Privacy Policy

1. Overview & Operating Entity

This master Privacy Policy governs High Velocity Labs ("we", "us", or "our") and all sub-applications, services, and websites operated under the highvelocitylabs.dev domain, including:

• High Velocity Labs Apex Portal: https://highvelocitylabs.dev
• AI Family Office: https://finances.highvelocitylabs.dev
• Fantasy Football Assistant: https://ff.highvelocitylabs.dev
• Operations & Telemetry Hub: https://admin.highvelocitylabs.dev

We build specialized software with an uncompromising commitment to user privacy, cryptographic data protection, and zero third-party monetization.

2. Information We Collect

We collect and process only the minimal data strictly necessary to deliver each application's core functionality:

• Account & Authentication Credentials: When you authenticate via Google OAuth 2.0 or Google Identity Services (One Tap), we receive your verified email address, full name, profile picture URL, and an opaque Google account identifier (sub). We never receive or store your Google password.
• Application Workspaces: Data you explicitly provide inside our sub-applications (e.g., household balance sheet entries in Family Office, or ESPN league identifiers in Fantasy Assistant).
• Operational & Performance Telemetry: Ephemeral server metrics (timestamp, endpoint response times in milliseconds, HTTP status codes, and git commit hashes) collected to track system health and performance regressions.

3. Google User Data & Limited Use Disclosure

When you log in to High Velocity Labs applications using your Google Account:

• We access only basic identity scopes (openid, email, profile).
• We use your Google profile solely to authenticate your identity and enforce user allowlists.
• We NEVER use Google user data to serve advertisements, build consumer profiling databases, or train generalized machine learning models.
• We do not transfer or disclose Google user data to third parties, except as strictly necessary to fulfill the application's core functionality or comply with the law.

4. Zero Selling & No Data Sharing

We do not sell, rent, monetize, or trade your personal information to data brokers, advertising networks, or third-party marketing firms under any circumstances.

All application state and user databases are isolated, encrypted, and accessible only to authorized sessions.

5. Security & Cryptographic Standards

We protect user data using industry-leading security controls:

• Encryption in Transit: All HTTP traffic is strictly upgraded to modern TLS 1.3/1.2 via Cloudflare Proxied SSL and Let's Encrypt.
• Encryption at Rest: Sensitive database fields (including financial tokens and credentials) are encrypted at rest using AES-128 Fernet cryptography.
• Defense in Depth: Sub-applications run in isolated systemd slices with Unix socket pooling, strict HTTP-only session cookies with SameSite=Lax, and hardened security headers (X-Content-Type-Options: nosniff, X-Frame-Options: DENY).

6. Product-Specific Policies

A. AI Family Office (finances.highvelocitylabs.dev):

• Financial models, net worth tracking, and tax projections are private household simulations.
• No financial transaction data is shared outside your authenticated workspace.

B. Fantasy Football Assistant (ff.highvelocitylabs.dev):

• League analytics and roster optimizations are for private entertainment only. No real-money betting, gambling, or wagering takes place.

7. Data Retention & Deletion Rights

You have the complete right to request the export or permanent deletion of your account and all associated workspace data at any time. To request data deletion, contact us at the address below, and all database records will be permanently purged within 7 business days.

8. Contact Information

For inquiries regarding this Privacy Policy or data protection across High Velocity Labs, please contact:

High Velocity Labs
Attn: Privacy & Data Protection
Email: [email protected]