Privacy Policy

Last Updated: October 21, 2025

At Holistic Quality, your privacy is sacred. This policy explains how we handle your data across the entire HQ ecosystem: Community Hub, Steady Glow, CHISPA, ALETHE, Frequency, and The Institute.

1. Information We Collect

A. Information You Provide

• Account Data: Username, email, password (encrypted)
• Profile Info: Display name, bio, avatar (optional)
• Content: Notes, posts, comments, forum discussions
• Dimensional Data: Tags, XP scores, growth tracking
• Public Sharing: Content you choose to make public

B. Automatically Collected Data

• Usage Analytics: How you interact with platforms (anonymized)
• Performance Data: Load times, errors (to improve service)
• Device Information: Browser type, OS (for compatibility)
• IP Address: For security and approximate location

C. What We DON'T Collect

• We don't collect unnecessary personal information
• We don't track you across other websites
• We don't sell your data to third parties
• We don't read your private messages without consent

2. How We Use Your Information

We use collected data for:

• Core Functionality: Account management, content storage, platform features
• Growth Tracking: XP calculation, dimensional scoring, leaderboards (if opted in)
• Community Features: Forums, discussions, attribution system
• Communication: Updates, announcements (you can opt out)
• AI Features: Note scoring, dimensional analysis (when you use these features)
• Security: Fraud prevention, abuse detection, account protection
• Improvement: Fixing bugs, optimizing performance, adding features

3. What We DON'T Do

4. Data Storage & Security

Private Content

Notes and content marked private are encrypted and stored securely. Only you can access your private content. We cannot read it without your permission.

Public Content

When you share content publicly (forums, glows, leaderboards), it becomes visible to the community. You can delete or make it private anytime.

Security Measures

• Encrypted data transmission (HTTPS/TLS)
• Secure database storage with encryption at rest
• Regular security audits and penetration testing
• Access controls and authentication (bcrypt password hashing)
• Two-factor authentication (optional)
• DDoS protection and abuse prevention

5. AI & Dimensional Scoring

When you use platforms like Steady Glow that include AI scoring:

• How It Works: Your note is sent securely to Claude AI for scoring (C/B/A)
• Processing: The AI evaluates dimensional growth quality
• Not Trained On: Your private notes are NOT used to train AI models
• Temporary: Content is processed and immediately deleted from AI systems
• Opt-Out Available: You can disable AI scoring anytime

6. Sharing & Community Features

What's Private by Default

• All notes are private unless you share them
• Your XP and dimensional scores are private unless you opt into leaderboards
• Your profile is only visible to the community if you choose
• Your email and personal info are never public

What's Public (If You Choose)

• Notes you share as "glows"
• Forum posts and comments
• Leaderboard rankings (if opted in)
• Public profile information (username, avatar, bio)

7. Your Rights

You have complete control over your data:

• Access: View all data we have about you
• Export: Download your data in portable format (JSON)
• Delete: Remove your account and all associated data
• Correct: Update or fix your information
• Opt-Out: Disable public features, analytics, emails
• Port: Transfer your data to another service
• Object: Contest automated decisions (like AI scoring)

To exercise these rights, visit your Account Settings or contact us at support.zezimabuilds.com

8. Cookies & Tracking

We use minimal cookies:

• Essential Cookies: Session management, authentication (required)
• Analytics Cookies: Anonymized usage data (opt-out available)
• Preference Cookies: Theme, language, settings
• No Advertising Cookies: We don't serve ads or track you across sites

You can manage cookie preferences in your browser or account settings.

9. Third-Party Services

HQ platforms integrate with:

• Claude AI (Anthropic): For note scoring and dimensional analysis
• Vercel: For hosting and CDN (data processing agreement in place)
• Supabase: For database and authentication (SOC 2 certified)
• Plausible Analytics: For privacy-focused, anonymized usage stats

These services have their own privacy policies. We only share data necessary for functionality and have data processing agreements with each.

10. Children's Privacy

HQ Community is not directed at children under 13. We don't knowingly collect data from minors. If you're a parent and believe your child has provided data, contact us immediately and we'll delete it.

11. International Users

HQ Community is operated from the United States. If you're accessing from elsewhere, your data may be transferred to and stored in the US. We comply with GDPR (EU), CCPA (California), and other international privacy regulations.

GDPR Rights (EU Users)

• Right to access your personal data
• Right to rectification (correction)
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

12. Data Retention

• Active Accounts: Data retained as long as your account is active
• Deleted Accounts: Personal data deleted within 30 days
• Public Content: May be retained for community continuity (anonymized)
• Backups: Automatically deleted after 90 days
• Legal Requirements: Some data may be retained longer if required by law

13. Changes to This Policy

We may update this policy as HQ Community evolves. When we make changes:

• We'll update the "Last Updated" date
• Significant changes will be announced via email and in-app
• You can review policy history on GitHub
• Continued use after changes constitutes acceptance

14. Contact Us

Questions about privacy? Concerns about data handling? Want to exercise your rights?

Support Hub: support.zezimabuilds.com

Email: privacy@holisticquality.io

Company: Holistic Quality, LLC
Website: holisticquality.io