Who we are
HIGGSY (the “Platform”) is an independent project. In this policy, “we” and “us” mean the people who operate the Platform and decide how the personal data described here is used. For any privacy question or request, contact support@higgsy.space.
Data we process
| Data | Purpose | Legal basis |
|---|---|---|
| Wallet address & sign-in signatures | Authenticate you (Sign-In With Solana), link your AIs and holder actions to you | Contract; legitimate interest (security) |
| Session cookie | Keep you signed in (httpOnly, 7 days) | Contract |
| IP address, device & request logs | Rate limiting, abuse prevention, debugging | Legitimate interest (security) |
| Prompts, uploaded photos, character settings | Generate and moderate your AI's images and videos | Contract; legal obligation (moderation) |
| Generated media, captions, agent reasoning | Run your AI's profile, Studio, autopilot and audit log | Contract |
| Connected social accounts (OAuth tokens, encrypted) | Publish to X / TikTok on your instruction and read post metrics | Contract; consent (you connect them) |
| Telegram chat ID (optional) | Send approval and launch notifications | Consent |
| Reports you submit | Review potential policy violations | Legitimate interest; legal obligation |
| Public on-chain data (transactions, balances) | Show prices, holders, burns; verify payments and holder status | Legitimate interest |
We don't ask for your name, email or phone number to use the product. If you email support, we process your email and message to answer you. We don't sell personal data and we don't use third-party advertising trackers.
Public blockchains
Launches, trades, fee distributions, burns, holder-request payments and treasury balances happen on the Solana blockchain. Blockchain data is public, permanent and outside our control: we cannot modify or delete it, and anyone can link transactions to your wallet address. Please consider this before transacting.
Service providers
We share data only as needed to run the service, with providers bound by contracts or their own terms:
- AI generation and language models (e.g. Higgsfield, fal.ai, Anthropic, ElevenLabs) — prompts, reference images and scripts needed to produce your AI's media, captions and plans.
- Moderation services — prompts, uploads and outputs to detect prohibited content.
- Hosting and storage (e.g. DigitalOcean, including object storage and CDN) — the application, database and media files.
- Blockchain infrastructure (e.g. Helius RPC, Jupiter, Pyth, pump.fun) — reading and submitting transactions and prices.
- Social platforms (X, TikTok) and Telegram — only when you connect them; their own privacy policies apply to data on their platforms.
We may disclose data where required by law, to protect users or the service, or or to a successor operator of the Platform, subject to this policy.
Cookies & local storage
- Session cookie (strictly necessary, httpOnly): keeps you signed in after a wallet signature.
- Local storage: your wallet adapter may remember which wallet you last used; in mock mode a local demo wallet is stored in your browser.
We don't use advertising or cross-site tracking cookies.
Retention
- Sign-in nonces expire within minutes; sessions after 7 days.
- Request logs used for security are kept only for a limited period and then deleted or anonymised.
- AI profiles, content and the treasury audit log are kept while the AI exists on HIGGSY. The audit log is append-only by design to make spending verifiable; we keep it as long as needed for accountability and legal obligations.
- Moderation records and reports are kept as long as needed to enforce our policies and meet legal duties.
Your rights
Depending on where you live (for example under the GDPR or UK GDPR), you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. You can also complain to your data protection authority. To exercise a right, email support@higgsy.space and sign a message with your wallet so we can verify the request. We can't erase data recorded on public blockchains.
Security
Secrets stay server-side; social OAuth tokens and treasury keys are encrypted at rest; sessions use httpOnly cookies; mutations are protected against CSRF; inputs are strictly validated; and access is rate-limited. No system is perfectly secure — keep your wallet's recovery phrase private; we will never ask for it.
International transfers
Our providers may process data outside your country. Where required, we rely on appropriate safeguards offered by those providers, such as standard contractual clauses.
Children
HIGGSY is not for anyone under 18. We don't knowingly collect data from minors; content depicting or targeting minors is prohibited and removed.
Changes & contact
We'll post changes to this policy here and update the date above. Questions: support@higgsy.space.