Privacy Policy
Effective Date: September 14, 2026 · Last Updated: September 14, 2026
Heavens Spectrum and Behavioral Health Au Pairs Global ("HSBHAPG," "we," "us," or "our") respects the privacy of families, children, applicants, au pairs, Executive Placement Advisors, Placement Inspectors, Well-Being Liaisons, employees, enterprise representatives, and other individuals who interact with HSBHAPG. This Privacy Policy describes the categories of information HSBHAPG may process, why we process it, how it may be disclosed and protected, the choices available to users, and specifically how HSBHAPG accesses, uses, stores, and shares Google user data when Sign in with Google is used.
Google Sign-In disclosure: HSBHAPG's current Google authentication integration is used for identity and sign-in. It does not request access to the contents of Gmail, Google Drive, Google Calendar, Google Contacts, or Google Photos. See Sections 11–15 for explicit disclosures covering ACCESS, USE, STORAGE, SHARING/TRANSFER, and Google Limited Use.
1. Scope of This Privacy Policy
This Privacy Policy applies to personal information processed by Heavens Spectrum and Behavioral Health Au Pairs Global (HSBHAPG) through hsbhapg.com and HSBHAPG applications, portals, assessments, onboarding systems, placement and household workflows, personnel workspaces, safety and well-being programs, and related services. Different information is collected depending on a person's relationship with HSBHAPG. Not every category described below is collected from every user.
2. Information You Provide to HSBHAPG
Depending on the service or relationship, HSBHAPG may collect names, preferred names, dates of birth, email addresses, telephone numbers, residential or mailing addresses, nationality, citizenship, country of residence, languages, occupation and employment information, household information, family and child-care requirements, application and onboarding responses, education and professional qualifications, references, emergency contacts, communications, electronic signatures, acknowledgements, documents, photographs or videos you choose or are authorized to submit, and other information required for the HSBHAPG service or workflow you request.
3. Family, Household, and Child Information
Family and placement workflows may process household composition, residences, household staff, care schedules, travel requirements, cultural or religious practices voluntarily disclosed for care planning, household safety measures, pools, secured firearms, medications or chemicals, security systems, cameras and restricted areas, and safety-related disclosures. Where a parent, legal guardian, or authorized representative provides information about a child, HSBHAPG may process the child's name, date of birth or age, education, routines, languages, interests, dietary requirements, allergies, medications, medical or developmental conditions, behavioral-health or communication needs, mobility or accessibility needs, disclosed diagnoses, trauma-related information, known triggers, calming strategies, safety concerns, previous care arrangements, and care goals when relevant to safe and appropriate services. This information is treated as sensitive and is intended to be available only to personnel or service participants whose authorized duties require it.
4. Safety, Suitability, and Household Disclosures
Certain HSBHAPG applications and safety reviews may request information relevant to placement suitability and safeguarding, including disclosures concerning custody disputes, restraining orders, child-protection matters, criminal matters, domestic violence, prior staff or childcare allegations, and other safety concerns. HSBHAPG may also maintain verification or screening statuses and authorized review notes. Access to these records is restricted according to role and operational need. HSBHAPG does not represent that every disclosure category is required in every jurisdiction or for every service.
5. Au Pair, EPA, PI, Employee, and Workforce Information
For applicants, au pairs, Executive Placement Advisors (EPAs), Placement Inspectors (PIs), Well-Being Liaisons, employees, personal assistants, executives, and other personnel, HSBHAPG may process application information, contact information, employment identity, work location and jurisdiction, availability, education, experience, certifications, references, training and onboarding progress, role authorizations, work schedules, employment status, screening or background-check status, work-authorization and tax-setup status, payment or payout setup status, and records necessary to administer the working relationship. Where a third-party screening, payroll, payment, identity, or verification provider is used, HSBHAPG seeks to retain only operational information reasonably necessary for the HSBHAPG workflow rather than unnecessary underlying sensitive records.
