Privacy Policy
HighRater AI · Last updated: June 21, 2026
This Privacy Policy explains how HighRater AI ("we," "us," "our") collects, uses, shares, and protects information when you use our website and Service.
1. Information We Collect
1.1 Information you provide directly: - Business name, contact name, email address, and phone number - Payment and billing information (processed by our payment provider, not stored directly by us — see Section 3) - Login credentials for your HighRater AI account - Connected account details for third-party platforms you authorize (e.g., Google Business Profile, Facebook Page, WhatsApp Business number)
1.2 Information collected through use of the Service: - Customer review content from platforms you connect (e.g., Google, Facebook, Yelp), including review text, star ratings, and reviewer names where publicly available - Customer responses to feedback survey messages (e.g., satisfaction scores, free-text feedback) - AI-generated response drafts and published responses - Usage data such as login activity, feature usage, and dashboard interactions
1.3 Information from your customers. Where you use our customer feedback system, your customers' phone numbers (or other contact details you supply) and their survey responses are processed by the Service on your behalf. You are responsible for ensuring you have the right to share this information with us — see Section 4 of our Terms of Service.
2. How We Use Information
We use collected information to:
- Provide, operate, and maintain the Service (including generating AI review responses and running the customer feedback workflow)
- Process subscription payments and manage your account
- Communicate with you about your account, including service updates, billing notices, and support
- Monitor and improve the Service's performance and reliability
- Comply with legal obligations
We do not sell your data or your customers' data to third parties.
3. How We Share Information
We share information only as necessary to operate the Service, with the following categories of providers:
| Provider | Purpose | What's Shared |
|---|---|---|
| Payment processor (merchant of record) | Payment processing and billing | Billing name, email, payment details |
| Banking partner | Receiving business payouts | Transaction-level financial data (does not include your customer review content) |
| Anthropic (Claude API) | Generating AI review responses | Review text and relevant business context needed to draft a response |
| Supabase | Database hosting and account authentication | Account data, review history, feedback records |
| Meta / WhatsApp Business Platform | Sending feedback survey messages | Customer phone numbers and message content, where you've connected this feature |
| Google, Facebook, Yelp | Reading and posting reviews on your behalf | Review content, business profile data, authentication tokens you grant us |
We require these providers to handle data securely and only for the purposes described above. We do not control their independent privacy practices, and we encourage you to review their own privacy policies.
We may also disclose information if required by law, to protect our legal rights, or in connection with a business transfer (e.g., merger or acquisition), in which case we will notify affected Clients.
4. Data Storage & Location
Account and review data is stored using Supabase, with data hosted on cloud infrastructure. AI processing of review content occurs via Anthropic's API, which processes data to generate a response and does not use Client data to train its models. We take reasonable technical and organizational measures to protect data in transit and at rest, including encryption.
By using the Service, you consent to the transfer and processing of your data on cloud infrastructure, where data protection laws may differ from those in your own country or jurisdiction. For users in the UK and EU, we process data in accordance with applicable data protection regulations including UK GDPR and GDPR where applicable.
5. Data Retention
- Active accounts: We retain your data for as long as your account remains active.
- Cancelled accounts: Following cancellation, we retain account and review data for 90 days, in case you wish to reactivate your account, after which it is permanently deleted unless you request earlier deletion (see Section 6) or we are required to retain it longer for legal or accounting purposes (e.g., billing records).
- Customer survey data collected via the customer feedback system is retained for the same period and is deleted on the same schedule.
6. Your Rights
You may, at any time:
- Request access to the personal data we hold about your account
- Request correction of inaccurate data
- Request deletion of your data, subject to legal retention requirements (e.g., financial records)
- Export your review and response history
- Withdraw consent for specific data processing, where applicable
To exercise these rights, email hello@highrater.com. We will respond within 30 days.
If your business operates in a jurisdiction with specific data protection laws (e.g., the California Consumer Privacy Act), you may have additional rights under that law, and we will honor applicable requests accordingly.
7. Cookies
Our website uses cookies and similar technologies to keep you logged in, remember preferences, and understand how visitors use our site. You can control cookies through your browser settings; disabling them may affect site functionality.
8. Children's Privacy
The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to active Clients by email at least 14 days before taking effect.
10. Contact
Questions about this Privacy Policy or your data can be sent to hello@highrater.com.
Questions about this policy?
Email hello@highrater.com