Privacy policy

Draft pending counsel review. This page is placeholder copy, has not been approved by an attorney and is not yet in effect.

Draft dated November 2026

This policy explains how [Legal entity name] (“Call Sheet Agency”, “we”, “us”) collects, uses and shares personal information, and the choices you have. It covers callsheetagency.com, the Call Sheet Agency Operating System (the “Operating System”), and the calls, texts and emails we make on behalf of franchise consultants.

The short version

• We work for franchise consultants. If you once asked a consultant about owning a franchise, we may contact you on that consultant’s behalf to ask whether you’re still interested.
• If you’d like to keep exploring, we introduce you to a consultant in our network, who may introduce you to franchise brands. We tell you who they are first, and you can say no.
• We don’t sell your information to advertisers or data brokers, and this site has no advertising or analytics trackers.
• Reply STOP, tell an agent, or contact us, and we stop contacting you for every consultant we work with.
• You can ask to see, correct or delete your information.

Who we are and who we work for

Franchise consultants help people find and buy a franchise. When a client they introduced buys one, the franchise brand pays the consultant a referral fee. Consultants who take part in our program (“participating consultants”) give us the details of people who asked them about franchise ownership in the past, and our agents contact those people on the consultant’s behalf. When someone wants to keep exploring, we arrange an introduction to a participating consultant. Franchise brands that work with participating consultants use the Operating System to report how introductions progress.

If a consultant gave us your details, that consultant has their own relationship with you and their own privacy policy. This policy describes what we do.

Information we collect

If a consultant gave us your details

• From the consultant’s records, usually their CRM: your name, phone numbers, email addresses, state or ZIP code, when and how you first inquired, the form or website you used, the consultant’s notes and status for your inquiry, and any do-not-contact settings.
• Consent records from your original inquiry, such as the wording you agreed to, the date and time, and the IP address and browser details the form recorded.
• Our contact with you: the calls, texts and emails we send and receive, what they say, when they happened, their outcome and which agent was involved.
• What you tell us, for example the kinds of franchises and locations you’re considering, your timeline, your availability for a call, and anything else you choose to share about your plans.
• Compliance checks: whether your number is on the National Do Not Call Registry or a state do-not-call list, whether it has been reassigned to someone else since you gave it (using the FCC’s Reassigned Numbers Database), your likely time zone from your address or area code, and your contact preferences.
• Introduction progress, from consultants and franchise brands: who you were introduced to and how it went, for example whether you received a franchise disclosure document, attended a discovery day or signed a franchise agreement, and the deal details needed to work out referral fees.
• Information we work out from the above, such as which contact rules apply to you and an agent’s summary of your conversation.

If you visit our site or apply to work with us

• What you enter in the Apply form: your name, work email, phone number if you add it, whether you’re a consultant or a franchise brand, and your message.
• Technical details our hosting provider records when a page loads: IP address, browser and device type, the page requested, the referring page, and the date and time.

If you use the Operating System

• Account details: your name, email address, organization and role, and the details Google provides if you sign in with Google (see Signing in with Google).
• Sign-in records: when you signed in, how, and whether access was granted. This includes people who sign in before an account has been set up for them; they see nothing in the Operating System.
• Activity records: what you view, search, export or change, kept for security and compliance.
• If you connect your CRM: the connection details and access credentials (stored encrypted), and the records we read from and write to it as this policy describes.
• For our agents: work activity such as clock-in times, calls, texts and outcomes, used for staffing, coaching and performance reporting. Our employees and contractors receive a separate notice about their employment records.

How we use it

• To contact you on a consultant’s behalf about your earlier inquiry, and to arrange introductions you agree to.
• To check, before every contact, whether and how the law and your choices allow us to reach you, and to honor opt-outs across every consultant and channel.
• To recognize when more than one consultant gave us your details, so that you’re contacted once.
• To report activity and results to the consultants and brands involved, and to work out referral fees.
• To keep records showing that we followed telemarketing and privacy laws, and to respond to legal claims.
• To review applications from consultants and brands and reply to them.
• To run the Operating System: sign people in, show each organization only what its role allows, and provide support.
• To train and coach our agents and improve our scripts and service.
• To keep our systems secure, prevent misuse, and meet legal obligations.

