Privacy Policy for HGI Data Bridge
HGI Data Bridge (the "Extension") helps users sync data between supported HGI workflow pages and authenticated HGI services. This Privacy Policy explains what data the Extension processes, how that data is used, and your choices.
1. Data We Process
The Extension may process the following categories of data:
- Account and identity data: profile information used for sign-in and authenticated workflows (for example, account email and basic profile fields when provided by the identity provider).
- Website content on supported domains: workflow data present on supported HGI pages needed to perform requested sync operations.
- Extension state data: local settings and operational state stored in browser extension storage.
- Optional usage analytics: when enabled, aggregated events (page identifiers, high-level feature identifiers, error categories) sent to Google Analytics. No agent codes, policy numbers, email, or raw API bodies are included in analytics payloads.
2. How We Use Data
- Provide core extension functionality, including data bridge and sync operations.
- Authenticate users and authorize account-linked operations.
- Maintain extension settings and operational reliability.
- Protect service integrity and support basic security monitoring.
- Measure optional product usage and errors to improve reliability (analytics can be disabled remotely).
3. Data Sharing and Selling
We do not sell personal data. Data is shared only as needed to provide the Extension's functionality, such as transmitting requested sync data to relevant HGI services. We do not use data for unrelated advertising purposes.
4. Permissions and Scope
The Extension requests browser permissions (tabs, identity, and storage)
to find the signed-in HGI portal tab, perform Google sign-in, and persist settings.
A content script runs only on declared HGI office and API origins.
Host access is limited to HTTPS endpoints in the manifest, including HGI APIs, subscription billing, Firebase services for optional features, plan-enrollment worker endpoints, and https://www.google-analytics.com/* when optional GA4 analytics is enabled.
The Extension does not use activeTab or capture arbitrary visible tabs.
5. Data Retention
Data is retained only as long as needed for functionality and operational purposes. Locally stored extension state remains in the browser until cleared by the user or overwritten by normal extension operation.
6. Security
We use reasonable safeguards to protect data in transit and at rest where applicable. Network communication for supported services is expected to use HTTPS.
7. Your Choices
- You can remove the Extension at any time from your browser.
- You can clear extension storage through browser extension settings.
- You can stop using authenticated features by signing out of relevant accounts.
8. Children's Privacy
The Extension is not directed to children under 13, and we do not knowingly collect personal data from children under 13.
9. Availability (United States and Canada)
The Extension and related hosted pages (including this privacy policy and subscription checkout) are offered to users in the United States and Canada. Canadian users may exercise privacy rights that apply under applicable Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws, such as requesting access to or correction of personal information we hold, or withdrawing consent where consent is the basis for processing. Contact privacy@akfinancialconsultants.com to make a request. We respond within a reasonable time as required by applicable law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted at the policy URL with a revised effective date.
11. Contact
For privacy questions, contact: privacy@akfinancialconsultants.com