Privacy Policy

Scheetz Consulting Group, LLC · Effective April 2026 · Last updated November 2026

Scheetz Consulting Group, LLC ("SCG," "we," "our," or "us") is committed to protecting the privacy of our clients, website visitors, and prospective clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information across everything we run: this website, our consulting services, the SCG Sourcing Engine, and the Chief of Staff app. Sections 11 and 12 cover the Sourcing Engine and Chief of Staff specifically; the sections before them describe our work with consulting clients and visitors to this site. Please read this policy carefully.

1. Information we collect

1.1 Information you provide directly

We collect information that you voluntarily provide to us, including:

• Name, job title, and company name
• Email address, phone number, and mailing address
• Business information shared during consultations or assessments
• Payment information (processed through secure third-party payment processors — SCG does not store full payment card data)
• Communications sent to us via email, contact forms, or other channels

1.2 Information collected automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address and general geographic location
• Browser type and version
• Pages visited and time spent on our site
• Referring website or source
• Device type and operating system

This information is collected through cookies and similar tracking technologies. You may control cookie preferences through your browser settings.

1.3 Information from third parties

We may receive information about you from third-party sources such as referral partners, public business directories, or LinkedIn and other professional networks when you interact with our content or are referred to us for services.

We also operate the SCG Sourcing Engine, a tool recruiters use to find professionals for open roles. If you are a professional whose public profile appears in that tool, section 11 below explains what we hold and how to be removed.

2. How we use your information

SCG uses the information we collect for the following purposes:

• To provide, manage, and improve our consulting services
• To communicate with you regarding your engagement, project status, and deliverables
• To process payments and maintain accurate financial records
• To send service-related communications, updates, and administrative notices
• To send marketing communications, newsletters, or promotional content (you may opt out at any time)
• To respond to inquiries, support requests, or feedback
• To analyze website usage and improve user experience
• To comply with applicable legal obligations
• To protect the rights, property, or safety of SCG, our clients, or others

3. How we share your information

SCG does not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

3.1 Service providers

We may share information with trusted third-party vendors who assist us in operating our business, such as cloud storage providers, payment processors, email marketing platforms, and CRM software. These providers are contractually obligated to protect your information and may only use it for the purposes for which it was shared.

3.2 Legal requirements

We may disclose your information if required to do so by law, subpoena, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of SCG, our clients, or the public.

3.3 Business transfers

In the event of a merger, acquisition, or sale of all or a portion of SCG's assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

3.4 With your consent

We may share your information with third parties when you have given us explicit consent to do so, such as for case studies, testimonials, or co-marketing activities.

4. Cookies and tracking technologies

Our website may use cookies, web beacons, and similar technologies to enhance your experience and collect usage data. Types of cookies we may use include:

• Essential cookies: required for basic site functionality
• Analytics cookies: help us understand how visitors interact with our site
• Marketing cookies: used to deliver relevant content and track the effectiveness of outreach campaigns

We use the Meta Pixel on this website and on the public sign-up pages of Chief of Staff. It tells Meta (Facebook and Instagram) which pages were visited and whether a sign-up was started or completed, so we can measure and improve our ads. It is not used inside a signed-in Chief of Staff account. You can control how Meta uses this information in your Facebook ad preferences, or block it with your browser's cookie settings.

You may disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

5. Data retention

SCG retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or contract. Client business information and engagement records are generally retained for a minimum of five (5) years following the conclusion of a client engagement for legal and accounting purposes. You may request deletion of your personal information subject to applicable legal and contractual obligations.

Candidate records held in the SCG Sourcing Engine are kept on a separate, shorter schedule — see section 11.

6. Data security

SCG implements reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data storage, access controls, and secure communication protocols. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage clients to take appropriate precautions when sharing sensitive business information.

7. Your rights and choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information SCG holds about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal information, subject to legal and contractual obligations
• Opt out of marketing: unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly
• Data portability: request a portable copy of your data in a commonly used format

To exercise any of these rights, please contact us using the information below. We will respond to verified requests within 30 days.

If your request concerns a profile held in the SCG Sourcing Engine rather than a client relationship with us, section 11 sets out how to make it.

8. Children's privacy

SCG's services are directed exclusively at businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

9. Third-party links

Our website may contain links to third-party websites, tools, or resources. SCG is not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

10. Changes to this Privacy Policy

SCG reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. We will post the revised policy on our website with an updated effective date. For material changes, we will make reasonable efforts to notify active clients via email. Your continued use of our services after any modification constitutes acceptance of the updated policy.

11. Candidate information in the SCG Sourcing Engine

This section is for professionals whose published profiles appear in the SCG Sourcing Engine. It applies instead of the sections above, which describe our relationship with clients and website visitors.

