HGI Data Bridge Privacy Policy
This page explains what data HGI Data Bridge uses and why, in simple terms.
What this extension does
HGI Data Bridge helps move data between supported HGI pages and HGI services so users can sync their work faster.
Permissions and usage
The extension requests these Chrome permissions (see the packaged manifest for the exact list):
- tabs — Find the signed-in HGI portal tab and message its content script for authenticated API access; open tabs when you use in-extension controls (for example opening the portal or dashboard pages).
- identity — Google Sign-In via
chrome.identityfor profile-linked features. - storage — Save settings on this device and, for some keys, sync them with your Google account via Chrome sync.
Site access: A content script runs only on HGI Back Office and HGI API pages declared in the manifest so the bridge can use your existing portal session. Separately, host permissions allow the service worker and extension pages to call specific HTTPS APIs you rely on (HGI API, hosted reports/activity endpoints, subscription billing on a separate host, Firebase Auth/Firestore/Remote Config in project hgi-bridge, plan-enrollment data, and Google Analytics for optional usage analytics). The extension does not use activeTab or capture arbitrary visible tabs in this release. It does not request blanket access to all websites.
OAuth: Google Sign-In uses profile scopes (openid, email, profile). Optional Firestore features use Google’s datastore scope. The extension does not request Google Sheets or Google Drive access.
What data we use
- Basic account info needed for sign-in, such as email, name, and picture from Google.
- Data from supported HGI pages and APIs needed for dashboards and related features.
- Settings saved on this device, plus Chrome sync of profile, agent code, and some preferences (that copy leaves your device and goes to Google).
- Cloud data in Firestore (hgi-bridge): if you sign in with Google, we may store preferences, optional notes you write, and (when companion reporting is on) agent-level totals such as rank, team, counts, and volume. We do not store client names or full or masked policy numbers there. Subscription records stay in a separate billing project, not in this Firestore data. Card numbers are entered on Stripe Checkout, not in the extension.
- Optional usage analytics (off by default; may be enabled via remote configuration): aggregated events such as which extension page was opened, which high-level feature was used, and non-identifying error categories. We do not send agent codes, policy numbers, email addresses, or raw API payloads in analytics events.
Why we use this data
- To run core extension features.
- To verify your account for protected actions.
- To keep your extension settings and state working, including optional cloud sync in hgi-bridge Firestore.
- To show agent-level summaries in a companion reporting app (same Firestore project; not billing).
- To understand which features are used and to fix reliability issues (optional analytics only).
What we do not do
- We do not sell your personal data.
- We do not use your data for unrelated advertising.
Where data goes
HGI page data is requested from HGI services using your signed-in portal session. Chrome sync data goes to Google. Signed-in preferences, optional notes, and optional agent-level reporter summaries go to Google Firestore in the hgi-bridge project. Subscription data goes to the billing host (a different Google Cloud project) and Stripe. Activity reports go to AWS Lambda Function URLs. Plan-enrollment JSON goes to aristotle-worker.sameer.workers.dev. When analytics is enabled, limited event data is sent to Google Analytics (GA4); it is off by default and can be turned off remotely without updating the extension. Those hosts may see your IP address as part of HTTPS.
How long data is kept
On-device settings remain until you clear them or remove the extension. Chrome sync data stays in your Google account until you clear extension storage or Chrome sync. Firestore records in hgi-bridge remain until they are overwritten, removed in the product, or no longer needed. Billing records follow the subscription service. We do not keep HGI operational snapshots in the billing database.
Security
We use reasonable safeguards and expect secure HTTPS connections for network requests.
Your choices
- You can remove this extension at any time.
- You can clear extension data (including Chrome sync keys) from Chrome settings.
- You can stop account-linked behavior by signing out of Google in the extension and out of the HGI portal.
- Removing the extension or clearing extension storage does not delete Firestore promotion notes, agent-level reporter summaries, or billing records. Email privacy@akfinancialconsultants.com to ask us to access, correct, or delete that cloud data.
United States and Canada
This extension and its billing/privacy site are available to users in the United States and Canada. If you are in Canada, you can email us to ask what personal information we have, to correct it, or to withdraw consent where that applies.
Contact
Questions about privacy: privacy@akfinancialconsultants.com