Black Flag AVP: Website Privacy Policy

Effective date: October 23, 2026

Last updated: October 23, 2026

This policy covers blackflagavp.com, including its quote, booking and signup forms, accounts, and online purchases. It's operated by Nicholas J Garza, an individual doing business as Black Flag AVP, Houston, Texas ("Black Flag AVP," "we," "us"). Mailing address: 957 Nasa Pkwy, Unit #2194, Houston, Texas 77058. Contact: support@blackflagavp.com. Our software products have their own privacy policies (Operix by Black Flag AVP, VenueOS by Black Flag AVP and AI Agents), which control for those products.

What we collect

• Booking and quote requests (/book): your name, venue or company, phone, email, event date, the service you choose and the details you write.
• AI Agents signup: your email, the plan you picked and the page you signed up from.
• Accounts: if you sign in with Google or X, your name, email and profile image from that provider, plus what you save or request in your account (saved prompts, plan requests, gear orders, and the text you enter into tools such as Studio, with their results).
• Purchases: Stripe handles payment on its hosted checkout and collects your card and billing details under Stripe's privacy policy. We receive order details, the amount and status, Stripe payment IDs, and your email. We never see your full card number.
• Technical data: your IP address is used briefly to limit spam and repeated form submissions, and isn't stored with your request. Our hosting provider keeps standard server logs.

We don't use third-party analytics, advertising pixels or tracking cookies, and we don't collect precise location or biometric data. We do count visits on our own server, as described under "Visit counts" below. Don't send card numbers, Social Security numbers or health information through our forms; if a form detects a card number, it removes it.

Visit counts

When you visit blackflagavp.com, our own server counts page views and taps on our checkout, phone and directions links. For each one we record only the hour, the kind of event, the page's path (never the part after "?" or "#"), whether the device looks like a phone or a computer, and, on your first page view, the name of the website that sent you (for example example.com, not the full address). We keep these only as running totals, such as "12 page views of /venueos from phones between 3 and 4 PM", so nothing links one visit to another or to a person. We don't use cookies, stored identifiers or fingerprinting for this, we don't send these counts to any other company, and we don't record the phone numbers you tap or anything you type. We use your IP address briefly, in memory only, to limit abuse, and our visit counts never store or log it. Separately, our hosting provider keeps standard server logs, as described above. If your browser sends Do Not Track or Global Privacy Control, we don't count your visit. We delete the totals after 13 months, and only Black Flag AVP staff can see them.

How we use it

To answer your request and give you a quote, schedule and deliver services, run your account and the tools you use, process orders and subscriptions, prevent spam and abuse, and keep records the law requires. We don't sell personal data or use it for targeted advertising or profiling.

AI tools

Some signed-in tools (such as Studio, Creator OS and the signed-in Prompt Sifter desk) send the text you enter to our AI provider, xAI, to generate a result. Our xAI account uses zero data retention, so xAI doesn't store that text after it returns the result. When you use the signed-in Prompt Sifter desk, we save each task and its result in your account so you can see them again. We keep them until you close your account, and we delete them within 45 days after you close it. When you close your account, we also delete your blackflagavp.com sign-in, any site plan, and what you've saved in other signed-in tools on the site, such as Studio briefs and Creator OS history. If you close your account, we keep records of jobs and orders, including their notes, as long as tax law requires. We delete the name and phone number from any booking request that isn't linked to a job. The public Prompt Sifter library search doesn't send your text to AI. Don't enter other people's personal data into these tools. xAI processes the text under its own terms.

Who we share with

• Stripe, for payments.
• Vercel (hosting) and our database provider.
• Our business email provider, which delivers form submissions to our inbox.
• Google or X, only if you choose to sign in with them, and our sign-in service, which connects that sign-in to your account.
• xAI, for the AI tools described above.
• Google Fonts, which receives your IP address when pages load fonts. Our site-building platform, grok.com, loads a script on every page, so it receives your IP address and sets a device-ID cookie, and its network provider Cloudflare sets a security cookie. They're used to run and protect the site, not for our analytics or ads.

We also share data when the law requires it, or to protect the rights, safety or security of our customers, the public or us.

Retention

Booking, quote and signup requests are deleted after 180 days unless they become a job, in which case we keep the job records as long as tax and business law requires. Account data and what you save in your account is kept while your account is open. Email us to close your account and delete it. Payment records are kept as long as tax and accounting law requires.

Security

We encrypt form submissions when we store them, use HTTPS, and limit access to people who need it. No system is perfectly secure, and we can't guarantee data will never be accessed without authorization.

Data breaches

If a breach of security affects your sensitive personal information, we'll notify you without unreasonable delay and no later than 60 days after we determine it occurred. If 250 or more Texas residents are affected, we'll notify the Texas Attorney General no later than 30 days after that determination (Tex. Bus. & Com. Code §521.053).

Your rights

Depending on where you live, including under the Texas Data Privacy and Security Act, you can ask to confirm whether we process your personal data, access, correct or delete it, get a portable copy, and opt out of sale, targeted advertising and profiling (we don't do any of these three). Email support@blackflagavp.com. We'll answer within 45 days and may extend that once by 45 days with notice. If we decline, you can appeal by replying to our decision; we'll decide within 60 days, and if we deny your appeal you can contact the Texas Attorney General. We won't treat you differently for exercising these rights.

Cookies

We use cookies to keep you signed in and secure. Our site-building platform and its network provider also set a device-ID cookie and a security cookie when pages load. We don't use tracking or advertising cookies. You can block cookies in your browser, but parts of the site, including sign-in, may not work.

Calls, texts and email

If you give us your phone number or email in a request, we use it to respond about that request. We don't send marketing texts. Any marketing email identifies us, includes our mailing address and an unsubscribe link, and we honor unsubscribe requests within 10 business days.

Children

This site is for adults and businesses. We don't knowingly collect data from children under 13, and accounts and purchases are for people 18 and older.

Changes

We'll post changes here with a new "Last updated" date. For material changes affecting account holders, we'll also notify them by email or on the site.

Contact

Nicholas J Garza, an individual doing business as Black Flag AVP, 957 Nasa Pkwy, Unit #2194, Houston, Texas 77058. support@blackflagavp.com. Phone: (346) 298-0045.