6. Immigration, Passport, Visa, and Travel Compliance Information
Where international placement or travel compliance requires it, authorized HSBHAPG workflows may process citizenship, country of residence, destination country and jurisdiction, visa category, passport or travel-document information, expiration dates, admission or program dates, sponsor information, travel eligibility, work-authorization verification status, government-record files provided for the applicable process, and prior immigration-related disclosures where legally appropriate. Some HSBHAPG workflows are designed to use masked document identifiers or status-only verification where a full identifier is not operationally necessary. Access to immigration and compliance records is restricted to authorized users and functions.
7. Well-Being and Confidential Support Records
HSBHAPG's Au Pair Well-Being Liaison program may maintain scheduled and completed check-in records, the method and date of a check-in, well-being outcomes, topics discussed, an au pair's own reflection, follow-up requirements, confidential liaison working notes, and escalation or case records where support or safety review is required. Confidential liaison notes are intended for the assigned liaison and authorized leadership rather than general portal visibility. HSBHAPG uses these records for well-being support, safeguarding, follow-up, and appropriate escalation.
8. Inspection and Private-Residence Evidence
Where a placement inspection or safety review is conducted, authorized HSBHAPG workflows may process private-residence evidence such as authorized property photographs, measurements, checklist evidence, captions, findings, and evidence associated with an inspection assignment. Such material may reveal sensitive information about a private residence. HSBHAPG restricts access to assignment-authorized inspection personnel and authorized leadership, and does not intend private-residence inspection evidence to be publicly accessible.
9. GuardianLink and Location-Enabled Safety Services
HSBHAPG systems include GuardianLink and wearable-safety functionality that may, when a family is enrolled, compatible services are activated, and the applicable device or service is operating, process device identifiers, device assignment, connectivity, battery and device status, SOS or tamper status, a child's or assigned device's location, location accuracy and time, Safe Zone or geofence information, and safety alerts. Location-capable functionality is service- and activation-dependent; the existence of a feature in HSBHAPG technology does not mean location information is collected from every user. Where activated, this information is used for the safety functionality requested by the authorized family or account and is subject to restricted access.
10. Payment, Billing, Payout, Commission, and Alternative-Asset Information
HSBHAPG may process membership, enrollment, billing, invoice, payment, commission, reimbursement, payroll, or payout-related information necessary to administer services and working relationships. Depending on the payment pathway selected or made available, records may include payer identity and contact information, amounts, currency, invoices, payment and settlement status, transaction/provider references, Stripe or PayPal operational references, connected-account status, masked bank information such as bank name, account type or limited account digits, commission and compensation records, refunds, disputes, reversals, and audit history. HSBHAPG systems also contain controlled workflows for proposed or authorized alternative-asset payments, including cryptocurrency, securities, NFTs, or other assets. Where such a pathway is actually used, HSBHAPG may process asset type, symbol or security information, quantity, ownership or custodian information, valuation and settlement information, transfer documentation, compliance review information, and provider references. The existence of a configured payment pathway does not mean every payment method is available or active for every user or transaction. Full payment credentials, OAuth secrets, API keys, and raw banking credentials are not intended to be publicly exposed.
11. GOOGLE USER DATA — ACCESS
When you voluntarily choose Sign in with Google, HSBHAPG accesses only the Google Account information authorized through the current authentication scopes: OpenID (openid), primary email address (https://www.googleapis.com/auth/userinfo.email), and basic profile information (https://www.googleapis.com/auth/userinfo.profile). In practical terms, Google may provide HSBHAPG with your Google Account identifier, name, primary email address, and profile picture/basic profile information. Google does not provide your Google Account password to HSBHAPG. HSBHAPG does not request OAuth permission through this integration to access the contents of Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or other Google product content.
