California residents: If you are a California resident, please read the Notice to California Residents below in addition to this Privacy Policy. It includes important information about the personal information we collect and your privacy rights.
UK users: If you are located in the United Kingdom ("UK"), please read the Notice to UK Users below in addition to this Privacy Policy. It includes important information about your personal information and your privacy rights.
This Privacy Policy explains how Highchat LLC (the company behind Highchat) ("Highchat LLC," "we," "us," or "our") collects, uses, shares, and otherwise processes personal information when you use our products and services that link to this Privacy Policy (collectively, the "Service").
The "Service" includes, as applicable, our mobile application (Highchat), websites, social media pages, marketing activities, live events, and other online or offline activities described in this Privacy Policy.
Index
Personal information we collect
"Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) with you.
We collect personal information in three main ways: (1) information you provide to us, (2) information we collect automatically when you use Highchat, and (3) information we receive from others.
Information you provide to us
Account and school verification information
When you create an account or use features that require verification, we may collect:
- Age or birth year.
- School selection (for example, the high school community you're trying to access).
- School-issued email address (your "Verified School Email") and information needed to verify it.
- Phone number (if you choose to provide one) for account verification, security, and other operational communications (such as login/security messages or important account updates).
- Account information (including age). When you create a Highchat account, we ask for account details like your school email address and your date of birth. We use your date of birth to help confirm you meet our age requirements and to help keep Highchat safe.
Communications with us
We collect information you provide when you contact us or communicate with us, such as:
- Messages you send to support.
- Reports you submit about content or users.
- Communications through our social media pages or other channels.
Content you create or share on Highchat
We collect the content and information you submit through the Service, including:
- Posts, comments, replies, reactions, and other community interactions.
- Photos, images, videos, and any text you include with them.
- Any information you provide in connection with that content (for example, captions, hashtags, or other context you add).
We also collect metadata associated with content and activity. Metadata is information about how content is created and used—such as the date/time a post was made, the school community where it was posted, and technical details about the content or how it was submitted.
Other information you choose to provide
You may choose to provide other information not explicitly listed above (for example, feedback, survey responses, or beta-test information). If you do, we will use it as described in this Privacy Policy or as described at the time we collect it.
Third-party sources
We may aggregate and/or combine the personal information we collect directly from you with personal information within the categories described above that we obtain from third-party sources, including third-party services that you use to authenticate, sign in to, or otherwise link to your Service account. Such information may include, without limitation, your email address and other account-related details associated with your profile on the applicable third-party service that are provided to us in accordance with your settings and permissions on that service.
Information we collect automatically
When you use Highchat, our service providers and we automatically collect certain information about your device and your use of the Service, such as:
Device and network information
- Device type (phone/tablet), manufacturer/model, operating system version, language settings.
- IP address and network information (carrier, Wi-Fi/LTE/3G, and similar connection details).
- Device identifiers and app-related identifiers (such as device IDs, push notification tokens, and similar identifiers used for security, integrity, and service operations).
Usage and interaction information
- The screens and features you use, actions you take (such as posting, reacting, reporting), timestamps, and basic interaction patterns.
- Approximate location information (for example, general city/region), which we may derive from IP address or similar signals.
Log, diagnostics, and performance information
Crash reports, error logs, performance data, and similar diagnostic information to help us maintain and improve the Service and keep it safe.
Location information (if you choose to enable it)
If you allow Highchat to access your device location through your device permissions, we may collect precise geolocation information. You can control location permissions through your device settings.
Cookies and similar technologies (primarily for websites and communications)
If we operate websites or send emails that interact with the Service, we (and our service providers) may use cookies, SDKs, pixel tags, and similar technologies to understand usage and improve communications. Where required by law, we will offer choices about these technologies.
Information we receive from others
Reports and safety signals from other users
Other users may report content, accounts, or behavior. When that happens, we may receive information included in the report (for example, the content at issue, the reason for the report, and related context).
Platform and service providers
We may receive information from third parties that help us operate the Service, such as:
- App stores and platform providers (for example, Apple or Google) are involved in distributing the app and providing platform-level services.
- Vendors and service providers that help with hosting, security, analytics, customer support, and fraud/abuse prevention.
Information we create or infer
We may generate information about you based on your activity to operate and protect the Service—for example, risk or integrity signals used to prevent spam, abuse, or suspicious activity.
