1. Introduction
This Privacy Policy explains how Human-Centric AI Governance, LLC ("we," "us," "our," or "the Company") collects, uses, discloses, and protects personal information when you visit our website at https://hcaigov.com (the "Site") or interact with us through the Site, including by scheduling a consultation.
Human-Centric AI Governance, LLC is a Wyoming-formed Limited Liability Company providing AI governance, regulatory compliance, and third-party risk consulting services. We are committed to transparency in how we handle your personal information and to compliance with applicable data protection laws.
This Privacy Policy is designed to comply with major data protection laws including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), and Brazil's Lei Geral de Proteção de Dados (LGPD). Visitors in other jurisdictions may have additional rights under their local laws; please contact us at [email protected] to exercise any data subject rights, and we will respond in accordance with applicable law.
2. Contact Information
For privacy-related inquiries, data subject rights requests, or any questions about this Privacy Policy, you may contact us through either of the following channels:
Mailing Address
Human-Centric AI Governance, LLC
c/o Registered Agents Inc.
30 N Gould St Ste R
Sheridan, WY 82801
United States
We will respond to verifiable data subject requests within the timeframes required by applicable law (typically 30 days under GDPR, 45 days under CCPA).
3. Information We Collect
We collect personal information only when you voluntarily provide it to us, or automatically through standard web technologies as described below.
3.1 Information You Provide Directly
When you book a consultation through our scheduling tool (Calendly), you provide the following information:
- First name and last name
- Email address
- Role and organization (the company or entity you represent)
- Description of your AI tool, regulation, or compliance situation
- Description of what a successful outcome from the consultation would look like for you
3.2 Information Collected Automatically
When you visit the Site or use the embedded scheduling widget, certain information is collected automatically by our service providers:
- IP address (collected by Calendly when the booking widget is loaded)
- Time zone (collected by Calendly to display accurate booking times)
- Page views, referrer URLs, visitor location at country level, browser type, and device type (collected by Carrd.co, our website host, for basic analytics)
- Server log information including IP addresses, request timestamps, and user agent strings (standard web server logging by Carrd.co)
3.3 Information We Do NOT Collect
Human-Centric AI Governance, LLC does not accept payments through this website. All consulting engagements are paid via direct invoice through our business banking provider (Mercury). No credit card, banking, or other payment data is collected, processed, or stored by this website.
Additionally, we do not collect:
- Protected Health Information (PHI) as defined under HIPAA
- Social Security numbers, government-issued ID numbers, or other sensitive personal identifiers
- Biometric information
- Children's data — this Site is not directed at children under 13
4. Cookies and Tracking Technologies
The Site uses cookies set by our third-party service providers. We have audited the cookies present on the Site and disclose each one below in the interest of full transparency.
4.1 Cookies Currently Set on This Site
All cookies on this Site are set by the embedded Calendly scheduling widget (calendly.com domain). Carrd.co (our website host) does not set additional first-party tracking cookies.
In plain terms: When you visit this Site, the scheduling tool we use (Calendly) automatically loads a small piece of software that sets several cookies on your browser. Some cookies keep the site secure and are always on (essential cookies). Some track anonymous visitor behaviour for Calendly's analytics and can be declined (non-essential cookies). The CookieYes consent banner that appears when you visit the Site lets you choose which cookies you accept, decline, or customise. The table below describes each cookie in detail.
| Cookie Name | Provider | Purpose | Type |
|---|---|---|---|
__cf_bm | Cloudflare (Calendly) | Bot management and security | Essential |
_cfuvid | Cloudflare (Calendly) | Unique visitor identification, load balancing | Essential |
OptanonAlertBoxClosed | CookieYes (via OneTrust technology) | Remembers that you have seen the cookie consent banner so it does not appear again on every page visit | Essential |
OptanonConsent | CookieYes (via OneTrust technology) | Saves your cookie preferences — what you accepted or declined — so your choices are respected on future visits | Essential |
ajs_anonymous_id | Segment.io (Calendly) | Anonymous user analytics via Calendly's standard integration | Non-essential |
__stripe_mid | Stripe (via Calendly) | Fraud detection on Calendly's infrastructure; see Section 4.3 | Non-essential |
4.2 Cookie Consent Banner (CookieYes)
This Site uses CookieYes, a third-party cookie consent management platform, to obtain and record your cookie consent preferences. When you visit the Site, a consent banner appears allowing you to Accept All cookies, Reject All non-essential cookies, or Customise your preferences by category. Your consent choices are recorded and respected for subsequent visits. CookieYes supports GDPR (EU & UK), LGPD (Brazil), CCPA (California), and other major privacy frameworks. For more information, see CookieYes's privacy policy at cookieyes.com/privacy-policy.
4.3 Note on the Stripe Cookie
The Calendly scheduling widget on this Site loads code from Stripe (a payment processor) as part of Calendly's standard integration. While Human-Centric AI Governance does not accept payments through the website, this cookie (__stripe_mid) is set by Stripe for fraud detection purposes on Calendly's infrastructure. We do not have access to or control over this cookie. To opt out, see Stripe's privacy policy at stripe.com/privacy.
4.4 Managing Cookies
- Most browsers allow you to block or delete cookies through their privacy settings
- Blocking cookies may affect the functionality of the Calendly scheduling widget
- You can manage or change your cookie consent preferences at any time by clicking the cookie settings icon on the Site (provided by CookieYes)
5. How We Use Your Information
We use the personal information we collect for the following purposes:
- Responding to inquiries and scheduling consultations: to confirm your booking, send meeting details, and prepare for the consultation.
- Following up after consultations: to send proposals, statements of work, or other engagement materials when appropriate.
- Improving the website: using aggregate analytics data to understand visitor patterns and improve content.
- Legal and compliance purposes: to comply with applicable laws, respond to lawful requests, and protect our legal rights.
We do NOT use your personal information for targeted advertising, selling or sharing data with third parties for advertising purposes, newsletter distribution (unless you specifically opt in), or automated decision-making with legal or significant effects on you.
6. Third-Party Service Providers
We use the following third-party service providers to operate the Site and conduct our business:
- Carrd.co (US-based) — Website hosting and basic analytics. Privacy policy: carrd.co/privacy
- Calendly (US-based) — Meeting scheduling and intake form processing. Privacy policy: calendly.com/privacy
- Zoho Mail (India-headquartered with US data centers) — Email service for our business address. Privacy policy: zoho.com/privacy.html
- Google Calendar and Google Meet (Google LLC, US-based) — Calendar and video conferencing for scheduled consultations. Privacy policy: policies.google.com/privacy
- CookieYes (Cyrus Digital Ltd, UK-based) — Cookie consent management platform. Privacy policy: cookieyes.com/privacy-policy
6.2 International Data Transfers
Most of our service providers are based in the United States. Zoho is headquartered in India with data centers in the United States. By using the Site, you acknowledge that your personal information may be transferred to and processed in countries other than your country of residence, including the United States, where data protection laws may differ from those in