We may also turn personal information into aggregated or de-identified information that can’t reasonably be linked to you, such as program benchmarks, and use it to run and improve our services. We keep it in that form and don’t try to re-identify anyone.

Introductions to consultants and brands

When you tell one of our agents you’d like to keep exploring franchise ownership, we offer an introduction to a participating consultant. Consultants take turns receiving introductions, so the consultant may not be the one you first contacted. We tell you the consultant’s name and ask you to confirm before they contact you.

Once you confirm, we send that consultant your contact details, your state, your stated interests and a summary of your conversation with our agent, and we add you to the consultant’s own CRM. The consultant may then introduce you to one or more franchise brands. We record which brands you agree to be introduced to, and each of those brands receives your details for that introduction. Brands see only the people introduced to them.

If you sign a franchise agreement, the brand pays the consultant a referral fee and the consultant shares part of it with us. That is how we are paid. You never pay us anything.

You can say no to an introduction, or to a particular consultant or brand, at any time. Saying no to an introduction is separate from asking us to stop contacting you; you can do either or both (see Your choices and rights).

Once a consultant or brand has your details, their own privacy policy also applies. Our agreements require them to honor your opt-out, and they may not text you, or call you with an automated or prerecorded voice, on the strength of consent you gave for our outreach.

Who we share it with

We share personal information only as this policy describes:

• The consultant who gave us your details, who receives reports of our contact with you, its outcome and your opt-out choices. We may also record these in their CRM.
• The consultant who receives your introduction and the franchise brands you agree to be introduced to, as described in Introductions to consultants and brands.
• Other participating consultants, in one case: if more than one consultant gave us your details, we contact you once and credit each of them, so each may learn that another participating consultant also had your details.
• Service providers that work for us under contract and may use the information only to provide their services to us: hosting and databases, email and office software, our outreach and messaging platform and the phone carriers it uses to deliver calls and texts, email delivery, and compliance data services.
• Professional advisers, such as lawyers, accountants, auditors and insurers.
• For legal reasons: to comply with the law or legal process, to protect the rights, safety and property of you, us or others, and to establish or defend legal claims.
• In a business transfer: if we reorganize, merge, are acquired, or move this service to a successor company, personal information may transfer to the new owner, who must continue to honor this policy for information collected under it.
• With your consent or at your direction.

Apart from reporting to the consultant who gave us your details, we disclose your information to consultants and franchise brands only for introductions you agree to. We don’t otherwise sell or rent personal information, and we don’t share it for targeted (cross-context behavioral) advertising.

Calls, texts and emails

Every call, text and email we send names Call Sheet Agency and the consultant we’re contacting you for.

Texts

We text only where the law and your consent allow. Message frequency varies, and message and data rates may apply. Reply STOP to stop all texts, or HELP for help. The SMS program disclosures have the details.

We don’t share your mobile number or your text-message consent with anyone for their own marketing by text. Text-message opt-in data and consent are never shared with third parties, other than the providers that deliver our texts. When you agree to an introduction, the consultant or brand receives your phone number so they can call you about it; they may not text you based on consent you gave us.

Calls

Calls come from our live agents. We don’t call using a prerecorded or artificial voice, including an AI-generated voice, unless you have given the prior express written consent the law requires. We call only between 8 a.m. and 9 p.m. your local time, or within the narrower hours your state sets. [Call recording: say whether calls are recorded, why, and for how long]

Email

Every marketing email we send includes an unsubscribe link and our postal address. Unsubscribing stops our marketing emails for every consultant we work with.

Opting out

You can opt out in any reasonable way: reply STOP to a text, tell an agent, use an email’s unsubscribe link, or contact us. A STOP reply or a request to an agent stops all our calls, texts and emails to you for every consultant we work with, and we pass it on to the consultants and systems involved. We act on opt-outs promptly, and always within 10 business days. We may send one text to confirm. We keep a record of your opt-out so that we don’t contact you again, even if a consultant later sends us your details again.

Signing in with Google

Our staff, consultants and franchise brand users can sign in to the Operating System with a Google account. People we contact on a consultant’s behalf don’t have accounts.

