GlobalGigID Privacy & Data Handling

1. Preview Status: GlobalGigID is currently in preview. No real user data is minted onto a blockchain when you submit a form on the preview site. The sample passport for Maria Sample on Sui testnet contains synthetic demonstration data only.

2. Lead & Reservation Forms (90-Day Retention): When a visitor submits the handle reservation form, the readiness checklist form, or the partner contact form, we store the submitted name, email address, form choices, timestamp, and a 90-day retention window in Google Cloud Firestore. A local notification receipt is staged without sending outbound email, and a redacted activity entry is recorded. A one-way hashed network address is used strictly for hourly abuse rate limiting and is never linked to marketing profiles.

3. HQ Access Control: Direct browser writes to all database collections are blocked by Cloud Firestore Security Rules. Read access to saved leads, notification receipts, and activity logs is restricted to verified Google accounts on the Agent Luci operator allowlist, while handle-lock records and rate-limit counters are restricted to the backend server function only.

4. No Sale or Third-Party Sharing: Your contact details are used only by Agent Luci to respond to your checklist, handle reservation, or partner inquiry. We do not sell or rent personal information.

5. Retention & Deletion Requests: Saved preview records carry a 90-day expiration timestamp. During this preview, expired records are removed on a best-effort basis when new requests arrive (up to 25 expired records per cleanup pass) rather than on a fixed background schedule, so records can remain past 90 days during quiet periods or if a cleanup query fails until managed cloud database TTL deletion is enabled at launch. To inspect or delete a saved record at any time, email luci@agentluci.com from the address you used.