1. Information we collect
Information you provide
We may collect your name, business name, email address, authentication information, billing and subscription details, support communications, account preferences, and content or configuration data you submit to a service.
Service and device information
We may collect IP address, browser and device information, timestamps, pages or features used, authentication events, diagnostic logs, approximate location derived from an IP address, and security-related events. The exact data collected depends on the service and configuration you use.
Application-specific information
- Consent Manager: website configuration, banner settings, consent choices, consent records, and related audit information.
- Privacy Focused Analytics: website traffic and event data configured by the customer, which may include page paths, referrers, device categories, approximate geography, and campaign information.
- Dynamic QR: QR destinations, campaign metadata, scan events, device information, timestamps, and approximate geography when tracking is enabled.
- Secure Secrets: encrypted secret payloads, expiration settings, allowed decryption counts, optional location restrictions, and limited security logs. We design the service so plaintext secrets are not intentionally retained after encryption.
Cookies and similar technologies
We may use strictly necessary cookies or local storage for authentication, security, preferences, and theme selection. Any optional analytics or marketing technologies used on Bigheim-controlled sites will be described through the applicable consent experience.
2. How we use information
- Provide, operate, maintain, and improve the services.
- Create and secure accounts, authenticate users, and administer subscriptions.
- Process transactions and communicate about billing or service changes.
- Respond to support requests and deliver notices.
- Detect fraud, abuse, security incidents, and violations of our terms.
- Understand product usage and improve onboarding and performance.
- Comply with law and protect the rights, safety, and integrity of Bigheim, our users, and others.
3. How we disclose information
We may disclose information to vendors that provide hosting, infrastructure, payment processing, email delivery, security, customer support, and similar business services under appropriate contractual restrictions. We may also disclose information when required by law, to protect rights or safety, in connection with a merger or business transaction, or at your direction.
4. Customer-controlled data
Customers determine much of the information collected through their websites, QR campaigns, consent configurations, and use of the services. For that data, the customer may be the business or controller and Bigheim may act as a service provider or processor. Customers are responsible for providing legally required notices, obtaining required consents, and responding to requests from their end users.
5. Retention
We retain information for as long as reasonably necessary to provide the services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations. Retention periods vary by data type, account settings, subscription status, and application functionality. Encrypted secrets may expire or become inaccessible according to the sender’s selected limits.
6. Your privacy choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or information about our processing. You may also have a right to opt out of certain sales, sharing, targeted advertising, or profiling. We may need to verify your identity before completing a request.
Nevada residents
Nevada residents may submit a verified request to opt out of a future sale of covered information as defined by Nevada law. Bigheim does not currently sell covered information for monetary consideration. Requests may be sent to support@bigheim.com.
7. Security
We use administrative, technical, and physical safeguards designed to protect information, including access controls, encryption where appropriate, logging, monitoring, and secure development practices. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.
8. International use
Bigheim is based in the United States. If you access the services from another country, information may be processed in the United States or other locations where our service providers operate, subject to applicable safeguards.
9. Children
The services are intended for businesses and users age 18 or older. We do not knowingly collect personal information from children under 18. Contact us if you believe a child has provided personal information to us.
10. Changes to this policy
We may update this policy as our services or legal obligations change. We will post the revised policy with a new effective date and provide additional notice when required.
11. Contact us
Questions or privacy requests may be sent to support@bigheim.com or Bigheim Technologies, LLC, Nevada, United States.