Combining information
We may combine information from the sources described above for the purposes described in this Privacy Policy.
How we use your personal information
We use personal information for the purposes described below (or as otherwise explained to you at the time we collect it). Because Highchat is an anonymous, school-based community, we also use information to help keep school communities safer and to prevent abuse. We currently do not run ads in Highchat, and we do not use your personal information to show you targeted ads.
Service delivery and operations
We use personal information to provide and operate the Service, including to:
- Create and manage your account, verify eligibility, and help control access to features (including School Feeds that require a Verified School Email).
- Provide core functionality (posting, commenting, interacting, reporting, and viewing content) and maintain your settings and preferences.
- Remember devices you've used to log in and support account security (for example, device-based security checks and login controls).
- Send operational communications, such as account verification codes, security alerts, and important notices.
- Provide customer support and respond to your requests, questions, feedback, and reports.
Communications
We use your information to communicate with you about the Service, including:
- Sending SMS messages if you provide a phone number (for account verification, security, and other operational communications).
- Communicating by email (including your Verified School Email, if applicable), push notifications, and in-app messages.
- Delivering non-marketing messages you can't opt out of, such as security alerts and legal notices.
Safety, integrity, and moderation
Highchat is organized around high schools, and posts may be fast-moving and unverified. We use personal information to help keep the Service safe and to protect users and school communities, including to:
- Enforce our Terms of Service and Community Guidelines.
- Review content and account activity in response to reports, complaints, or suspected violations (including reviewing reported content, related metadata, and surrounding context).
- Detect, prevent, investigate, and address spam, harassment, threats, doxxing, exploitation, and other misuse using automated and manual tools (including device- and IP-based controls where appropriate).
- Take action when needed, such as removing content, limiting visibility, issuing warnings, restricting features, or suspending/terminating accounts.
Research, development, and analytics
We use personal information to understand how the Service is used and to improve it, including to:
- Analyze usage trends, feature performance, and community health.
- Debug, diagnose crashes, and improve reliability and security.
- Develop new features and improve existing ones.
Compliance, legal process, and protection
We use personal information to comply with the law and to protect rights and safety, including to:
- Comply with applicable laws and respond to lawful requests and legal process (such as subpoenas or court orders).
- Enforce our Terms of Service and Community Guidelines and address claims that content violates others' rights (including privacy and safety claims).
- Protect the rights, property, and safety of Highchat LLC, our users (including school communities), or the public.
- (In limited situations) disclose limited information to appropriate school officials when we believe, in good faith, it is reasonably necessary to address imminent/credible safety threats, emergencies, serious illegal activity connected to a school community, or to comply with the law or valid legal process.
With your consent
In some cases, we may ask for your consent to collect, use, or share personal information—for example, when required by law or when you enable optional features such as device-location access.
Aggregated, de-identified, or anonymized data
We may create aggregated, de-identified, and/or anonymized data from personal information and other data we collect. We may use and share this data for lawful business purposes, such as improving the Service and understanding how the Service is used.
Retention
We keep personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service and maintain safety and integrity. We may also retain certain information as needed for legal compliance, security, fraud prevention, safety investigations, dispute resolution, or enforcement.
When we no longer need personal information, we take steps to delete it, de-identify/anonymize it, or isolate it from further processing, consistent with our retention practices and applicable law.
Your choices
This section describes choices available to all users. If you are located in California, other U.S. states, or the United Kingdom, you may have additional rights described in the Notice to California Residents, Notice to Residents of Other U.S. States, and Notice to UK Users sections below.
Access, correct, or update your information
You can review and update certain account information through the in-app settings (for example, changing specific profile settings or preferences). Some information—such as your school community or school email verification status—may be limited or require re-verification to change.
Device permissions
Location (precise geolocation)
If you previously allowed Highchat to access your device's location, you can turn that off in your device settings at any time.
Push notifications
You can control push notifications through your device settings. Some important messages (such as security or legal notices) may still be delivered in-app or via other means.
Communications preferences
If you provide a phone number, we may send SMS messages for verification, security, and other operational communications. You can control certain messages through your device settings, carrier tools, or by contacting us, but some messages may be necessary to provide the Service (for example, login/security codes).
If you use a school-issued email address for verification, note that your school or its IT provider may monitor messages sent to or from that address.
