Privacy Policy
Highgift AI Corporation (“Highgift AI,” “we,” “us”) operates highgiftai.com and related services. This policy explains what personal data we collect, how we use it, and the choices available to you. We do not use analytics, advertising, or marketing tracking cookies on this website.
1. Data We Collect
- Contact form. When you submit our contact form, we collect your name, email address, and message.
- Account data. If you sign in (shared Supabase auth with QBC AI Core), we process account credentials and session data required to authenticate you.
- Server logs. Our hosting provider may record IP addresses, request timestamps, browser type, and similar technical data needed to operate and secure the site.
2. How We Use Data
- Respond to inquiries submitted through the contact form
- Authenticate users and provide access to protected areas
- Operate, maintain, and secure our website and services
- Comply with legal obligations
We do not sell personal data. We do not use third-party analytics or advertising platforms on highgiftai.com.
3. Cookies
We use only strictly necessary cookies required for authentication and core site functionality. We do not set analytics, advertising, or social-media tracking cookies.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| Supabase auth cookies | Maintain signed-in sessions for dashboard and authenticated features | Session to 7 days (managed by Supabase) | Strictly necessary |
| hg_sandbox_access | Remember sandbox preview access after password entry | 7 days | Strictly necessary |
4. Third-Party Processors
We use trusted service providers to operate our services. A current list of subprocessors, the services they provide, and the categories of data they process is available on our Subprocessors page.
5. Data Retention
Contact form submissions are retained as long as needed to respond to your inquiry and for reasonable business record-keeping. Authentication session data is retained only for the duration of your session or as required by our auth provider. Server logs are retained according to our hosting provider's standard retention practices.
6. Your Rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. California residents may have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion.
To exercise these rights, contact us via our Contact page or LinkedIn.
7. International Transfers
Our service providers are primarily located in the United States. If you access the site from outside the U.S., your data may be transferred to and processed in the United States.
8. Children
Our services are not directed at children under 16, and we do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected on this page with an updated timestamp below.