On this page

Information We Collect
How We Use Information
How We Share Information
Our Role: Controller and Processor
SMS / Text Messaging
Cookies and Tracking
Data Security
Data Retention
Your Rights and Choices
Children's Privacy
Changes to This Policy
Contact Us

About this policy This Privacy Policy was drafted for Flash AI Setup LLC against current US state privacy law and the controller/processor frameworks that apply to a managed CRM and booking backend — the CCPA/CPRA service-provider rules, the Virginia Consumer Data Protection Act, and, where a coach serves EU or UK clients, GDPR Article 28. It describes our controller-versus-processor split and the Data Processing Addendum we offer (Section 4), and is intended to be usable as written. As with any policy, a brief review by a US-licensed attorney before you begin serving customers remains advisable. Depending on your and your clients' locations, additional state laws may apply (CCPA, VCDPA, CPA, CTDPA, UCPA, TDPSA, OCPA, MCDPA, ODPA, ICDPA, NHCDPA, NJDPA, TIPA, MNCDPA, MDOPA, NEDPA, INCDPA, KYCDPA, RICDPA, and Washington's My Health My Data Act).

Privacy Policy

REVLast Revised: July 17, 2026

This Privacy Policy describes how Flash AI Setup LLC ("Flash Setup," "we," "us," or "our") collects, uses, shares, and protects information when you visit flashsetup.com (the "Site"), submit a form, subscribe, communicate with us, or use our services (collectively, the "Services").

1. Information We Collect

We collect information in the following ways:

Information you provide directly — when you submit our lead form, fill out an intake form, subscribe, email us, text us, or communicate with us. This may include your name, business or coaching-brand name, email, mobile phone number, Instagram handle or other social profile URLs, website, service details and pricing, your domain details, photos and testimonials you supply for your website, and any other information you choose to share.
Your leads' and clients' information — once your service is live, personal information about your own leads and clients flows through the booking system and CRM that we run for you. For that data, you are the controller and we are your processor. See Section 4.
Automatically-collected information — when you browse the Site we may collect IP address, browser type, device identifiers, pages viewed, referring URLs, UTM parameters, and similar technical data. We use privacy-respecting analytics and may use first-party storage (such as localStorage entries prefixed fw_) to preserve campaign attribution across pages.
Information from third parties — when a sub-processor (such as our management platform or payment processor) provides information necessary to deliver the Services.

2. How We Use Information

To build and deliver your website and set up the managed backend for you.
To provide, operate, and improve the Services.
To communicate with you about your inquiry, subscription, intake form, billing, or active engagement.
To process payments (handled by our payment processor; we do not store card numbers).
To send SMS messages you have consented to receive (see Section 5).
To analyze traffic and improve our marketing and Site performance.
To comply with legal obligations and enforce our Terms of Service.

We share information only as necessary to operate the Services:

Sub-processors — service providers necessary to deliver the Services. These include our management and messaging platform (HighLevel / LeadConnector), telecommunications carriers, our payment processor (Stripe), our hosting provider (Cloudflare), and analytics providers. When we run your backend for you, these same providers also process your leads' and clients' data on your behalf (see Section 4). Each sub-processor is contractually bound to use information only as needed to provide its service.
Legal compliance — where required by law, court order, or government request.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard data-protection protections.

We do not sell your personal information for monetary value. All categories of information described in this policy exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Our Role: Controller and Processor

Flash Setup handles two kinds of personal information, and our role differs for each.

Your data, as our customer. When you inquire, subscribe, and work with us, we collect the information described in Section 1. For this data, Flash Setup is the data controller, and this Privacy Policy governs it.

Your leads' and clients' data. Your booking system and CRM collect personal information about your own leads and clients. For that data, you (the coach) are the controller and Flash Setup is your processor — a "service provider" under California law. We process it only to run the Services for you and only on your documented instructions. Our management platform (HighLevel / LeadConnector), our payment processor, and our other providers act as sub-processors for that data. You are responsible for the privacy notices, lawful basis, and consents you owe your own leads and clients.

Our processor commitments (embedded DPA summary). When we act as your processor — and to the extent required by the CCPA/CPRA, the Virginia Consumer Data Protection Act and comparable US state laws, and GDPR Article 28 where it applies — we agree that we will:

process your leads' and clients' personal information only on your documented instructions and only to provide the Services — never for our own purposes, never to sell or "share" it (as those terms are defined under state privacy law), and never to combine it with other data except as the law permits;
keep that personal information confidential and bind our staff and sub-processors to the same duty;
apply reasonable and appropriate technical and organizational security measures;
engage sub-processors only under written terms that impose equivalent data-protection obligations, and remain responsible to you for them;
assist you, taking into account the nature of the processing, in responding to your leads' and clients' privacy-rights requests and in meeting your security, breach-notification, and data-protection-assessment obligations;
notify you without undue delay if we determine we can no longer meet these obligations, and allow you to take reasonable steps to stop and remediate any unauthorized use; and
delete or return that personal information at the end of the subscription, unless the law requires us to keep it. In practice, the managed backend and its data are deprovisioned when your subscription ends (see our Terms, Sections 3 and 5).