Cookies and similar technologies
We may use cookies, SDKs, pixels, and similar technologies on our websites or in our communications where applicable. The Cookie Notice will explain how these technologies work and how you can manage choices, including any legally required consent options.
Declining to provide information
Some information is required to provide key features—for example, to access a School Feed that requires a Verified School Email. If you choose not to provide the necessary information, we may not be able to provide those features.
Delete content and account options
You may be able to delete certain content or manage content visibility through in-app tools. You may also request to close your account through the app (if available) or by contacting us using the information in the "How to contact us" section.
Important: Because Highchat content can be copied or screenshotted by others, deleting content in Highchat may not remove copies that others have saved or re-posted elsewhere.
"Do Not Track"
Some browsers send "Do Not Track" signals. Highchat currently does not respond to "Do Not Track" signals.
Linked third-party platforms
If you elect to access or connect to the Service through a third-party platform, you may be able to manage or restrict the information shared with us by adjusting the privacy or account settings on that platform. Please note that revoking or terminating our access to information from a third-party platform will not affect information previously received by us from such third party, which we may retain and use in accordance with this Privacy Policy and applicable law.
Other sites and services
Highchat may include links to third-party websites, mobile apps, or other online services (for example, a link shared in a post or a link to a help page or resource). We may also make content available in ways that allow it to appear on third-party services (for example, if someone shares or embeds Highchat content elsewhere).
These third-party services are not owned or controlled by Highchat LLC. A link or integration does not mean we endorse the third party or are affiliated with them. We are not responsible for the privacy practices or actions of third parties.
If you click a third-party link or use a third-party service, you should review that service's privacy policy and terms.
Security
We use a combination of technical, organizational, and physical safeguards designed to protect the personal information we collect and maintain the security of the Service.
That said, no system can be guaranteed to be 100% secure. Security risks are inherent in the internet and in information technologies, and we cannot guarantee the absolute security of personal information.
Also, remember that content you post on Highchat may be visible to others in your school community (and may be copied or screenshotted by other users).
International data transfers
Highchat LLC is headquartered in the United States, and we may use service providers and infrastructure that process information in the United States and other countries.
As a result, your personal information may be transferred to, stored in, or processed in the United States or other locations where privacy laws may differ from (and may be less protective than) the laws in your state, province, or country.
If you are located in the United Kingdom, please also review the Notice to UK Users below for important information about transfers of personal data outside the UK.
Children
Highchat is not intended for use by children under 13.
If you are under 13, do not use Highchat or provide personal information to us.
If you are a parent or guardian and believe that a child under 13 has provided us with personal information, please contact us using the information in the "How to contact us" section.
If we learn that we collected personal information from a child under 13 in a manner that is not permitted by law, we will take appropriate steps to comply with legal requirements—such as disabling the account and deleting or de-identifying the information, subject to limited retention where required or permitted for legal compliance, security, fraud prevention, or safety investigations.
Age Requirements and Our Audience
Highchat is for people ages 13 and older. Our Service is designed for high school communities and is intended for individuals who are 13+.
Age confirmation. To create an account and use Highchat, you must confirm that you are at least 13 years old. If the law where you live requires that you be older than 13 to use Highchat without a parent or guardian's permission, you must meet that higher minimum age (or have a parent/guardian's permission where required by law).
No under-13 use. Highchat is not directed to children under 13, and children under 13 must not use the Service or provide personal information to us.
If we learn someone is underage. If we have actual knowledge that a user is under 13 (or under the minimum age required in their location to use Highchat without parent/guardian permission), we will stop providing the Service to that user and take steps to deactivate the account and delete or de-identify the user's personal information, subject to limited retention where required or permitted for legal compliance, security, fraud prevention, or safety investigations. (This is consistent with your current deletion language, but makes it clearer and closer to your requested item.)
Parents/guardians. If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact us.
Teen users (under 18). Many Highchat users are teenagers. If you are under 18, we may apply additional safeguards designed to support safety and integrity on Highchat. Depending on your age and how you use Highchat, this may include limiting how we collect, use, or store certain information (for example, restricting collection of optional data unless you choose to provide it) and/or limiting or changing access to certain features. In some cases, this means we may be unable to provide certain functionality to users under 18, or a feature may work differently for teen accounts.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
If we make changes, we will revise the "Last updated" date at the top of this Privacy Policy and post the updated version through the Service. If we make material changes, we will also provide notice through the Service or by other appropriate means (for example, in-app notice or email).
