HIGH AGENCY

Privacy Policy

Effective 21 September 2026

High Agency is a live cohort program for ambitious students aged 13 to 19. This policy explains what we collect when you use high-agency.io and the High Agency platform, what we do with it, and how to get it removed. If anything here is unclear, write to info@high-agency.io.

What we collect

When you apply to the waitlist

Your name, email address, age, and your answers to the application questions. If you arrived through a referral link, we remember the latest valid code in your browser for 30 days. When you apply, we record that code and the referring member internally. Members can see how many applications their link brought in, but not applicants’ identities or answers. If you later join with the same verified email, we connect that attribution to your account. If you tick the optional marketing box, we record that you did and when.

When you have an account

We sign you in with your email address. Your public profile, visible to other signed-in members, holds only your first name and last initial, an age band (13–15, 16–17, or 18+), your country and timezone, and what you tell us about what you are building, including an optional profile photo and links. Your exact date of birth, full name, and city are stored separately and are visible only to you and to High Agency staff. Older accounts may also have a parent or guardian contact and a consent record; signup no longer collects a parent email.

When you use the platform

Your work on the season track: proof you submit, mentor feedback, workshops you enroll in, and your streak. Proof is visible to its author and mentors. Public profile details are visible to other members. The platform no longer has a community feed; communication takes place in Slack.

If you are under 18

Invited members can access the platform after email verification and profile setup. Access does not depend on a parent approval email. Historical parent contact and consent records, where present, remain private. You or your parent or guardian can contact us about your account using the address below.

Google Calendar

Members may connect Google Calendar to sync the sessions they enroll in. Mentors can also create scheduled workshops with a Google Meet room. When you connect, we ask Google for permission to manage calendar events (calendar.events) and to see the email address of the connected account.

  • We use this access only to create, update, and cancel the events High Agency schedules, and to add or remove the students who enroll in them as guests. We do not read, store, or display unrelated calendar events.
  • Members with a connected calendar receive private copies of their enrolled sessions, including the meeting link. Other members receive invitations at their sign-in email when the host has connected Calendar. Invitation guests cannot see each other's email addresses; the hosting mentor can.
  • We store your Google refresh token encrypted on our servers so sessions stay in sync. You can revoke access in your Google account. Members can also disconnect from their profile page. Disconnecting in High Agency removes future synced session copies, revokes the token, and deletes our token copy.
  • High Agency's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We never sell this data or use it for advertising.

How we use it

  • To run the program: maintain the season track, review proof, and schedule sessions.
  • To contact you about your application, your account, and the sessions you join.
  • To keep the platform safe, which includes letting staff review submitted proof.

We do not sell personal information and we do not show advertising.

Who processes it for us

We rely on a small number of providers to run the service: Google Firebase (sign-in and database), Vercel (hosting), Resend (transactional email), HubSpot (keeping track of waitlist applicants), and Google Calendar for members who connect it. Each processes data only to provide its service to us.

How long we keep it

For as long as you have an account or a live application. Ask us to delete your account and we will remove your profile, your private details, and your posts within 30 days. We may keep records we are required to keep, such as a parent's consent or withdrawal of it.

Your rights

You, or your parent or guardian, can ask what we hold about you, ask us to correct it, or ask us to delete it. Write to info@high-agency.io from the email address on the account and we will respond within 30 days.

Changes

If we change this policy in a way that matters, we will tell members by email and update the date at the top of this page.

High Agency · info@high-agency.io · Terms of use