Privacy Policy

Last Updated: November 25, 2025

Introduction

Welcome to HillGenius Inc.'s Congressional Hearing Transcript Service ("Service"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information. This Privacy Policy explains our practices regarding data collection and processing when you use our Service.

Our Commitment to Your Privacy

We Do Not Sell Your Information

We want to be absolutely clear: we do not sell, rent, or trade your personal information to third parties for their marketing purposes or for any other commercial benefit. Your data is collected solely for the purpose of providing and improving our Service. We believe your information belongs to you, and we are committed to being responsible stewards of the data you entrust to us.

Information You Provide to Us

When you register for our Service, we collect:

• First and last name
• Email address
• Company/organization name
• Payment information (processed through Stripe)

Information Collected Automatically

When you use our Service, we automatically collect:

• IP addresses
• Geographic location data (derived from IP addresses for service eligibility verification)
• Device information (browser type, operating system)
• Usage data (pages visited, features used, time spent on pages)
• Number of transcript views
• Session information (number of sessions, session duration)
• Referrer data (source of page views, including advertising sources)
• Conversion events (demo bookings, account signups, newsletter subscriptions, purchases)
• Performance and error data
• Security event logs (see "Security Monitoring" section below)

Geographic and Eligibility Verification

We use IP geolocation services to determine your geographic location and verify service eligibility. This helps us comply with our service limitations and ensure we provide our Service only where permitted. When you attempt to register for our Service, we may:

• Check your IP address against geolocation databases
• Verify that you are accessing our Service from the United States
• Log blocked signup attempts for compliance and security purposes

We use third-party geolocation services (such as ipapi.co) to determine your country based on your IP address. This information is used solely for service eligibility verification and is not used for marketing or other commercial purposes.

How We Collect Information

We collect information through:

• Direct interactions when you create an account or submit information
• Cookies and similar tracking technologies
• Google Analytics for website analytics and user behavior tracking
• Google Ads for advertising performance and conversion tracking
• Vercel Web Analytics and Vercel Speed Insights
• Supabase database interactions
• Stripe payment processing

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Monitor usage patterns and traffic
• Analyze and optimize Service performance
• Track conversion events and measure the effectiveness of our marketing campaigns
• Understand how users interact with our Service and which features are most valuable
• Optimize our advertising spend and campaign performance
• Detect and prevent fraud and abuse
• Verify service eligibility based on geographic location
• Log and monitor blocked access attempts for compliance purposes
• Communicate with you about our Service
• Comply with legal obligations

Third-Party Services

Our Service utilizes the following third-party services:

Google Analytics

We use Google Analytics 4 to understand how visitors use our Service. Google Analytics collects information such as:

• Pages visited and time spent on pages
• How you arrived at our site (search engines, advertisements, direct visits)
• Device and browser information
• Geographic location (country, region, city)
• User interactions and conversion events

Geographic Restrictions: Our Service is not available to visitors from the European Union, European Economic Area, or United Kingdom. These visitors are blocked from accessing the site entirely, eliminating any GDPR compliance concerns.

This information helps us improve our Service and understand what content is most valuable to our users. Google's use of analytics cookies and your data is subject to the Google Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Google Ads

We use Google Ads to advertise our Service online. When you click on our ads or visit our site from a Google Ad, Google may:

• Store cookies on your device to track ad performance
• Collect information about which ads you clicked
• Track conversion events (demo bookings, account signups, newsletter subscriptions, purchases)
• Use this data to measure advertising effectiveness and optimize campaigns

We use Google Ads Enhanced Conversions, which sends hashed email addresses to Google for better attribution. This helps us understand which ads lead to conversions while protecting your privacy through data hashing. Google's use of advertising cookies and your data is governed by their Privacy Policy and Advertising Policies. You can manage your ad preferences through Google Ads Settings.

Vercel

We use Vercel for hosting, Web Analytics, and Speed Insights performance monitoring. Vercel Web Analytics collects visitor data including top pages and referrers, while Speed Insights tracks performance metrics based on Core Web Vitals. Vercel may collect additional information as described in their Privacy Policy.

Supabase

We use Supabase for database management. Information stored in Supabase is subject to their Privacy Policy.

Stripe

We use Stripe for payment processing. When you make a payment, you provide your payment information directly to Stripe. We do not store your full payment details. Stripe's use of your information is governed by their Privacy Policy.

IP Geolocation Services

We use IP geolocation services to determine your geographic location for service eligibility verification. These services may process your IP address to determine your country. We currently use ipapi.co for this purpose, and their use of your IP address is governed by their privacy policy.

Ghostwriter Feature

For users with access to the Ghostwriter feature, we use additional third-party services to process your data:

LLMWhisperer

We use LLMWhisperer (by Unstract) to extract text from PDF writing samples you upload. LLMWhisperer processes your documents but does not store your data. Your documents are processed and the extracted text is returned to us, after which LLMWhisperer deletes all copies of your files.

Google Vertex AI

To generate memos, your writing samples and hearing transcripts are sent to Google Vertex AI for processing. Key privacy protections include:

• All processing occurs exclusively in US data centers
• Google does not use your data to train or fine-tune AI models
• Data is retained in-memory for up to 24 hours for performance optimization only
• We do not use your writing samples or generated memos to train our own AI models

For more information about Google's data practices, see Google Cloud's Privacy Notice.

Data Storage and Security

We store your data securely using Supabase, which provides:

• Encryption at rest: All data is encrypted using AES-256 encryption
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• Row Level Security: Access controls ensure users can only access data belonging to their organization
• Isolated database instances: Each project runs on isolated Postgres instances, not shared tenants

Data Retention

We retain your information for as long as your account is active or as needed to provide you with our Service. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Information from blocked signup attempts, including email addresses and IP addresses, is retained for compliance and security monitoring purposes and may be kept longer than active account data.

Ghostwriter Data Retention

For the Ghostwriter feature:

• Generated memos: Automatically deleted 7 days after their last modification to protect your privacy
• Writing samples: Retained indefinitely until you manually delete them

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• Access to your personal information
• Correction of inaccurate or incomplete information
• Deletion of your personal information
• Restriction or objection to processing
• Data portability

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

Security

We implement reasonable security measures to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Security Monitoring

We may monitor user activity and log security events to protect our Service from misuse and maintain system integrity. This may include tracking unusual usage patterns, potential security violations, and attempts to circumvent system safeguards.

Security logs are retained for a limited time period and used solely for security, fraud prevention, and service protection purposes. Access to security data is restricted to authorized personnel for legitimate business purposes.

Our Business Focus

HillGenius Inc. provides services exclusively to businesses in the government affairs and legal sectors. Our Service is not designed for or targeted toward individuals under the age of 18. We do not knowingly collect personal information from minors.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date, and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

hello@hillgenius.com