Unless we say otherwise, changes are effective when we post the updated Privacy Policy. By continuing to use Highchat after the effective date, you acknowledge that the revised Privacy Policy applies to your use of the Service.
How to contact us
If you have questions about this Privacy Policy or our privacy practices, or if you want to submit a privacy request, you can contact us:
Contact Information
Email: support@highchat.app
Mail: Highchat LLC, 1621 CENTRAL AVE #59708 CHEYENNE, WY 82001, UNITED STATES OF AMERICA
Phone: To be determined
If you are contacting us about a possible under-13 user, please include any details you have that can help us locate the account (for example, the school community, username (if applicable), and approximate dates of use).
Notice to California Residents
This Notice describes how Highchat LLC (the company behind Highchat) collects, uses, and discloses personal information of California residents in our capacity as a "business" under the California Consumer Privacy Act, as amended (the "CCPA"), and explains the rights California residents have with respect to their personal information.
For purposes of this Notice, "personal information" and "sensitive personal information" have the meanings given in the CCPA and do not include information that is exempt from the scope of the CCPA.
Your privacy rights (California)
Subject to certain exceptions, as a California resident, you have the right to:
- Right to know: Request information about:
- the categories of personal information we collected about you;
- the categories of sources from which we collected it;
- the business or commercial purposes for collecting, using, disclosing, and/or sharing it; and
- the categories of third parties to whom we disclosed it.
- Right to access: Request a copy of certain personal information we maintain about you.
- Right to deletion: Request that we delete personal information we collected from you.
- Right to correction: Request that we correct inaccurate personal information.
- Right to opt out of sale/sharing: Direct a business that sells or shares personal information to stop selling or sharing it.
- Right to limit certain uses/disclosures of sensitive personal information: In some instances, you may direct a business to limit its use/disclosure of sensitive personal information.
- Right to non-discrimination: You have the right to exercise your CCPA rights free from discrimination prohibited by the CCPA.
How to exercise your rights
You (or your authorized agent) can submit a request by:
- Email: support@highchat.app
- In-app (if available): Settings → Privacy → "California Privacy Requests" (or similar)
Please include enough information for us to understand what you are requesting (for example, the school community associated with your account, and the email/phone number you used for verification, if applicable).
Identity verification
To protect your privacy and security, we must verify your identity before processing certain requests (such as requests to know, access, delete, or correct). Depending on your request and our relationship with you, we may verify your identity by requiring you to:
- log in to your account (if you have one);
- confirm access to the email address and/or phone number associated with the account; and/or
- provide other information we can match to the information we have on file.
If we cannot verify your identity (or confirm you are a California resident when required), we may not be able to fulfill your request.
Authorized agents
If you use an authorized agent to submit a request on your behalf, we may require:
- proof that the agent is authorized to act for you (for example, a valid power of attorney under California law or other written permission), and
- verification of your identity (directly with you) and/or verification of the agent's identity, as permitted by law.
Information practices (past 12 months)
Sources and purposes
We collect personal information from the sources described in the "Personal information we collect" section above and use it for the business and commercial purposes delineated in the "How we use your personal information" section above.
Sale and sharing of personal information
Highchat currently does not run ads, and we do not "sell" personal information for money.
We also do not "share" personal information for cross-context behavioral advertising (as defined in the CCPA).
If our practices change in the future in a way that constitutes a "sale" or "sharing" under the CCPA, we will update this Privacy Policy and provide any required opt-out rights and mechanisms.
Sensitive personal information
Depending on how you use Highchat and what you post, we may collect sensitive personal information (for example, precise geolocation if you enable location permissions on your device).
We use and disclose sensitive personal information only as reasonably necessary to provide the Service, maintain security and integrity, and comply with the law. We do not use or disclose sensitive personal information for purposes that give California residents a right to limit under the CCPA.
Retention
We retain personal information for as long as reasonably necessary to provide the Service and for the other purposes described in this Privacy Policy, including complying with legal obligations, maintaining security and integrity, preventing fraud and abuse, and resolving disputes.
Deidentification
We do not attempt to reidentify deidentified information, except as permitted by law (for example, to test whether our deidentification processes comply with applicable law).
