Privacy policy

Higginbotham Media (“we”, “us”) respects your privacy. This page explains what information we collect when you visit this website, how we use it, and the choices you have.

Information we collect

• Contact form data — the name, email, phone (if provided), property address or preferred date (if provided), service, and message you submit are stored in our inquiry queue and emailed to Tracey through our email provider. We keep an inquiry while it is needed to respond and manage the resulting client relationship, and remove it earlier when you ask unless the law requires otherwise.
• Newsletter email — if you subscribe to the newsletter, your email address is stored by our email provider (Resend) for the sole purpose of sending occasional updates. You can unsubscribe at any time from any email we send.
• Analytics — we count page views to understand which pages are useful. Neither counter uses cookies, follows you across other websites, or feeds advertising. Our own counter records the page, the site that referred you, an approximate location, and a device type (mobile, tablet, or desktop) against a one-way hash of your IP address that changes every day — we do not store the address itself. GoatCounter, an independent privacy-focused service, counts views of our public pages only. It does not run on the booking, sign-in, account, or client gallery pages.

AI clients and MCP connections

Higginbotham Media offers a public Model Context Protocol (MCP) endpoint that compatible AI clients can use to read our published services, pricing factors, studio information, and appointment availability. The public tools accept a service identifier and a requested date. They do not request your name, account details, property address, precise location, payment information, gallery passcode, or property access code.

The AI service you choose sends those tool inputs to us and receives the tool result. We use them only to answer the request and protect the service from abuse. Successful public MCP inputs and results are not saved in our application database after the response. A transient per-IP rate-limit key expires within 10 minutes. Our hosting provider may process ordinary request and security metadata under its own operational retention settings.

A separate account connection is available only after you sign in here and approve it. Depending on the action you request, it can share your name and email, bookings and property addresses, gallery links, loyalty status, and referral information with the AI service, or create, reschedule, update, and cancel bookings. MCP tools reject and redact property gate and lockbox codes. Authorization codes expire within 10 minutes; access tokens within one hour; and rotating refresh tokens within 30 days. OAuth codes and refresh tokens are stored only as one-way hashes and expired records are purged.

Service providers and recipients

We disclose information only as needed to operate the requested workflow. Recipients can include the AI service you connect, our website hosting and database providers, Resend for email delivery, Google for calendar and route processing, Cloudflare Turnstile for spam protection on forms, and OpenStreetMap’s Nominatim service when an address needs fallback geocoding. Booking actions may also update our QuickBooks and Gate.Codes systems. Each provider processes information under its own terms and privacy policy.

Client gallery portal

Client galleries, bookings, orders, rewards, referrals, and accounts are handled on this site and secured behind a login. We keep these records while the account is active and afterward when needed to deliver work, maintain business and tax records, prevent fraud, or meet legal obligations. You may ask to access, correct, or delete your data, or disconnect an AI client, by contacting Tracey. Some transaction records may need to be retained after an account is removed.

Property websites

Some listings we photograph have their own website on a hig.media address, published by the listing agent. If you send an inquiry through the form on one of those sites, your name, email address, phone number and message are stored by us and emailed to that agent so they can answer you. The agent is responsible for how they use your details after that. We do not add you to a mailing list. To have an inquiry removed from our records, contact Tracey.

Contact

Questions about this policy? Email tracey@higginbothammedia.com.

Last updated: October 2026.