Privacy Policy

1. What we collect and how we use it

When you submit the readiness checklist, the partner inquiry form, or the handle reservation form on the claim page, we collect:

• Contact details: Your name and email address so we can record your request and follow up when GlobalGigID launch minting or partner onboarding opens. Outbound confirmation emails are not sent during this preview.
• Your chosen options: Your selected work areas, readiness checklist items (up to 16), desired handle and credentials (up to 16 entries, 60 characters max each), or partner platform need, size and timeline.
• Basic submission context: The form type, page path, origin domain, time spent filling out the form, and submission timestamp.

We use this information only to display your readiness checklist, reserve your preview handle, and respond to your inquiry. We never sell or rent your contact details.

2. Spam protection & handle availability checks

To prevent automated spam and abuse, our forms and handle availability checks use a hidden spam-trap field, a 3-second minimum fill time on submissions, and hourly per-network request quotas. We never store your raw IP address; our server converts the network address into a one-way salted cryptographic hash solely to enforce hourly rate limits. When you check handle availability on the claim page, the server returns only whether the handle is available or already reserved and never discloses who reserved it.

3. Storage & access controls

This website is an off-chain preview. No personal information from any form is written to the Sui blockchain or Walrus storage during this preview; the only on-chain record is our clearly labelled sample passport for Maria Sample on the Sui testnet.

• Server-only writes: Form submissions and handle reservations are saved in Google Cloud Firestore exclusively through our backend server function. Direct browser writes to the database are blocked.
• Restricted access: Handle-reservation lock records and rate-limit counters are restricted to the backend server function only, with no client read or write access. Saved lead records are restricted to signed-in GlobalGigID HQ team accounts with verified email addresses.
• Retention window: Saved form submissions, reserved handles, preview notification receipts, and redacted activity logs carry a 90-day expiration timestamp, and hourly rate-limit counters expire after 60 minutes. During this preview, expired records are removed on a best-effort basis when new requests arrive (up to 25 expired records per cleanup pass) rather than on a fixed background schedule, so records can remain past 90 days during quiet periods or if a cleanup query fails until managed cloud database TTL deletion is enabled at launch.

4. Duplicate submissions, updates & deletion

Submitting the same form again with the same email address keeps your original stored record unchanged so existing reservations and inquiries cannot be overwritten without verification. To inspect, update, or delete your saved lead record or reserved handle at any time, email luci@agentluci.com and we will update or remove your records promptly.