What the Sourcing Engine is

Scheetz Consulting Group operates a tool that recruiters use to find professionals for open roles. A recruiter describes a job, and the tool searches public professional sources and returns people whose published profiles match what the job asks for.

It is not a job board and not a background-check service. It makes no decisions about you. It shows a recruiter what a public profile says, alongside the parts of their criteria it could not find, and a person decides who is worth a conversation.

What we may hold about you

All of it comes from what you published. We do not add to it.

• Your name and the professional headline on your profile.
• Your general location as published — a city or region, never a street address.
• Employment history, job titles, skills, credentials and education, as published.
• A link to the profile the information came from, and the date it was retrieved.
• In some cases a work email address or work phone number, obtained from a contact-lookup provider at a recruiter’s request.
• A stored copy of the source record, kept so that any quotation shown to a recruiter can be checked back against what was actually published.

Where it comes from

Public professional profiles — principally LinkedIn — retrieved through third-party data providers. We do not obtain information from your employer, we do not buy consumer marketing lists, and we do not guess contact details from name-and-company patterns. A record that cannot be shown with the source it came from is discarded rather than stored.

What we do not collect or use

The system does not collect, store or score characteristics protected under employment law: age, sex or gender, pregnancy or family status, race or ethnicity, religion, disability, medical or genetic information, citizenship or national origin, veteran status, sexual orientation, gender identity, appearance, or photographs. This is enforced in the software at several points, and no ranking may be based on any of them.

Scores are advisory only. Nothing about you is hidden, filtered out or rejected automatically, and a criterion the tool could not find is recorded as unknown — never as evidence that you lack it.

Who can see it

Only the recruiting organization whose search returned you. Each client’s workspace is isolated from every other, so one client cannot see another’s candidates. SCG staff can access records to provide support, and that access is recorded.

We use third-party providers to run the service — for data sourcing, contact lookup, hosting, the database and email delivery — each under contract and only to operate the tool.

How long we keep it

Each client organization sets a retention window, between 90 days and three years depending on their plan, measured from the last time your record appeared in one of their searches. When that window passes, the record is retired.

If you ask to be removed, we act on it straight away, regardless of that window.

Your choices

• Ask to be removed. We delete the record and suppress you, so a later search cannot bring you back.
• Ask what we hold. We will send you the record we have.
• Ask us to correct something. We can fix a stored record, though the lasting fix is your own profile — that is where the information comes from.

Email ryan@scheetzcg.com with your name and a link to your public profile. We ask only for what we need to find the right record and confirm it is yours, and we respond within 30 days.

Two honest limits. Removal from the Sourcing Engine does not change your public profile, which stays wherever you published it. And it does not reach information a recruiter already exported or copied into their own system before you asked — if that matters to you, tell us and we will identify who to contact.

12. Chief of Staff (formerly ScheetzAI)

This section covers Chief of Staff, our web app for businesses, which was called ScheetzAI until October 2026; anything that refers to ScheetzAI refers to the same app. It applies in addition to the sections above. If you are a person whose information appears inside a customer's Chief of Staff account rather than a customer yourself, see third-party information below.

What Chief of Staff is

Chief of Staff is a web app at chats.scheetzcg.com, installable on a phone, that gives a business an AI “Chief of Staff” along with role assistants such as a Recruiter. They help with email, CRM work, scheduling, a daily brief and recurring routines. A business signs up and subscribes at chats.scheetzcg.com, and its owner or admins invite their own team. Signing in uses a one-time code sent to the customer’s work email, or Google sign-in (which gives us only the customer’s name and email address) — there is no Chief of Staff password to choose or lose.

Each customer’s assistants work in a dedicated cloud browser, which we call the assistant’s computer. The customer signs in to their own email, CRM and job portals on that browser’s screen themselves. We never see or store those passwords, and the browser sessions are kept encrypted. The Chief of Staff and its role assistants share one computer and the sign-ins on it.

Assistants read and draft. Today they do not send email. Anything that would go out to a person waits for the customer’s approval.

What we collect

For a Chief of Staff customer we store:

• Account details — name, work email and company.
• Chats with the assistants.
• Files and photos the customer sends.
• Work files the assistants write, such as notes and daily briefs.
• CSV imports of accounts, contacts and activity.
• Settings, rules and learned preferences.
• Routines.
• An activity log of what the assistants did.
• A device push subscription, if notifications are turned on.

How we use it

• To run the assistants, daily briefs and routines.
• To send notifications, when the customer has turned them on.
• To provide support when asked.
• To keep the service secure and investigate abuse.
• To handle billing.

AI processing

To produce a reply, the relevant content is sent to our AI model provider, OpenAI, under API terms that do not allow that content to be used to train their models. That content is the customer’s messages plus what the assistant reads for them — emails, CRM pages, calendar events, the Drive files the customer picked for it, and similar material.

