Privacy Policy

Welcome to Heightss ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our web application at heightss.com(the "Service").

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy, or our practices with regards to your personal information, please contact us at heightss@heightss.com.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. Please also review our Terms of Service.

To provide our AI-powered investment and scheduling services, we collect and request access to specific data. We only request the minimum access required for functionality.

Information You Provide

Automatically Collected Information

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on pages
• Log Data: IP address, access times, referring URLs
• Analytics: Aggregated usage patterns via Google Analytics

Mandatory Compliance Statement

Heightss uses AI features powered by Anthropic, PBC (Claude). When you use these features, we send certain information to Anthropic so the model can generate responses.

We send this data only to provide AI-powered functionality within Heightss. Anthropic processes it according to its own privacy practices. For details on how Anthropic handles data, see the Anthropic Privacy Policy.

We retain your data for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Google OAuth Tokens: Retained while Google Calendar integration is connected. Immediately deleted when you disconnect.
• Journal Entries & User Content: Retained while your account is active. You can delete individual entries at any time.
• Usage Analytics: Aggregated, anonymized data may be retained indefinitely for service improvement.
• Log Data: Retained for up to 90 days for security and debugging purposes.

After deletion, data may persist in encrypted backups for up to 30 additional days before being permanently purged.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Data Portability: Request your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent for data processing at any time
• Restrict Processing: Request that we limit how we use your data
• Object: Object to processing of your data for certain purposes

How to Exercise Your Rights:

• Email us at heightss@heightss.com
• Use the settings in your Heightss profile
• For Google data: Visit Google Account permissions

We will respond to your request within 30 days. We may ask you to verify your identity before processing.

We use cookies and similar technologies to improve your experience:

Managing Cookies: You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

Do Not Track: We respect Do Not Track browser signals and will not track users who have enabled this setting.

We integrate with the following third-party services:

• Google (OAuth, Calendar): Authentication and calendar integration - Privacy Policy
• WorkOS: Authentication infrastructure - Privacy Policy
• Google Analytics: Usage analytics - Privacy Policy
• Anthropic, PBC (Claude AI): AI-powered chat and financial analysis — see AI Features (Anthropic) above; Anthropic Privacy Policy
• Sentry: Error monitoring - Privacy Policy

Each third-party service has its own privacy policy. We encourage you to review their policies.

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted over HTTPS/TLS 1.3. Sensitive data encrypted at rest using AES-256.
• Authentication: Secure OAuth 2.0 implementation with PKCE. Optional two-factor authentication.
• Access Control: Role-based access control for internal systems. Regular access audits.
• Infrastructure: Hosted on secure cloud infrastructure with SOC 2 compliance.
• Monitoring: 24/7 security monitoring and incident response procedures.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. Use strong, unique passwords and only access the Service within a secure environment.

Heightss is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at heightss@heightss.com. We will take steps to delete such information promptly.

Heightss is based in India. Your information may be transferred to and processed in countries other than your country of residence, including India and the United States (where our cloud infrastructure providers operate).

These countries may have data protection laws different from your country. By using our Service, you consent to the transfer of your information to these countries.

We ensure appropriate safeguards are in place for international transfers:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with our service providers
• Use of service providers with appropriate certifications (SOC 2, ISO 27001)

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email (for registered users)
• Display a prominent notice on the Service

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: