Privacy Policy

Last updated October 23, 2026

This policy explains what information Phog, LLC ("Phog", "we", "us") collects when you use Bagger at carrythebag.com and app.carrythebag.com (together, "Bagger"), how we use and share it, and the choices you have. Questions go to info@phog.ai.

Information we collect

Your account

• Your name, email address and, if you add one, a profile picture.
• The organization you belong to, its name and logo, and your role in it.
• Settings you choose, such as your time zone.

Information from Google, if you sign in with Google

If you choose "Continue with Google", Google shares your name, email address and profile picture with us, and confirms that the email address is yours. That is all Bagger receives from Google. Bagger does not request or receive access to your Gmail messages, contacts, calendar, Drive files or any other Google data.

Information your team puts into Bagger

Bagger stores what you and your team enter or import: leads, contacts, accounts, opportunities, activities, notes, email and LinkedIn templates, sequences and reports. This often includes business contact details of people outside your organization, such as names, job titles, work email addresses and phone numbers.

Billing

Payments are handled by Stripe. Your card number goes directly to Stripe and is never stored by Bagger. We keep the card's brand, last four digits and expiry date, your bills and whether they were paid.

Technical information

Like most websites, our servers record technical details of requests, such as IP address, browser type and the time of the request, to keep Bagger running and secure. Bagger uses cookies only to keep you signed in. We don't use advertising or tracking cookies.

How we use information

• To provide Bagger: sign you in, show your team's records, run sequences and reports.
• To bill your organization and send receipts and payment notices.
• To send messages about your account, such as invitations and important changes.
• To keep Bagger secure, prevent abuse and fix problems.
• To answer your questions when you contact us.
• To meet legal obligations.

We don't sell personal information, and we don't use it for advertising.

Google user data

We use the name, email address and profile picture we receive from Google only to create your Bagger account, sign you in, and show your name and picture to the people in your organization. We don't use Google user data for advertising, don't sell it, and don't transfer it to anyone except the service providers listed below that run Bagger's sign-in and hosting, as needed to provide Bagger, or where the law requires it. Bagger's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Bagger's access at any time from your Google Account's security settings, and you can ask us to delete your account as described below.

Your organization's data

Information your team puts into Bagger belongs to your organization. We process it on your organization's behalf and only to provide Bagger. Your organization is responsible for having the right to collect it and to contact the people in it. If you're someone whose details a Bagger customer has entered and you have a question about them, please contact that company; you can also write to us and we'll pass your request on.

Who we share information with

We share information only with service providers that help us run Bagger:

• Clerk, for sign-in, accounts and invitation emails.
• Render, which hosts Bagger's servers and database in the United States.
• Stripe, for card payments and invoices.

They may use the information only to provide their services to us. We may also share information if the law requires it, to protect people's rights and safety, or as part of a sale or reorganization of our business, in which case this policy continues to apply.

How long we keep information

We keep your organization's information while its account is open. After an account is cancelled we keep the information, so your organization can come back or download it, until your organization asks us to delete it. Database backups are kept for up to seven days. Removing a person from an organization keeps the records they worked on, under their name, as part of the organization's history.

Your choices and rights

• See and download: an organization's Admins can download all of its data at any time from Admin › Export all data.
• Correct: most information can be changed directly in Bagger.
• Delete: email info@phog.ai to ask us to delete your account or your organization's data.

Depending on where you live, you may have further rights over your personal information. Email us and we'll respond within 30 days. We won't treat you differently for using them.

Security

Bagger is served only over encrypted connections. Each organization's data is kept separate, access within an organization follows the roles its Admins set, and credentials for connected services are encrypted. No system is perfectly secure, but we work to protect your information and will tell affected customers promptly if a breach affects their data.

Children

Bagger is a business tool and isn't meant for anyone under 16.

Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes, we'll tell organization owners by email before they take effect.

Contact

Phog, LLC, Missouri, United States. Email: info@phog.ai