sent through our managed email provider on our verified sending domain. They process delivery, bounces, and unsubscribes on our behalf.

Customer relationship management

HubSpot

Where enabled, inquiries and booking requests may be copied to HubSpot for follow-up. If you accept cookies, HubSpot's tracking code also measures visits on our public pages; it is not loaded on Workspace or onboarding pages. The record saved by Bussco remains authoritative; a failure in this optional connection does not prevent saving your request.

Language model processing

Cloud gateway and model providers

When you use ALEX, Lyra or other Workspace tools, relevant business context, inputs and supporting records are sent through our secure cloud gateway to large language model (LLM) providers to analyze data at scale and generate or synthesize drafts and proposals. This can include connected-service information you have reviewed and saved as evidence. Generated results and related provenance may be saved in your Workspace; people review and explicitly accept anything that becomes part of your Business Brain. Do not submit passwords, payment credentials or unnecessary sensitive personal information. Provider processing and retention are subject to their applicable terms; we do not claim zero retention or a universal no-training guarantee.

Public-site analytics

Microsoft Clarity

Clarity processes public-page usage and device information for interaction analytics, heatmaps and session replay. See the cookies and similar technology section below for browser controls.

Google Tag Manager

Google Tag Manager

Google Tag Manager loads on public pages only, after you accept cookies, and is used to manage measurement tags. It is not loaded on Workspace or onboarding pages.

Merchant of Record

Paddle.com

Workspace subscriptions are sold by Paddle.com as Merchant of Record. We share your name, email, business and plan details with Paddle for the sale of the product, subscription management, payments, tax compliance and invoicing. Paddle collects payment details directly and handles them under its own privacy notice; Bussco never sees or stores your full card number.

Professional advisers and authorities

Only when needed

We may share information with legal and accounting advisers under a duty of confidentiality, and with authorities where the law requires it.

Connected accounts and Meta business data

Connecting an external service is optional. An Owner or Admin authorizes a connection for their business, not for Bussco's own accounts. We store the connection label and encrypted access credentials to retrieve the information you authorize. Your Facebook password is not shared with Bussco. Facebook Login for Business connects business data; it does not replace your Bussco email-and-password sign-in.

Information received from Meta

Facebook Pages and linked professional Instagram accounts

Depending on your authorization and Meta's availability, we retrieve your Facebook account name to identify the connection; Page and linked Instagram account identifiers, names, usernames, follower and publication counts; and recent post or media text, publication dates, media types and available engagement, reach and impression metrics. The requested permissions are pages_show_list, pages_read_engagement, read_insights, pages_read_user_content, instagram_basic and instagram_manage_insights. The connector does not request your friends list, birthday, gender or private messages.

How connected information is used

Review first, then business analysis

We use authorized data to show performance summaries for review and help your team understand its business activity. Connecting does not automatically make imported information a confirmed Business Brain fact. When a person saves a summary as evidence, it becomes a Workspace record that ALEX and relevant strategic tools may use with your business context. Relevant saved information may be sent to model providers when you use AI-assisted features. Access follows your business's membership and role rules. We do not sell Meta data or use it to build advertising profiles.

Disconnecting and deleting connected data

Authorization and saved records are separate

An Owner or Admin can disconnect Meta in Business Brain → Connections to remove the stored connection and access token and stop new retrievals through that connection. You can also revoke Bussco's authorization in Facebook's Business Integrations settings. Disconnecting alone does not delete evidence, decisions or AI outputs already saved in your Workspace. Use supported Workspace deletion controls, or email hello@bussco.com with the subject 'Meta data deletion' to request deletion of your Meta connection information and imported data, including related saved outputs. Identify your Bussco account and business, but do not send passwords or access tokens. We verify your identity and authority, respond within 30 days, and explain any records that must be retained for legal or security obligations. The 30-day trash restoration window applies to supported soft-deleted items; it is not immediate permanent erasure.

Where it is stored

Our infrastructure and service providers may store and process information in the United States and other countries where they operate. Where information is transferred out of the UK or the European Economic Area, we rely on our providers' standard contractual clauses and equivalent safeguards.

How long we keep it

Inquiries and Checkup results are kept while the conversation is useful and reviewed at least once a year, then deleted. Booking and event records are kept for up to two years so we have a record of work discussed and delivered. Email subscriptions last until you unsubscribe, after which we keep only the minimum needed to honor that choice. Records connected to a paid engagement are kept for as long as tax and contract law requires.

Workspace data controls

Authorized users can delete supported items through Data & trash and the relevant Workspace screens. Soft-deleted items have a 30-day restoration window; moving an item to trash is not immediate permanent erasure. Resetting Workspace data is subject to your role and excludes records that must remain protected, including delivered originals and billing records. Business deletion is blocked while subscribed. For account deletion or a broader erasure request, email hello@bussco.com. Contractual, security and legal retention obligations may require some records to remain after a request.

Documents, Alex and exports

Files uploaded to Documents & assets are private by default. Alex only reads a document when someone with edit rights chooses to share it with Alex, and that choice can be reversed at any time. Alex answers from your business's own records: accepted Business Brain information, your intake answers, active tasks and documents you shared. It does not browse the open web or see other businesses. You can download everyday summaries yourself at any time. A complete Business Brain export is prepared by the Bussco team on request, so a full archive is handled carefully and sent only to an authorized person. Joining anonymized industry research is optional, offered during intake and in Settings, and stays off unless an Owner or Admin chooses it.

Your choices and rights

You can ask us what we hold about you, ask for a copy, ask us to correct it, ask us to delete it, or ask us to stop using it for a particular purpose. Email hello@bussco.com and we will confirm receipt and act within 30 days. We will never make you jump through hoops, and asking will not affect how we work with you. If you are in the UK or the EEA and are unhappy with our response, you may also complain to your local data protection authority.

Cookies and similar technology

We use a small number of cookies and browser storage. Essential cookies keep you signed in and remember your language; Paddle sets its own cookies during checkout as Merchant of Record. Optional public-page scripts from Microsoft Clarity, Google Tag Manager, HubSpot and Meta's Facebook JavaScript SDK load only if you accept them in the consent banner; declining or closing the banner leaves them disabled. The Meta SDK is initialized to log public-page visits and may send page, browser and device information to Meta, which processes it under its own privacy policy. This public-page SDK is separate from authorizing business data in Connections. Your choice is stored in a single first-party cookie for 12 months, and you can change it anytime from the Cookie settings link in the footer. Demo drafts live in your own browser storage and are cleared with the demo reset control or your browser settings. Blocking essential storage may prevent sign-in or saving preferences. We do not sell your information or use it to create advertising profiles.

Security

Bussco uses organization-scoped access rules, server-side permission checks and authenticated administrative access. These safeguards reduce risk but do not guarantee absolute security. Bussco does not currently hold a SOC 2 report. Read our Security & data protection page for the current safeguards and reporting guidance, or email hello@bussco.com with a concern.

Children

This site is intended for people running or building businesses. It is not directed at children under 16, and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

If our practice changes, we will update this page and change the date at the top. Material changes affecting people already on our list will be announced by email rather than quietly published.

Questions about your data?

Email hello@bussco.com or use the contact form. A person answers, usually within two business days.