Full Data Processing Addendum. If you are a subscribing coach and need a signed Data Processing Addendum (DPA) stating this processor relationship in full — including the subject matter, duration, nature, and purpose of processing, the types of personal data and categories of data subjects, and our current sub-processor list — we offer one at no charge. Email privacy@flashsetup.com to request it; a signed DPA controls over this summary to the extent of any conflict.

5. SMS / Text Messaging

What we collect.

When you submit a form on the Site (including the lead and intake forms) and affirmatively check the SMS consent box, you provide your express written consent for Flash AI Setup LLC to send you SMS (text) messages at the mobile telephone number you provided using an automatic telephone dialing system.

How we use your mobile number.

We use your mobile number to send:

confirmations and reminders for the discovery call or consultation you booked;
follow-up messages related to your inquiry, proposal, or active engagement with Flash Setup;
account, billing, and service notifications if you become a client; and
occasional informational messages relating to the services you inquired about.

We do not use your mobile number to send unsolicited marketing or promotional SMS to recipients who have not opted in.

No sharing of mobile information.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of information described in this Policy exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties. Phone numbers collected for SMS consent are not sold, rented, leased, traded, or otherwise disclosed to data brokers, lead-generation companies, or any third party for their own marketing purposes. The only entities that receive your mobile number are sub-processors strictly necessary to deliver the messages you opted in to receive — specifically our messaging platform (HighLevel / LeadConnector) and the underlying telecommunications aggregators and carriers responsible for transmitting SMS traffic.

Message frequency.

Message frequency varies based on your interaction with us. You can typically expect 2–6 messages per month in connection with a booked call, active proposal, or open inquiry. Frequency may be higher during active project engagements.

Cost.

Message and data rates may apply. Flash Setup does not charge for SMS, but your mobile carrier may charge you for messages sent to or received from us according to your plan.

Opt-out.

You may opt out of SMS communications at any time by replying STOP to any message you receive from us. You will receive one final confirmation message acknowledging your opt-out, and you will not receive further SMS messages from us. You may also opt out by emailing privacy@flashsetup.com with the subject line "SMS STOP" and your mobile number.

Help.

Reply HELP to any of our SMS messages for assistance, or contact us at support@flashsetup.com.

Carrier disclaimer.

Wireless carriers are not liable for delayed or undelivered messages.

Eligibility.

SMS messages are intended for recipients 18 years of age or older located in the United States. Do not provide a mobile number that does not belong to you.

Consent is not a condition of purchase.

You are not required to consent to SMS messaging to purchase any product or service from Flash Setup.

6. Cookies and Tracking

We use first-party cookies and browser storage to recognize returning visitors and preserve campaign attribution (UTM parameters) across a session. We also use third-party analytics tools to understand Site usage. You can disable cookies in your browser settings, though some Site features may not function correctly without them.

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. In more detail:

Lead-form submissions. If you submit the lead form but do not subscribe, we retain your submission for a reasonable period and then delete it.
Subscriber records. For subscribing coaches, we retain account and billing records for the life of the subscription and for as long as the law requires afterward.
Backend data. Personal information in the backend we run for you is retained on your instructions as the controller. It is deprovisioned when your subscription ends.
SMS suppressions. SMS opt-out (STOP) suppressions are retained for at least 10 years to comply with state requirements such as Virginia SB 1339.

9. Your Rights and Choices

Depending on your state of residence, you may have rights to:

Know what personal information we have collected about you.
Delete personal information we have collected about you (subject to exceptions).
Correct inaccurate personal information.
Opt out of certain processing activities, including the sale or sharing of personal information.
Receive a portable copy of your personal information.
Limit the use of sensitive personal information.
Not face discrimination for exercising these rights.

To exercise these rights, email privacy@flashsetup.com. We will respond within the time required by your state's law. If your request concerns personal information held in a coach's booking system or CRM, that coach is the controller; we will refer your request to them (see Section 4).

Do Not Sell or Share My Personal Information.

Flash Setup does not sell personal information for monetary value. We may share information with sub-processors strictly necessary to operate the Services. If you wish to opt out of any sharing that could constitute a "sale" or "sharing" under California, Colorado, Connecticut, or other applicable state laws, email privacy@flashsetup.com with the subject line "Do Not Sell or Share."

Global Privacy Control (GPC).

We honor opt-out signals sent via the Global Privacy Control (GPC). When we detect a GPC signal from your browser, we treat it as a request to opt out of the sale or sharing of personal information. Learn more at globalprivacycontrol.org.

State-specific privacy rights.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Nebraska, Indiana, Kentucky, Rhode Island, and Washington may have additional rights under their state privacy laws. Contact us at privacy@flashsetup.com to exercise these rights.

10. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at privacy@flashsetup.com and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated "Last Revised" date. Continued use of the Services after changes are posted constitutes acceptance.

12. Contact Us

Flash AI Setup LLC
8064 Ashland Ave, Manassas, VA 20109
Email: privacy@flashsetup.com
For SMS support: support@flashsetup.com

See also our Terms of Service and SMS Terms.