Privacy Policy for HGI Data Bridge

Effective date: October 4, 2026

HGI Data Bridge (the "Extension") helps users sync data between supported HGI workflow pages and authenticated HGI services. This Privacy Policy explains what data the Extension processes, how that data is used, and your choices.

1. Data We Process

The Extension may process the following categories of data:

• Account and identity data: profile information used for sign-in and authenticated workflows (for example, account email, name, and picture when provided by Google Sign-In).
• Website content on supported domains: workflow data from declared HGI Back Office and HGI API origins needed to perform requested dashboard, genealogy, promotion, and related operations.
• Extension state on the device: settings and operational state stored with Chrome extension storage (chrome.storage.local).
• Chrome sync (off-device): signed-in Google profile, HGI agent code, and selected UI preferences stored with chrome.storage.sync. Chrome copies that data to the user’s Google account so it can follow them across devices. This is transmission off the device to Google.
• Cloud-synced data in Firebase Firestore (project hgi-bridge): when you sign in with Google, the Extension may store in Google Cloud Firestore in the hgi-bridge Firebase project: (1) signed-in user preferences and UI state; (2) optional promotion policy notes you choose to save; and (3) when a companion reporting feature is enabled, agent-level operational summaries (for example associate or agent codes and names, rank, team or office labels, counts, and volume totals). These summaries do not include client (customer) names, full or partial/masked policy numbers, application numbers, email addresses, phone numbers, Social Security numbers, or raw HGI API bodies. Subscription and entitlement records (plan, status, and related billing identifiers) are stored only in the separate billing backend (a different Google Cloud project) and are not mixed with reporter or HGI operational snapshots. Payment card numbers are entered on Stripe Checkout and are not stored by the Extension.
• Optional usage analytics: when enabled by remote configuration, aggregated events (page identifiers, high-level feature identifiers, error categories) sent to Google Analytics. Analytics is off by default. No agent codes, policy numbers, email, or raw API bodies are included in analytics payloads.
• Technical data processed by hosts: HTTPS requests to HGI, Google, billing, AWS Lambda activity URLs, and the plan-enrollment worker may include IP address and standard request metadata as part of delivering those services. The Extension does not read device GPS.

2. How We Use Data

• Provide core extension functionality, including data bridge and sync operations.
• Authenticate users and authorize account-linked operations.
• Maintain extension settings and operational reliability, including optional sync of signed-in preferences and notes to Firestore in hgi-bridge.
• Display agent-level operational summaries in a companion reporting application you access with the same Google account (same hgi-bridge Firestore project; not the billing database).
• Protect service integrity and support basic security monitoring.
• Measure optional product usage and errors to improve reliability (analytics can be disabled remotely).

3. Data Sharing and Selling

We do not sell personal data. Data is shared only as needed to provide the Extension's functionality with these processors: HGI Crusade APIs (team and dashboard data using your existing portal session); Google (Sign-In / OAuth, Chrome sync storage, Firebase Auth, Firestore in hgi-bridge, Firebase Remote Config, and optional Google Analytics); the billing host and Stripe (subscription checkout and entitlements); AWS Lambda Function URLs in us-east-2 (activity and report JSON); and the plan-enrollment worker at aristotle-worker.sameer.workers.dev. We do not use data for unrelated advertising purposes.

4. Permissions and Scope

The Extension requests browser permissions (tabs, identity, and storage) to find the signed-in HGI portal tab, perform Google sign-in, and persist settings (including Chrome sync). A content script runs only on declared HGI office and API origins. Host access is limited to HTTPS endpoints in the manifest, including HGI APIs, subscription billing (separate from Firestore), Firebase Auth, Firestore, and Remote Config in project hgi-bridge, plan-enrollment worker endpoints, AWS Lambda activity URLs, and https://www.google-analytics.com/* when optional GA4 analytics is enabled. Google Sign-In uses profile scopes (openid, email, profile). Optional Firestore features use the Google datastore scope. The Extension does not request Google Sheets or Google Drive access. The Extension does not use activeTab or capture arbitrary visible tabs.

5. Data Retention

Data is retained only as long as needed for functionality and operational purposes. Local extension state remains in the browser until cleared by the user or overwritten by normal extension operation. Chrome sync data remains in the user’s Google account associated with Chrome until they clear extension storage, remove the Extension, or clear Chrome sync data in their Google account. Signed-in Firestore records in hgi-bridge remain until overwritten, deleted in the product, or no longer needed for that signed-in feature. Billing and entitlement records follow the retention needs of the subscription service and are not used as a store for HGI operational snapshots.

6. Security

We use reasonable safeguards to protect data in transit and at rest where applicable. Network communication for supported services is expected to use HTTPS.

7. Your Choices

• You can remove the Extension at any time from your browser.
• You can clear extension storage (including Chrome sync keys for this Extension) through Chrome extension settings.
• You can stop using authenticated features by signing out of Google in the Extension and signing out of the HGI portal.
• Removing the Extension or clearing extension storage does not delete Firestore promotion notes, agent-level reporter summaries, or billing and entitlement records. To request access, correction, or deletion of that cloud data, email privacy@akfinancialconsultants.com. We respond within a reasonable time as required by applicable law. Stripe and Google retain some records under their own policies.

8. Children's Privacy

The Extension is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

9. Availability (United States and Canada)

The Extension and related hosted pages (including this privacy policy and subscription checkout) are offered to users in the United States and Canada. Canadian users may exercise privacy rights that apply under applicable Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws, such as requesting access to or correction of personal information we hold, or withdrawing consent where consent is the basis for processing. Contact privacy@akfinancialconsultants.com to make a request. We respond within a reasonable time as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted at the policy URL with a revised effective date.

11. Contact

For privacy questions, contact: privacy@akfinancialconsultants.com

Read a plain-language summary of this policy