The High Council

The High Council is an AI-generated historical conversation service operated by the operator of The High Council, which is responsible for your information. For privacy questions or requests, contact thehighcouncil.support@gmail.com. We may ask you to verify account ownership before acting on a request.

What we collect and why

Account. Google sign-in (or an email sign-in link) gives us your account identifier, email address and basic profile information such as your name and picture. We use it to sign you in and keep your councils and membership with your account. Signing in does not give us access to your Gmail, Drive or contacts.
Councils. The questions, scenarios and messages you submit, the generated dialogue, the figures you choose, session state and usage records, so you can resume conversations, keep your history and export transcripts.
Membership. Stripe processes payments on its own hosted pages. We store your Stripe customer and subscription identifiers and subscription status to manage access. We never see or store full card numbers.
How you found us. When you first visit, a first-party cookie (hc_src, 90 days) records campaign tags in the link you followed (such as utm_source or an ad click identifier), the referring website and the page you arrived on. At sign-up we save this with your account and include it with your payment record, so we can tell which campaigns bring members. We use no third-party advertising trackers or pixels.
Operations. Technical information such as IP addresses, request times, errors, provider request identifiers and usage costs, to run, secure and troubleshoot the service.

Who processes it

OpenAI generates each figure’s responses from the conversation and historical source material, and screens submitted messages for prohibited content. Under OpenAI’s API terms, this data is not used to train its models by default and may be retained for a limited period for abuse monitoring.
Supabase provides sign-in, the database and file storage.
Netlify hosts the application.
Stripe processes payments and sends receipts.
Google provides Google sign-in.

These providers may process data in the United States and other countries, under their own terms, privacy notices and data-transfer safeguards. We do not sell or share your personal information for cross-context behavioural advertising, and we do not use your private councils for marketing.

Private councils are separate from the public episodes we publish and are never used in them. The service owner can access stored councils when needed to operate the service, investigate misuse or provide support. Please avoid entering sensitive personal information you do not want processed by the service and its providers.

Cookies

We use essential cookies to keep you signed in, and the first-party attribution cookie described above. We do not use advertising or cross-site tracking cookies.

Retention

Your account and councils are kept until you delete them. When you delete your account, your profile, councils and transcripts are deleted from our database; residual copies in provider backups expire on the providers’ schedules. Billing, tax and security records are kept as long as the law requires.

Your choices and rights

You can export any council from its page and delete your whole account from your account page. Depending on where you live (for example under the GDPR, UK GDPR or California law), you may also have rights to access, correct, port, delete or restrict the use of your information, to object to processing, and to complain to a data-protection authority. To exercise them, contact thehighcouncil.support@gmail.com. We process account and council data to provide the service you request (contract), and operational and attribution data for our legitimate interests in running and improving the service.

The service is not intended for anyone under 18, and we do not knowingly collect information from children.

We will update this notice when our practices change, and will notify members by email of material changes.