This Privacy Policy explains how Agentic Secure Group Inc., a Delaware corporation doing business as “ASG” (“ASG,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information through the website at https://www.asgroup.ai, its staging and related subdomains, and the ASG Journal (together, the “Sites”).
This Policy covers the Sites only. It does not cover bolde.ai or any product or service of bolde. beyond the Sites. It also does not cover Mojave Research Inc., a separate Wyoming corporation that handles government work and has its own practices. Services we provide to clients under a written agreement are governed by that agreement and any data processing terms in it, not by this Policy.
The Sites are intended for business professionals. We do not sell products to consumers, we do not accept payments through the Sites, and the Sites are intended for adults 18 and older.
1. Notice at Collection (Summary)
| What we collect | Why | Sold or shared for cross-context advertising? | How long we keep it |
|---|---|---|---|
| Contact and inquiry details you submit (name, email address, verified mobile phone number, title, organization, organization type, firm size, area of interest, message, Briefing answers, any Acceptance Workbench content you include) | To answer your inquiry and schedule a Briefing call | No | Delivered to our business mailbox and kept there while we respond and while any business relationship continues, and deleted within 3 years after our last communication with you unless we need it for a legal claim or legal obligation. We keep no copy of your inquiry in a database of our own; the short-lived anti-abuse records described in Section 5 are held with our hosting provider. |
| Record of your agreement to our Terms of Use (Terms version, date and time, checkbox state, verified email address and mobile phone number, and request reference number) | To show that you agreed to the Terms of Use and to enforce them | No | Included in the Briefing request email in our business mailbox and kept for as long as the Terms could govern a dispute with you, and no longer than 7 years after your last submission |
| Email address and mobile phone number you verify, with name and organization | To send and check a one-time verification code | No | Verification records expire after 10 to 30 minutes |
| IP address, and in limited cases email address, used for abuse prevention | Rate limiting, duplicate-submission protection, bot detection, and security | No | Rate-limit and duplicate-check records last from 10 minutes to 24 hours, except as noted in Section 5 |
| Technical request data (IP address, browser and device information, requested URL, including any search term in the URL) | Hosting, security, and troubleshooting | No | Kept in our hosting provider’s request logs for no more than 30 days |
| Journal usage counts, only if you turn measurement on | To understand which Journal content is useful and how pages perform | No | Kept indefinitely as daily totals that contain no personal information |
| Briefing step counts, only if we turn them on | To understand where visitors stop in the Briefing request | No | Kept for up to 400 days as daily totals that contain no personal information |
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it to train artificial intelligence models.
2. Information We Collect
2.1 Information you give us
Briefing requests and inquiries. When you request a Briefing or contact us, we collect your name, email address, title, organization, organization type, area of interest, message, how you heard about us, your answers to Briefing questions (for example, your workflow and constraints), your firm size, any Acceptance Workbench content you choose to include, and the email address and mobile phone number you verified. When you send a Briefing request, we also record that you agreed to our Terms of Use, as described in Section 5.
Verification. Before you submit a Briefing request, we ask you to verify both your email address and your mobile phone number. We collect that email address and phone number, along with the name and organization you enter.
Scheduling. If you book a call, our booking link sends you to Microsoft Bookings. Microsoft collects the information you enter there for us.
Communications. If you email us, we receive the contents of your message and any information in it.
Please do not send confidential documents or confidential information through the Sites. We ask that confidential material be exchanged only after a mutual nondisclosure agreement is in place.
2.2 Information collected automatically
Request data. Like any website, our hosting provider receives technical data with each request, including your IP address, browser and device information, the date and time, and the URL requested. A search term you enter on the Journal is part of the URL and may appear in these logs. Our applications do not store search terms.
Bot protection. We use Cloudflare Turnstile on our forms. Turnstile runs a challenge in your browser, and we send the resulting token, the site hostname, and your IP address to Cloudflare to confirm the request is not automated.
Cloudflare Web Analytics. Our security policy permits Cloudflare Web Analytics, which our hosting provider can enable at the account level. When enabled, it measures page loads in aggregate and does not use cookies or local storage to identify you. We do not use any other analytics, advertising, or tag-manager scripts on the Sites, and our content security policy blocks third-party scripts other than Cloudflare’s.
Journal measurement (off unless you turn it on). The ASG Journal offers optional usage measurement controlled by an “Allow / Turn off” switch. Nothing is measured unless you choose “Allow.” When it is on, your browser reports these events: article views, topic follows, call-to-action clicks, and newsletter interest, plus page performance ratings (Core Web Vitals: CLS, INP, and LCP). For each event, we add one to a daily count for that page, topic, or metric. We do not store your IP address, browser information, any identifier, or the value of your cookie with these counts. Our server rejects measurement requests from any browser that has not turned measurement on.
Briefing step counts. We may count how many visitors reach each step of the Briefing request, as daily totals by step and referral source. These totals contain no email address, phone number, IP address, browser information, or answers, and are kept for up to 400 days. This counting is off unless we turn it on.