12. GOOGLE USER DATA — USE
HSBHAPG uses the Google user data received through Sign in with Google solely to authenticate you, create, locate, or associate the appropriate HSBHAPG account, display basic account information where applicable, provide secure access to the HSBHAPG portal or service associated with your authorized role, maintain authentication and account-security records, troubleshoot sign-in, and help prevent unauthorized access. HSBHAPG does not use Google Sign-In data for targeted advertising, personalized advertising, retargeting, determining creditworthiness, lending, sale to data brokers or information resellers, or training generalized artificial-intelligence or machine-learning models.
13. GOOGLE USER DATA — STORAGE
HSBHAPG may store the limited Google identity information necessary to maintain your HSBHAPG account and authentication relationship, such as the account association/identifier, name, email address, and basic profile information provided through the authorized scopes, together with appropriate authentication and security records. Google user data is retained only for as long as reasonably necessary for authentication, account administration, security, dispute-resolution, or applicable legal obligations. HSBHAPG applies reasonable administrative, technical, and organizational safeguards designed to protect stored personal information from unauthorized access, disclosure, alteration, loss, or misuse. When Google-derived information is no longer reasonably required, HSBHAPG may delete or de-identify it subject to legitimate legal, security, and recordkeeping requirements.
14. GOOGLE USER DATA — SHARING AND TRANSFER
HSBHAPG does not sell Google user data and does not transfer Google user data to unrelated third parties for targeted advertising, personalized advertising, retargeting, data-broker or information-reseller activity, creditworthiness or lending decisions, or generalized AI/ML model training. Limited Google identity information may be processed by service providers acting for HSBHAPG when necessary to provide authentication, hosting, infrastructure, security, technical support, fraud prevention, or another user-facing HSBHAPG function, subject to applicable confidentiality, security, contractual, and legal restrictions. HSBHAPG may also disclose information when required by applicable law, valid legal process, or where reasonably necessary to protect rights, safety, security, or prevent fraud or abuse.
15. GOOGLE API SERVICES USER DATA POLICY / LIMITED USE
HSBHAPG's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. HSBHAPG limits its use of Google user data to the authentication, account, security, and user-facing purposes expressly disclosed in this Privacy Policy. If HSBHAPG introduces a materially different Google integration or requests additional Google scopes in the future, HSBHAPG will update the applicable privacy disclosures and obtain any additional authorization or consent required before using Google user data for that materially different purpose.
16. Information Collected Automatically, Audit Trails, and Electronic Signatures
When you use HSBHAPG websites or authenticated services, HSBHAPG and its infrastructure providers may process technical and security information such as IP address, browser or device information, user agent, timestamps, session and authentication information, access events, security events, and similar information needed to operate, protect, diagnose, audit, and secure the service. HSBHAPG workflows may preserve append-only or immutable audit histories for material compliance, inspection, safeguarding, employment, payment, document, authorization, and account events. Where a document is electronically executed, records may include the signer's name, signature or initials, authenticated account, date/time, document/version identifiers, consent or acknowledgement text, IP address and user agent where legally permitted, and integrity evidence such as document hashes. Cookies, session technologies, or similar technologies may be used for authentication, security, preferences, functionality, analytics, and website operation.
17. How HSBHAPG Uses Personal Information
HSBHAPG uses personal information as appropriate to the relevant relationship to provide and administer requested services; create and secure accounts; evaluate applications; conduct intake, onboarding, verification, screening, placement, inspection, training, well-being, membership, enterprise, personnel, safety, payment, and compliance workflows; communicate with users; coordinate authorized care and placements; protect children, families, au pairs, personnel, and households; respond to safety concerns; prevent fraud or misuse; maintain business and audit records; administer contracts and working relationships; improve and secure our services; and comply with applicable legal or regulatory obligations. Sensitive information is not used merely because it is available; its use should be tied to an authorized HSBHAPG purpose.
