Privacy Policy

Account features use Supabase for authentication and stored email, profile, language, account status, consent, saved check-in and activity information. Profiles may include a display name and optional country, region and city. Policy acceptance records may include an IP address and browser information. Registration asks users to confirm they are at least 16, and onboarding requires an age affirmation, not a date of birth or independent age verification. Free educational resources do not require registration.

Author applications, profile and contact information, publication text, review information, and uploaded resumes, photographs, cover images and videos are stored through Supabase. Published articles and public author information are visible to visitors. Resumes and publication videos use separate storage access rules; some photographs and publication images have public URLs. Removing a publication record is not the same as removing every uploaded file or a copy already obtained by another person.

HAEL's public educational resources are available without creating an account. Account registration, author accounts, and interactive account-based features are intended for individuals aged 16 or older.
Individuals under 16 must not create an account. HAEL does not knowingly collect personal information through registered accounts from individuals under this age. If we discover that an account was created in violation of this requirement, we may restrict the account and take appropriate steps to delete associated personal information, subject to applicable legal obligations.
Parents or legal guardians may contact hello@hael.world regarding personal information submitted by a minor.

Messages sent to hello@hael.world are used to respond to your inquiry. Transactional messages, including account and payment messages, use Resend for email delivery.

HAEL offers optional AI-powered educational text and voice features. The text Guide sends your message and recent conversation context through an AI gateway to a Google Gemini model. Voice uses OpenAI Realtime to process microphone audio and generate responses. Information submitted to these features may be transmitted to the configured AI service providers to generate responses.
Messages and displayed voice transcripts are held in the current page's memory; the current application does not save them as account conversation histories. For signed-in voice sessions, duration and the reason the session ended may be stored in account activity, without the audio or transcript. Service error logs can contain processing details.
HAEL does not represent these features as private professional counseling, medical treatment, or crisis intervention. AI output may be inaccurate and is not professional advice.
Users should avoid submitting unnecessary sensitive personal information, including medical records, identification documents, financial credentials, or confidential information.
AI providers may maintain their own processing, security, abuse-prevention, and retention practices. Their retention and deletion arrangements depend on the applicable service and contractual configuration.
Users may contact hello@hael.world to ask about data associated with their use of HAEL's AI features and available deletion options.

Stripe processes payments. HAEL stores information needed for donation acknowledgments, ticket orders, payment status and fulfillment. Payment forms collect the information displayed in those forms. Full payment-card details are handled by Stripe, not entered into HAEL's forms.

HAEL has Google Tag Manager and consent-controlled Meta Pixel integration for measurement. Optional analytics and advertising permissions start denied until you accept the cookie banner. Choosing only necessary cookies, or withdrawing consent later, keeps those permissions denied. You can change your choice using Cookie preferences in the footer. Ticket Purchase measurement uses confirmed paid-order status, amount, currency and ticket quantity, not your name, email or card details.

Browser storage keeps language and cookie choices, cached translations, check-in state, locally saved author publication text drafts and event-deduplication markers. Authentication also uses browser storage. You can clear site storage through your browser settings; this may sign you out and remove locally saved preferences and drafts.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including operating the platform, fulfilling transactions, maintaining security, complying with legal obligations, and resolving disputes.
Our intended retention periods are:

• Account and profile information: while the account remains active, followed by deletion through the account deletion process, subject to applicable exceptions.
• Unsubmitted author drafts stored in the browser: until the draft is submitted, discarded, or the relevant browser storage is cleared.
• Published author content and uploaded media: while the publication remains active, or until removal under the applicable publication and account policies.
• General contact inquiries: up to 24 months after the last relevant communication, unless longer retention is reasonably necessary.
• Event registration and ticket records: up to 24 months after the event, except records that must be retained longer for accounting, legal, fraud prevention, or dispute purposes.
• Donation and financial transaction records: up to seven years where required or justified by applicable accounting, tax, or legal obligations.
• Application security and diagnostic logs: a target retention period of 90 days, except where longer retention is necessary for security investigations or legal obligations.
• Operational backups: a target expiration period of 90 days, subject to verified backup configuration and legally required exceptions.
• Cookie preferences and browser-stored settings: until replaced, withdrawn, cleared, or expired according to their configured lifecycle.

Where an exact retention period cannot be verified, we retain information only as long as necessary for the documented purpose and applicable obligations.

Registered users may request account deletion through available account settings or by contacting hello@hael.world.
HAEL aims to complete verified deletion requests within 30 days, unless additional time or continued retention is permitted or required by applicable law.
Account deletion may remove associated profile information, authentication records, unpublished content, and eligible uploaded media.
Certain information may be retained where necessary for legal compliance, financial accounting, fraud prevention, security, dispute resolution, or other legitimate obligations.
Information already included in backups may remain until those backups expire under the applicable retention schedule.
Data held by independent third-party service providers is subject to their respective processing arrangements and retention policies. HAEL will process deletion requests through available provider mechanisms where applicable.
Deleting a HAEL account does not automatically erase information independently retained by payment processors or other providers under their own legal obligations.

Email hello@hael.world to request access, correction or deletion of your personal information, specifying the account or data category concerned. Do not send passwords, payment-card details or unnecessary sensitive documents. Rights and any lawful retention requirements depend on your jurisdiction and the applicable circumstances.

For questions about this policy or your information, email hello@hael.world.