Privacy Policy
Effective September 22, 2026
Who we are
121 Consulting ("we," "us," "our") is a business-development consultancy for trade contractors. We also build and run 121 OS, the software the whole 121 Brand works in. Six companies share it — 121 Consulting, 121 Sales, 121 Marketing, 121 Hiring, 121 Investment and 121 Tech — along with the partner companies we work with and the clients we serve.
The site is 121consulting.us. Write to us any time at admin@121consulting.us.
The site is 121consulting.us. Write to us any time at admin@121consulting.us.
Three kinds of people, and why it matters
What we hold about you depends on which of these you are, so the rest of this page is written in those terms.
- Visitors. You read the site or fill in a form. You have no login.
- People who work in 121 OS. Staff at the six companies, our partner companies, and salespeople who apply through /apply. You have a login and a seat.
- Clients. Contractors in an engagement with us. You have a login to your own client portal and you see your own engagement, not anybody else's.
What we collect
- What you type into a form. Your name, email, phone, business name, trade, revenue range, team size, and your answers about your business. If you apply for a role with us, also your answers on the application (such as your experience, your availability and what you would like to do), who referred you, and a resume or cover letter if you attach one. We keep an attached file private to the people who review applications.
- What happens in the app. Records you own or are named on: leads, meetings, calendar events, notes, messages, files you upload, training logs, commission and payout lines, and invoices.
- An activity trail. The app writes a line every time something meaningful changes — a stage moves, a meeting is booked, an invoice is issued — with who did it and when. This is deliberate: it is how we can answer "what happened to this" honestly, and it is also why we cannot make a past action disappear on request.
- Site usage. Pages visited, referring source, device type, IP address and anonymised analytics.
- Ad attribution. If you arrived from a Meta ad, the ad platform passes us limited attribution data so we can tell which ads work.
Signing in with Google
You can sign in to 121 OS with Google. When you do, Google tells us your name, your email address and your Google account id. We do not receive your Google password, and we never ask for it.
Signing in is separate from connecting your calendar, below. You can do the first without the second.
Signing in is separate from connecting your calendar, below. You can do the first without the second.
Calendar data
121 OS keeps one calendar of everything dated in the business: calls to make back, meetings, interviews, game plans, Week Zero sessions, training and invoice due dates. What you can see on it depends on your seat. Clients see their own sessions. Partners see their own company. Staff see their workspace.
- Feed links. You can create a private link that your own calendar app subscribes to. That link works without a password — anyone holding it can read that calendar until you reset it, and you can reset it at any time, which immediately stops the old link working. Your personal feed never includes the most restricted entries, only what your seat would show you anyway.
- Connecting Google Calendar is optional and is switched off today. When it is on and you choose to connect, two things can happen, and you switch each on separately: your 121 OS work is copied into your Google calendar, and your Google busy time is shown in 121 OS. For the second one we ask Google only for free/busy — we receive the start and end of a busy block and nothing else. We never see the title, the guests or the notes of a private appointment, and neither does anyone else at 121: those blocks are visible to you alone.
- Your Google tokens are kept encrypted, in a vault, tied to your account. Disconnecting deletes them and removes every busy block we pulled in.
Payments and signing
- You pay us by bank transfer, through Mercury, our bank. An invoice carries a link to pay by bank, or our bank details. We do not take card payments, and we never see or store a card number.
- To keep our books, we read our own bank account's transactions from Mercury — the date, the amount, the description and the name of who paid — and match each payment to the invoice it settles. That connection can only read; it cannot move money. It runs only when it has been switched on. We can also import the same list from a spreadsheet instead.
- You sign agreements in 121 OS itself, not through another company. You tick a box agreeing to sign electronically, type your full name and draw your signature. With the signed agreement we keep an audit trail: when it was sent, opened and signed, the IP address and browser it was signed from, and a fingerprint (a SHA-256 hash) of the exact text you signed, so any later change to that text would show. A signed copy is emailed to you and to us, and kept in our private file storage.
Who else touches your data
We share what each of these needs to do its job, and nothing more.
- Supabase — the database and file storage behind 121 OS, hosted in the United States.
- Vercel — hosting and analytics.
- Google — sign-in, and calendar invites and scheduling.
- Resend — the emails the app sends you.
- Mercury — our bank. Your payments to us arrive there.
- Meta — ad attribution and remarketing on the public site.
Who inside 121 can see what
This is enforced by the database itself, not by what a screen happens to show.
- A client sees their own engagement and nothing else: not another client, not our internal notes, not the conversation we had before they signed.
- A partner company sees its own work with us — its placements, its commission lines, its invoices — and nothing about any other company.
- A member of staff sees the records they own and the people and companies attached to them.
- Owners and workspace admins see their workspace in full.
- Two things are personal and nobody else can see them, including an owner: the busy blocks pulled from your Google calendar, and your notifications.
How long we keep it
While you are working with us, and afterwards for as long as we need it for our records, to settle money owed, or to meet a legal obligation. Ask us and we will tell you what we hold about you. The activity trail described above is kept as a record of what happened, so a past event stays recorded even after the thing it refers to is removed.
Your choices
- Email admin@121consulting.us for a copy, a correction, or deletion of your data. We will tell you plainly if there is something we have to keep and why.
- Reset a calendar feed link yourself, any time, from the app.
- Disconnect Google Calendar yourself, any time, from the app.
- Block cookies in your browser, or use your phone's ad-tracking controls to limit ad attribution.
Children
121 OS is a tool for running a business. It is not for anyone under 18, and we do not knowingly collect anything from a child.
Changes
We update this page when what we do changes. The effective date at the top is always the current version, and we will say so here when a change is significant.
Questions? Reach out at admin@121consulting.us.