18. How HSBHAPG Shares or Discloses Information
HSBHAPG may disclose information to authorized HSBHAPG personnel or service participants when their role requires the information to perform an authorized function. Depending on the service, information may also be processed by vendors or professional service providers supporting hosting, authentication, communications, payment or payout processing, background screening, identity or work-authorization verification, document processing, training, scheduling, security, legal or compliance functions, and other infrastructure necessary to operate the requested service. For a placement, temporary-continuity assignment, inspection, or emergency/safety workflow, minimum-necessary information may be disclosed to the authorized family, assigned professional, inspector, liaison, guardian, enterprise representative, or other authorized participant whose duties require it. HSBHAPG may disclose information when required by applicable law, court order, legal process, or governmental request, or when reasonably necessary to protect rights, safety, security, children, users, or the integrity of HSBHAPG services. HSBHAPG does not sell Google user data.
19. Role-Based Access and Sensitive Information
HSBHAPG operates multiple role-specific portals and workflows. Information is intended to be made available according to authorization, assignment, and operational need. For example, confidential well-being notes, background-screening details, private-residence inspection evidence, child information, workforce records, and immigration records may have more restrictive access than ordinary account information. HSBHAPG uses administrative, technical, and organizational safeguards designed to reduce unauthorized access, disclosure, alteration, loss, or misuse. No electronic system can be guaranteed completely secure.
20. Children’s Privacy and Authorized Submissions
HSBHAPG provides childcare and household-support services and therefore may process information concerning children when it is provided by a parent, legal guardian, authorized household representative, assigned caregiver acting within an authorized service, or another party with appropriate authority, or when otherwise lawfully required. Depending on the service, child records may include identity and age, photographs, education and routines, developmental observations, allergies, medication and medical information, behavioral-health or disability-related information, safeguarding or incident information, emergency instructions, authorized adults, care reports, schedules, and—only for activated GuardianLink functionality—device/location and Safe Zone information. HSBHAPG's general account and Google authentication services are not intended to invite children to independently create accounts and provide sensitive information without appropriate authorization. Child information is used for legitimate care, placement, safety, accessibility, behavioral-support, continuity, emergency, operational, or legal purposes associated with the requested service and is subject to role-based access.
21. Data Retention and Deletion
HSBHAPG retains personal information for the period reasonably necessary for the purpose for which it was collected and for applicable contractual, safety, safeguarding, dispute-resolution, audit, employment, tax, regulatory, or legal obligations. Retention periods vary by record type and relationship. Some records may need to be preserved after an account or placement ends, including records necessary to establish what occurred, meet safeguarding obligations, preserve authorized audit history, or comply with law. When information no longer needs to be retained, HSBHAPG may delete, de-identify, or securely dispose of it consistent with applicable requirements.
22. Access, Correction, Account Disconnection, and Privacy Requests
Depending on applicable law and the nature of the record, you may have rights to request access to, correction of, deletion of, restriction of, or other action concerning your personal information. HSBHAPG may need to verify your identity and may deny or limit a request where information must be retained for legal, contractual, employment, safety, safeguarding, fraud-prevention, dispute-resolution, or compliance reasons, or where the rights of another person must be protected. Google users may revoke HSBHAPG's Google connection through their Google Account controls. Revoking Google access prevents future access under that authorization but does not automatically delete information already maintained in an HSBHAPG account or records. A separate deletion request may be submitted to HSBHAPG.
23. International Processing
HSBHAPG operates in an international service environment. Information may be processed in a jurisdiction other than the one in which it was collected when necessary for authorized services, placement, travel, personnel administration, infrastructure, security, or legal compliance. HSBHAPG seeks to handle cross-border processing in accordance with applicable requirements and the sensitivity of the information involved.
24. Third-Party Services
HSBHAPG services may use or link to independent third-party services. Those organizations may maintain their own privacy policies and legal obligations. This Privacy Policy describes HSBHAPG's practices and does not replace an independent third party's policy. Users should review relevant third-party terms and privacy notices when interacting directly with those services.
