Privacy Policy

• We collect what we need to run the Service — your email, tweets you paste, your topic + profile, the briefs and drafts we generate for you.
• We don't sell your data. We don't use it to train AI models.
• We share data with a small set of vendors (Supabase, the LLM provider, the payment processor) so the Service can function.
• You can delete your account at any time and your data goes with it (subject to legal retention).

High Agents ("we", "us") operates the service at highagents.space. For privacy questions, email abhijitastlar@gmail.com.

• Account data: email, password hash (via Supabase Auth), account creation date.
• Content you provide: tweets you paste for voice training, topic, audience and context fields, RSS / GitHub source URLs.
• Generated content: voice profiles, research briefs, headline ideas, and post drafts produced by the Service for you.
• Usage data: basic logs (timestamps, page visits, error events) for debugging and abuse detection. We do not run third-party analytics or ad pixels.
• Payment data: handled by our payment processor. We do not see or store your card number; we receive only a customer ID and subscription status.

To operate the Service:

• Authenticate your account and bill your subscription.
• Run the daily loop — pulling sources, calling the LLM with your content as input, persisting the output back to your account.
• Send transactional email (verification, billing receipts).
• Debug issues, prevent abuse, and improve the product based on aggregate usage patterns (e.g. which content types are generated most often) — never on identifiable user data.

We do notuse your content to train AI models, ours or anyone else's.

• Supabase — hosts our database and authentication. Your data lives in their cloud, scoped to your account via row-level security.
• Anthropic— the LLM provider. The content you submit to generate (tweets, topic, signals) is passed to Anthropic's Claude API to produce the output. Anthropic processes inputs to return outputs and does not train its models on API inputs by default.
• Composio — used for X integration when you connect an X account. Bound by their own terms.
• Vercel — hosts the application. Sees request metadata (IP, user-agent).
• Payment processor (Stripe or Lemon Squeezy) — handles checkout and billing.
• Email provider — sends transactional email.

We do not sell or rent personal data to advertisers or data brokers.

We use a small number of strictly necessary cookies for authentication (session) and CSRF protection. No marketing cookies, no third-party tracking pixels. See Cookie Policy for details.

For the life of your account. Active accounts keep all generated content indefinitely so you can browse history. On account deletion we remove your data from our database within 30 days; encrypted backups age out within 90 days. Billing records may be kept longer where required by tax law (typically 7 years).

Depending on where you live (e.g. EU/UK/California), you may:

• Request a copy of the data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data (right to be forgotten).
• Object to or restrict certain processing.
• Lodge a complaint with your local data-protection authority.

Email abhijitastlar@gmail.com to exercise any of these. We'll respond within 30 days.

Our vendors operate globally. Your data may be processed in the US, EU, India, or other jurisdictions. We rely on standard contractual clauses where applicable.

The Service is not directed at children under 18. We do not knowingly collect their data.

We may update this policy. Material changes will be announced by email or in-product notice. The "last updated" date at the top reflects the most recent revision.