2.3 Information that stays in your browser
Acceptance Workbench. The Acceptance Workbench runs entirely in your browser. It makes no network requests and uses no cookies, storage, or analytics. Your work is held in the part of the page address after the “#” symbol, which browsers do not send to websites. We receive that content only if you include it in a Briefing request.
Followed topics. If you follow topics on the Journal, your choices are saved in your browser’s local storage and are not sent to us. The only exception: if you have turned measurement on, we add one to the daily “topic follow” count. You can remove followed topics at any time with “Clear followed topics” or by clearing your browser storage.
3. How We Use Information
We use personal information to:
- respond to inquiries, evaluate Briefing requests, and schedule and hold Briefing calls;
- send you a verification code and confirm your email address and mobile phone number;
- send you a confirmation that we received your request;
- protect the Sites and our users, including preventing spam, automated abuse, fraud, and duplicate submissions;
- operate, maintain, troubleshoot, and improve the Sites, including through the aggregate Journal counts and Briefing step counts described above;
- comply with law, enforce our Terms of Use, and establish, exercise, or defend legal claims.
We do not send marketing email through the Sites. The only emails the Sites send are verification codes, confirmations of your request, and internal notifications to our team. If we later correspond with you about our services, you can ask us to stop at any time.
We do not use automated decision-making that produces legal or similarly significant effects about you.
Artificial intelligence. We do not use information collected through the Sites to train, fine-tune, or improve artificial intelligence or machine learning models, and the Sites do not send your information to any AI model provider. If we ever change this practice, the change will apply only to information collected after the change and only with your consent.
4. How We Disclose Information
We disclose personal information only as follows:
Service providers. We use these providers to run the Sites. Each processes personal information on our behalf and under our instructions:
| Provider | Service | Information involved |
|---|---|---|
| Cloudflare, Inc. | Hosting, request logs, key-value and database storage, media storage, secret storage, Turnstile bot protection, Access login protection for Journal administrators, and Web Analytics when enabled | Request data, IP address, verification and anti-abuse records, Journal aggregate counts |
| Microsoft Corporation | Microsoft 365 email delivery and mailbox storage, and Microsoft Bookings scheduling | Inquiry contents, contact details, verification emails, booking details |
| Twilio Inc. | Twilio Verify SMS one-time codes | Mobile phone number and the verification code |
Legal and safety. We may disclose information when we believe in good faith that it is required by law, subpoena, or other legal process; to protect the rights, property, or safety of ASG, our clients, or others; or to investigate or prevent fraud, security incidents, or violations of our Terms of Use.
Corporate transactions. If ASG is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy or protections at least as strong.
With your direction. We disclose information when you ask us to or agree to it.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the past 12 months. We have no actual knowledge of collecting or selling personal information of anyone under 16.
5. Retention
We keep personal information only as long as reasonably necessary for the purposes in this Policy, unless a longer period is required or permitted by law.
| Record | Retention |
|---|---|
| Inquiry and Briefing emails in our Microsoft 365 mailbox | Kept while we respond and while any business relationship continues, and deleted within 3 years after our last communication with you unless we need them for a legal claim or legal obligation |
| Record of agreement to our Terms of Use (Terms version, date and time, checkbox state, verified email address and mobile phone number, and request reference number), included in the Briefing request email | Kept for as long as the Terms could govern a dispute with you, and no longer than 7 years after your last submission |
| Email verification code record (code, email, name, organization) | 11 minutes |
| Proof that a verification succeeded | 15 minutes, or deleted earlier when you submit your request |
| Verification session | 30 minutes |
| Verification-send rate limit | 1 hour |
| Contact-form rate limit, keyed on your IP address (or email address if no IP address is available) | Counts reset every 10 minutes. Expired records are deleted automatically, in batches, during later form submissions. |
| Duplicate-submission check | 2 minutes while pending; 24 hours in fast storage once complete; expired database records are deleted automatically, in batches, during later form submissions |
| Request logs | No more than 30 days |
| Journal daily counts | Indefinitely; they contain no personal information |
| Briefing step counts | Up to 400 days; they contain no personal information |
| Cookies and local storage | See Section 6 |
6. Cookies and Similar Technologies
We use only first-party cookies and browser storage. We do not use advertising cookies, cross-site tracking cookies, or device fingerprinting.
| Name | Site | Type | Lifetime | Purpose |
|---|---|---|---|---|
gate_sid |
asgroup.ai | Strictly necessary cookie (HttpOnly, Secure, SameSite=Strict, signed) | 30 minutes, renewed when a code is sent | Links a verification code to your browser session |
| Cloudflare Turnstile cookies | asgroup.ai | Strictly necessary, set by Cloudflare if needed | Set by Cloudflare | Bot protection |
asg_measure |
ASG Journal | Preference cookie (SameSite=Lax, Secure) | 180 days, or until you choose “Turn off” | Records that you turned measurement on |
theme |
ASG Journal | Preference cookie (SameSite=Lax, Secure) | 1 year, or until you choose “system” | Remembers light or dark display |
asg_followed_topics and asg-journal:followed-topics |
ASG Journal | Local storage | Until you clear them | Remembers topics you follow, in your browser only |
You can block or delete cookies and local storage through your browser settings. Blocking gate_sid will prevent verification and form submission.
Do Not Track and Global Privacy Control. We do not track visitors across third-party websites, and we do not allow third parties to collect personal information about your online activities over time and across websites through the Sites. Because the Sites do not track you across sites, we do not change our practices in response to browser Do Not Track signals. We honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information. Because we do not sell or share personal information, no further action is needed. Journal measurement stays off unless you turn it on, whether or not your browser sends GPC.
7. Text Messages
When you select “Send my verification codes” or resend a text code, you agree, as stated next to that button, to receive one text message containing a one-time verification code for each code you request. We send these messages through Twilio Verify only at your request. They are transactional, and we do not use them for marketing. Message and data rates may apply. Message frequency depends on how many codes you request, and the Sites limit sends to 15 per hour per number. Reply STOP to stop receiving messages or HELP for help, or contact info@asgroup.ai. Carriers are not liable for delayed or undelivered messages.
We do not share or sell mobile phone numbers or SMS consent with third parties or affiliates for marketing purposes. We disclose your number only to Twilio to deliver and check the code.
8. Security
We use administrative, technical, and physical safeguards suited to the information we handle. On the Sites, these include encrypted HTTPS connections enforced with HTTP Strict Transport Security; a strict content security policy that blocks unauthorized scripts and framing; signed, HttpOnly session cookies; one-time codes generated securely and checked in constant time; hashed email addresses and phone numbers in verification records; rate limits and bot protection; and restricted, access-controlled administration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by law.
9. Your Privacy Rights
9.1 U.S. state privacy rights
Depending on where you live, including California, Colorado, Connecticut, Delaware, Oregon, Texas, Virginia, and other states with comprehensive privacy laws, you may have the right to:
- know and access the personal information we have collected about you, including the categories, sources, purposes, and recipients;
- correct inaccurate personal information;
- delete personal information we collected from you;
- obtain a copy of your personal information in a portable format;
- opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of significant decisions (we do not engage in any of these);
- limit the use of sensitive personal information (we do not use sensitive personal information for any purpose that triggers this right); and
- not be discriminated against for exercising these rights.
Some state laws do not apply to information about people acting in a commercial or employment context. We will respond to requests as the applicable law requires.
Categories under California law. In the past 12 months we have collected the following categories of personal information from you directly, from your browser, and from our service providers, for the business purposes in Section 3, and disclosed them for those purposes to the service providers in Section 4: identifiers (name, email address, phone number, IP address); professional information (title, organization, organization type, firm size); internet or electronic network activity (request data, and aggregate Journal events if you turn measurement on); and information you include in messages and Briefing answers. We do not collect sensitive personal information to infer characteristics about you.
How to make a request. Email info@asgroup.ai with the subject line “Privacy Request” and tell us which right you want to exercise. We will verify your request by confirming control of the email address or phone number you used with us, and we may ask for additional information that matches what we hold. We will use that information only to verify your request. We will confirm receipt within 10 business days and respond within 45 days, or within any extension the law allows, in which case we will tell you.
Authorized agents. You may use an authorized agent. We may require the agent to provide your signed permission, and we may ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.
Appeals. If we deny your request, you may appeal by emailing info@asgroup.ai with the subject line “Privacy Appeal” within a reasonable time after our decision. We will respond in writing within the time required by law and explain our decision. If you are not satisfied, you may contact your state attorney general.
Exceptions. We may decline or limit a request where the law permits, including where we cannot verify it, where the information is needed to complete a transaction, ensure security, comply with a legal obligation, or establish, exercise, or defend legal claims, or where fulfilling it would affect the rights of others.
9.2 Visitors outside the United States
ASG is based in the United States, and the Sites are operated from and hosted for the United States. Information you submit is processed in the United States and in other countries where our service providers operate. To the extent the EU or UK General Data Protection Regulation applies, we process personal information on these legal bases: to take steps at your request before entering into a contract (responding to inquiries and Briefing requests); our legitimate interests in operating, securing, and improving the Sites and in managing business relationships; your consent (Journal measurement, which you may withdraw at any time with “Turn off”); and compliance with legal obligations. Where those laws apply, you may have rights to access, correct, delete, restrict, or object to processing of your information, to data portability, and to withdraw consent, and you may complain to your local data protection authority. Make requests as described in Section 9.1. Where required, we rely on appropriate safeguards, such as standard contractual clauses in our providers’ data processing terms, for international transfers.
10. Children
The Sites are for business professionals and are not directed to children. The Sites are intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact info@asgroup.ai and we will delete it.
11. Links to Other Services
The Sites link to services we do not control, including Microsoft Bookings. Their own privacy policies govern information you give them.
12. Changes to This Policy
We may update this Policy from time to time. We will post the updated Policy on the Sites and change the “Last updated” date above. If we make a material change to how we use personal information we have already collected, we will give notice before the change takes effect and, where the law requires, obtain your consent.
13. Contact Us
Agentic Secure Group Inc. (ASG)
c/o Hedberg Law
5944 S Kipling Pkwy, Suite 200
Littleton, CO 80127
Email: info@asgroup.ai