25. Changes to This Privacy Policy
HSBHAPG may update this Privacy Policy when our services, technology, legal obligations, or information practices change. The current version will be posted on this dedicated page and identified by its Last Updated date. If HSBHAPG materially changes how Google user data is used, we will update our disclosures and obtain any consent required by Google policy or applicable law before using that Google user data for the materially different purpose.
26. Public-Source and Lead Intelligence Information
HSBHAPG systems include a business-development and lead-intelligence function that may collect or organize information from public or professional sources concerning prospective households, principals, organizations, public figures, family offices, companies, representatives, publicly announced family or life events, professional roles, publicly reported wealth bands, and legitimate public professional contact routes. The system is designed to preserve source provenance, distinguish verified from unverified intelligence, avoid fabricating private contact details, protect existing HSBHAPG families, and respect do-not-contact controls. Public-source intelligence is not treated as information supplied by Google Sign-In and is not obtained from a user's Google account through the current OAuth integration.
27. Communications, Correspondence, Support, and Portal Messages
HSBHAPG may process messages and correspondence exchanged through its portals or related workflows, including EPA-family communications, applicant messages, support tickets, notifications, executive correspondence preparation, consultation records, meeting or follow-up records, and service-related email or text delivery status where configured. Communications may contain personal or sensitive information depending on what the sender chooses or is authorized to provide. Access is restricted according to the applicable account, assignment, role, or case.
28. Training, Assessments, Applications, and Professional Development
HSBHAPG may process training enrollments, module progress, assessment questions served, answers submitted, scores, attempts, remediation requirements, certifications, course completion, readiness status, interview information, recruiter assessments, application materials, references, resumes, videos, professional profiles, and related review records for Au Pairs, EPAs, PIs, Well-Being Liaisons, employees, and other applicants or personnel. Some assessment records are intentionally restricted so answer keys, internal scoring logic, or confidential reviewer notes are not exposed to applicants.
29. Continuity, Temporary Coverage, and Placement Operations
Where HSBHAPG continuity or temporary-coverage services are used, HSBHAPG may process family and placement identifiers, child-care requirements, professional qualifications and availability, travel readiness, prior family familiarity, event or coverage reasons, schedules, handoff briefings, emergency contacts, family approvals, professional acknowledgements, temporary-access periods, and return or handback records. Handoff information may include sensitive child-care, allergy, medication, behavioral, sensory, emergency, security, or household information where authorized and necessary for the temporary professional to perform the assignment safely.
30. Enterprise and Organizational Services
For corporate, studio, educational, institutional, estate, and other enterprise relationships, HSBHAPG may process organization identity, industry, website, locations, representatives and authorized users, billing and membership records, service requests, placement information, documents, incident reports, support communications, and internal investigation or resolution records. Access to enterprise records is limited according to the user's authorized organization role and HSBHAPG administrative permissions.
31. Sensitive Reports, Safeguarding, Incidents, and Internal Notes
HSBHAPG systems may contain safeguarding reports, incident reports, concern or escalation records, confidential disclosures, internal notes, investigation notes, risk or compliance flags, and supporting evidence. These records can include information about children, families, personnel, witnesses, injuries, behaviors, safety conditions, allegations, or emergency events. HSBHAPG restricts these records according to role, case, assignment, and legitimate operational need and may preserve them when necessary for safeguarding, legal compliance, dispute resolution, or the protection of individuals.
32. Contact HSBHAPG
Questions, privacy requests, account-deletion requests, or concerns about this Privacy Policy or HSBHAPG's data practices may be submitted to Heavens Spectrum and Behavioral Health Au Pairs Global (HSBHAPG) at concierge@hsbhapg.com, by telephone at +1 (636) 492-2185, or through the official contact page at https://hsbhapg.com/contact. Please provide enough information for HSBHAPG to verify the request and identify the relevant account or record without sending passwords, OAuth client secrets, full payment credentials, or other unnecessary credentials.
Heavens Spectrum and Behavioral Health Au Pairs Global · HSBHAPG
Official Website: https://hsbhapg.com