Service providers

• Fly.io — hosting and database, in the United States.
• OpenAI — AI models.
• Resend — sign-in and system email.
• Stripe — payments. We do not store card numbers.
• Apple and Google push services — notifications, which show the assistant’s name and a short preview of the message.

Security

Data is encrypted in transit and at rest. Each organization’s data is isolated from every other organization’s. Connected-app tokens and the assistant computer’s browser sessions are stored encrypted.

Connected apps: Google Calendar and Google Drive

A customer may optionally connect Google Calendar (the calendar.readonly and calendar.events scopes). We use it to show the customer their own schedule in chat and in their daily brief, and to add events they ask for. Assistants only change or remove events they added themselves. Events that invite other people are created only when the customer asks for it in chat or approves it first; Google then emails those guests. Access tokens are encrypted at rest using AES-256. Events are read when needed and are not copied into a separate database, though event details can appear in an assistant’s replies and daily briefs, which are saved in the customer’s chat history and work files. The customer can disconnect at any time in Settings → Connections; disconnecting revokes our access with Google and deletes the stored tokens immediately. Full details are in Google user data below.

A customer may also connect Google Drive, with the narrowest permission Google offers (the drive.file scope): the assistants can see only the files the customer picks for them in Google’s own file picker, and the files the assistants create. Nothing else in the customer’s Drive is visible to them. They read those files (Docs, Sheets, Slides, PDFs, Word, Excel and text) when asked, and save their write-ups as Google Docs in a “Chief of Staff” folder in the customer’s Drive. They never share, move or delete anything. File contents are read when needed and are not copied into a separate database, though what the assistant reads can appear in its replies and work files. The customer can take a file away from the assistants at any time (it stays in their Drive), and can disconnect Drive in Settings → Connections, which revokes our access and deletes the stored tokens immediately.

Third-party information in customer data

Customer data often includes information about other people — candidates, clients and facility contacts. The customer controls that information. We process it only to provide the service to that customer, and each organization’s data is isolated from every other’s. If you believe a Chief of Staff customer holds information about you and you want it addressed, contact the customer directly; we will help them respond, but the data is theirs to correct or delete.

We do not sell customer data, do not use it for advertising, and do not use it to train AI models.

How long we keep it

• Detailed computer activity logs are deleted after 30 days.
• Other activity logs are deleted after 1 year.
• Chats, files and work files are kept while the account is active, until the customer deletes them.

When a customer cancels, they keep access until the end of their billing period. After the billing period ends, the customer’s data is deleted within 30 days (sooner on request). Backup copies are removed within a further 30 days. A customer can ask for an export of their data before deletion.

If a customer asks us to delete their data while they are still a customer, we remove it from the live service within 30 days and from backups within 60 days.

The customer’s choices

• Ask for an export of their data.
• Ask us to delete their data.
• Disconnect a connected app in Settings → Connections.
• Sign out of any account on the assistant’s computer.
• Turn notifications off.

Email ryan@scheetzcg.com for anything in this section.

Google user data

This subsection describes exactly what we do with data from Google APIs.

• What we access. With the user’s permission: their Google account name and email address (sign-in, and to show which account is connected); their Google Calendar events and the ability to add events (the calendar.readonly and calendar.events scopes); and only the Google Drive files they pick for the assistants or that the assistants create (the drive.file scope). We request no other Google data.
• How we use it. Calendar: to show the user their schedule, prepare their daily brief, and add events they ask for. Assistants only change or remove events they added themselves. Events that invite other people are created only when the user asks for it in chat or approves it first; Google then emails those guests. Drive: to read the files the user picked, when asked, and to save the assistants’ write-ups as Google Docs in a “Chief of Staff” folder in the user’s Drive.
• Storage and protection. Tokens are encrypted at rest. Events and file contents are read when needed and are not copied into a separate database; what the assistant reads appears only in the user’s own chats, briefs and work files.
• Sharing. Google user data is sent to our AI model provider only to generate that user’s own replies and briefs. It is never sold, never used for advertising, never used to train AI models, and never shared with anyone else except as required by law.
• Human access. Our staff do not read Google user data unless the user asks us to for support, it is needed to investigate security or abuse, or the law requires it.
• Deletion. Disconnecting Calendar or Drive in Settings → Connections revokes that access and deletes its tokens at once. Users can also revoke access at myaccount.google.com/permissions, or email ryan@scheetzcg.com to have their data deleted.

Contact

For anything about Chief of Staff and privacy, email ryan@scheetzcg.com.

Contact information

For questions regarding this document, please contact:

Scheetz Consulting Group, LLC
Gretna, NE
Phone: (402) 816-2653
Email: ryan@scheetzcg.com
Web: scheetzcg.com