Privacy Policy

1. Who We Are

We are the Society for Human-Centric Innovation. Our website address is: https://humancentricinnovation.com. Our mission is to help innovators, teams, and organizations address authentic human needs through rigorous, human-first innovation methodologies.

2. What Personal Data We Collect and Why

A. User Registration and Authentication

When you create a free account to access the HCI System Toolset, we collect the following information via our secure authentication infrastructure (Clerk):

• Your full name,
• Your email address,
• Profile avatar (optional or synchronized via Google / OAuth provider),
• Encrypted session tokens, security logs, and authentication timestamps.

Your passwords are never stored in plain text and are safeguarded with state-of-the-art cryptographic hashing.

B. Contribution and Contact Inquiries

When you submit insights or suggestions via our Contribute to HCI System page, the form securely compiles your message along with your verified member name, email, and timestamp to notify our editorial and methodology team.

3. Cookies and Session Storage

We only use essential technical cookies necessary for platform operation and security:

• Authentication Cookies: Manage secure login states and maintain your session across pages. These are discarded upon logout.
• Preference Cookies: Remember your language and interface theme preferences.

We do not use intrusive third-party behavioral advertising cookies.

4. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We only utilize trusted infrastructure providers to deliver our services:

• Clerk Inc.: Secure user authentication, account management, and multi-factor security.
• Cloudflare Inc.: Global edge hosting, DNS, DDoS protection, and content delivery.

5. Data Retention

For registered users, personal information is stored securely for as long as your account remains active. You can review, update, or delete your account at any time through the account management modal.

6. Your Data Protection Rights (GDPR & Global Compliance)

Depending on your jurisdiction, you have the following rights regarding your personal information:

• The right to access and request an export of personal data we hold about you,
• The right to rectification of inaccurate or incomplete information,
• The right to erasure of your personal data from our systems.

To exercise any of these rights, please contact us at [email protected].