When you sign in with Google, Google shares your name, email address, whether Google has verified that address, your profile photo and an identifier for your Google account. We ask Google only for basic sign-in permissions, so we can’t see your Gmail, contacts, calendar, Drive files or any other Google data.

We use this information only to sign you in, recognize you on later visits, identify you to the people in your organization and to our staff, and confirm that Call Sheet Agency staff sign in with a callsheetagency.com account. We keep it while you have an account (see How long we keep it). We don’t sell it, use it for advertising or use it to train AI models, and we share it only with the service providers that host the Operating System.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove our access at any time in your Google Account settings, and you can ask us to delete your account (see Contact us).

Cookies and tracking

We use only the cookies needed to sign you in and keep you signed in to the Operating System. Our authentication provider sets them when you start to sign in, and they are removed when you sign out or they expire. If you don’t sign in, we don’t set any cookies.

We don’t use advertising or analytics cookies, tracking pixels or similar technologies, and we don’t let third parties collect information about your browsing on our site. Our fonts are served from our own domain.

Because we don’t track you across websites, we don’t respond differently to “Do Not Track” browser signals. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any sale or sharing of your personal information.

How long we keep it

We keep personal information only as long as we need it for the purposes in this policy:

We may keep information longer when the law requires it or while it is subject to a legal hold. Backups are overwritten on a rolling schedule. When a retention period ends, we delete the information or keep it only in a form that no longer identifies you.

How we protect it

We protect personal information with safeguards that include encryption in transit and at rest; access controls that limit each organization and role to the records it needs (brands see only the people introduced to them, and agents see only the people assigned to them); encrypted storage for the credentials of connected systems; records of who viewed or exported information; and limited staff access. No system is perfectly secure. If a security incident affects your information, we will notify you as the law requires.

Your choices and rights

• Stop being contacted: reply STOP, tell an agent, unsubscribe, or contact us.
• Decline an introduction, or a particular consultant or brand, at any time.
• Know and access: ask what personal information we hold about you, where we got it, why we use it and who we have shared it with, and get a copy in a portable format.
• Correct information that is wrong.
• Delete your information. We keep only what the law requires and the minimum we need to make sure we don’t contact you again, and we pass your request on to the consultants and brands we shared your information with.
• Opt out of sale, sharing, targeted advertising and profiling. We don’t do any of these (see State privacy law details), but you can still send us a request, and we honor Global Privacy Control signals.

Some state laws give these rights only to their own residents. We honor them for everyone in the United States.

How to make a request

Email [Privacy email address], call us toll-free at [Toll-free privacy phone number], or write to us at [Mailing address].

To protect you, we verify requests before acting on them, usually by asking you to confirm details we already hold, such as your phone number or email address, and sometimes by sending a code to it. We use what you give us only to verify and respond to your request. You can ask someone to make a request for you as your authorized agent; we will ask for your signed permission and may still need to verify your identity with you.

We confirm receipt within 10 business days and respond within 45 days. If we need more time, up to 45 more days, we will tell you why. We won’t treat you differently for exercising your rights.

Appeals

If we decline your request, you can appeal by replying to our decision or by emailing [Privacy email address] with “Appeal” in the subject line. We will respond within 45 days. If you disagree with the outcome, you can contact your state attorney general.

State privacy law details

California and several other states ask businesses to describe their practices using the categories in their laws. This table lists the personal information we collect, where it comes from, and who we disclose it to for business purposes. How long we keep each kind is in How long we keep it.

We disclose personal information to consultants and franchise brands only for the purposes in this policy and, for introductions, at your direction. We don’t sell or share personal information as California law defines those terms, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We use sensitive personal information only to provide our services, so the right to limit its use doesn’t apply.

Children

Our services are for adults exploring business ownership and the businesses that work with them. We don’t knowingly collect personal information from anyone under 18. If we learn that we have, we delete it.

Where we operate

We are based in the United States, our services are intended for people in the United States, and we store and process personal information in the United States.

Changes to this policy

We will post any changes on this page with a new date. If a change is material, we will tell Operating System users by email or in the Operating System before it takes effect, and we will ask for consent where the law requires it.

Contact us

For privacy questions and requests: