Privacy Policy

Who we are

LINGTU AI LLC, registered in Delaware, United States, operates the HIEQ Chrome extension and website. Contact address: 1007 N Orange St., 4th Floor, Ste 1382, Wilmington, Delaware 19801, United States. Support and privacy requests: janine.cheng22@gmail.com.

Account and authentication information

Email registration and sign-in use Supabase Auth. Supabase processes your email, verification requests and authentication information. If you choose Google sign-in, Google and Supabase process the authorization flow and may provide an account identifier, email and basic profile information within the granted scope. HIEQ does not request Gmail mailbox or Google Drive access through this sign-in.

HIEQ uses your account identifier, email, optional nickname, account status, plan, credit balance and usage records to provide your account, display your allowance, prevent abuse and account for AI requests. Optional nicknames are stored with your account; changing a nickname does not change your sign-in email.

Text submitted for AI features

On compatible webpages, the extension reads selected text or a draft you explicitly provide so it can display the requested tool. When you invoke an AI action such as Translate, Generate, Refine or translating a result, the relevant selected message, draft, instructions, language choices and necessary revision context are sent over HTTPS to the HIEQ Gateway at api.hieq.ai and then to DeepSeek to generate the result. Generated text returns through the Gateway to the extension. Cached results or same-language checks can avoid a new AI request.

Submitted content can include email or chat messages and other personal information you choose to include. Do not submit passwords, verification codes, payment details, sensitive personal information or confidential customer content without authority to process it. HIEQ does not automatically send messages to customers. Review and copy the result yourself.

The extension's webpage access supports selection and tool placement; it is not permission to collect your browsing history or continuously upload complete webpages, mailboxes or keystrokes. The current AI flow does not require collecting browsing history.

Local settings and temporary workspaces

Language preferences and display options are stored in extension local storage. Sign-in credentials are managed by the extension Background process in restricted session storage, not exposed to webpage scripts or content scripts. Extension views receive only the authentication or account information needed for their interface.

Drafts, generated versions and workspace history can be held in extension session storage and memory. This is temporary working state, not a promise of permanent disk backup or cross-device draft synchronization. Browser restart, extension reload or disablement can clear session state. Save important drafts elsewhere before these actions. Signing out is not a request to delete server-side accounting records.

Records and retention

The Gateway and Supabase process account details, request identifiers, operation types, statuses, usage, credit movements and timestamps for authentication, limits, accounting and security. AI results may be stored temporarily to handle duplicate requests. They have a 24-hour expiry setting; this is not a guarantee of physical deletion within 24 hours.

Account data is used while your account is active. We handle deletion requests subject to identity verification and necessary legal, accounting and security retention. Provider logs and backups follow their applicable retention arrangements and may outlast live records. Signing out or uninstalling does not delete server records.

Providers and international processing

Tencent Cloud hosts the Gateway in Silicon Valley, United States. Supabase provides authentication, account records and temporary AI-result storage. DeepSeek processes text to generate results. Google provides optional sign-in and Gmail support email; Cloudflare Pages hosts the website. Providers may also process network and security metadata.

Processing may occur outside your country, including in the United States and China. Provider locations and backups depend on the applicable service arrangements. HIEQ uses submitted text to perform your requested AI action, not to sell your messages or target advertising. DeepSeek processing is subject to its applicable API terms. This service does not offer a zero-retention or no-model-training guarantee; do not submit content requiring those guarantees without first contacting us.

Browser permissions and controls

Storage supports preferences and temporary sessions; identity supports the Chrome Google OAuth callback; contextMenus provides user-invoked actions; activeTab and scripting support permitted feature interaction on the current page. Content scripts run on compatible pages, including relevant frames, so selection tools work in webmail and other sites. The extension package also declares the downloads permission. Translate, Polish and Smart Reply do not require you to download a file; this permission is not authorization to collect download history.

The extension connects to the HIEQ Gateway and Supabase authentication service. AI provider and database secrets are not included in the extension. AI requests go through the Gateway rather than directly to the AI provider. You can change languages, sign out, limit website access in Chrome, or disable/uninstall the extension; restricting access may stop selection tools on those pages.

Privacy requests and policy changes

Email janine.cheng22@gmail.com to request access, correction, deletion or information about processing, or to withdraw consent where applicable. Identify the relevant account email and your request; do not send passwords, verification codes, identity documents or customer conversations in your initial email. We may ask for proportionate verification before changing account data. Mandatory legal deadlines and exceptions apply; no self-service account-deletion feature is promised.

We will update the date above when this policy changes and provide additional notice where required. The retired website waitlist described below is separate from extension account registration.

Website browsing

Cloudflare Pages hosts hieq.ai. Cloudflare may process IP addresses, browser information, request times and security logs to deliver and protect the website. The website code adds no advertising trackers or third-party analytics. Interactive examples do not send text to an AI service.

The website has no registration or waitlist form. Product registration happens inside the extension and is covered by this policy. The old waitlist endpoint is closed and does not parse or save submissions. Store links include language and source parameters; Google handles store visits under its own policy.

Historical waitlist and support email

Earlier waitlist records may include email, optional role, language, source, consent and creation times, policy version and an age-confirmation flag. Birth dates were checked transiently, not stored in the waitlist table. Cloudflare Turnstile handled earlier bot verification. No new records are accepted.

The retention policy for earlier waitlist records is 12 UTC calendar months from original creation; duplicates do not extend it. Contact us to check or request deletion of a record. Provider backups follow separate rotation arrangements.

Google Gmail processes support messages, including sender addresses and contents, to let us respond and handle requests. Necessary legal or security records may be retained; no fixed mailbox or provider backup deletion deadline is promised.

Your choices and age

You may request access, correction, deletion, restriction or withdrawal of consent where applicable, and contact your local privacy regulator. We handle requests under applicable law and may retain records where legally necessary. Information is used to provide requested services, secure accounts and respond to you; where consent is required, it must be obtained before the relevant processing.

HIEQ is a business communication tool, not a service directed to children. The minimum service age is 14, or a higher local minimum. Involve a parent or guardian where legally required. Contact us if a child below the minimum age has provided information. This is not a claim that the current extension verifies every user's age.