Collection and disclosure chart (CCPA categories)
The chart below describes the categories of personal information we collect (by reference to the categories listed in the CCPA) and the categories of third parties to whom we disclose it for business purposes. We may also disclose personal information to professional advisors, law enforcement/government authorities, and business transferees as described in the "How we share your personal information" section above.
| CCPA statutory category | Examples of personal information we collect | Categories of third parties we disclose to for business purposes |
|---|---|---|
| Identifiers | School-issued email address (for verification); phone number (if provided); internal account ID; IP address; device identifiers; push notification token | Service providers; professional advisors; law enforcement/government authorities; business transferees; school officials in limited safety/legal circumstances |
| Personal information described in Cal. Civ. Code § 1798.80 | Contact information such as email address and phone number (if provided) | Service providers; professional advisors; law enforcement/government authorities; business transferees; school officials in limited safety/legal circumstances |
| Protected classification characteristics | Age or birth year (as provided by you); any protected-class information you choose to include in content you post | Service providers; professional advisors; law enforcement/government authorities; business transferees; other users/the public (only if you include it in content you post) |
| Internet or other electronic network activity information | App and device/network usage data (e.g., interactions, timestamps, crash logs, diagnostics) | Service providers; professional advisors; law enforcement/government authorities; business transferees |
| Geolocation data | Approximate location derived from IP address; precise location if you enable device permissions | Service providers; professional advisors; law enforcement/government authorities; business transferees; school officials in limited safety/legal circumstances |
| Audio/visual/electronic information | Photos, images, videos, and other content you post; associated metadata (e.g., time posted, school community) | Service providers; professional advisors; law enforcement/government authorities; business transferees; other users/the public (for content you post that is visible in the Service) |
| Education information (non-public) | School selection; Verified School Email verification status; school community associated with your account | Service providers; professional advisors; law enforcement/government authorities; business transferees; school officials in limited safety/legal circumstances |
| Inferences | Inferences drawn from usage patterns or safety/integrity signals (e.g., suspected spam/abuse indicators) | Service providers; professional advisors; law enforcement/government authorities; business transferees |
| Sensitive personal information | Precise geolocation (if enabled); content you post that may reveal sensitive details (you are not required to provide this) | Service providers; professional advisors; law enforcement/government authorities; business transferees; school officials in limited safety/legal circumstances |
Notice to residents of other U.S. states
If you are a California resident, please see Notice to California Residents above.
If you are a resident of another U.S. state, depending on where you live and subject to certain exceptions, you may have some or all of the rights described below with respect to personal information we process about you. These rights are not absolute, and we may deny certain requests as permitted by law (including if you live in a state that does not currently provide these rights).
Your state privacy rights (may vary by state)
Depending on your state of residence, you may have the right to:
- Access / confirm processing: Request that we confirm whether we process personal information about you and provide access to that information. In some states, this includes receiving the information in a portable format.
- Delete: Request that we delete personal information we maintain about you.
- Correct: Request that we correct inaccurate personal information we maintain about you.
- Opt out of certain processing: Opt out of certain processing of personal information, such as:
- Targeted advertising (as defined by applicable state law),
- Sale of personal information (as defined by applicable state law), and/or
- Profiling in furtherance of decisions that produce legal or similarly significant effects (in states where this right applies).
Targeted advertising and sale
Highchat currently does not run ads, and we do not process personal information for targeted advertising as that term is used in certain state privacy laws.
We also do not sell personal information for money. In addition, based on our current practices, we do not "sell" personal information as defined under many state privacy laws. If our practices change, we will update this Privacy Policy and provide any required opt-out mechanisms.
How to submit a request
To exercise applicable rights, contact us using the information in the "How to contact us" section above, and include:
- the state where you live, and
- enough information to let us understand and respond to your request.
Identity verification
To protect your privacy and security, we may need to verify your identity before processing your request. Depending on the nature of your request and our relationship with you, we may ask you to:
- log in to your account (if you have one),
- confirm access to the email address and/or phone number associated with your account, and/or
- provide other information we can match to the information we maintain.
We will limit any personal information we collect for verification to what is reasonably necessary to process your request securely.
Authorized agents
Where permitted by law, you may authorize an agent to submit a request on your behalf. We may require proof of the agent's authority (for example, a written authorization or power of attorney) and may also require you to verify your identity directly with us.
Appeals
If we deny your request and your state law provides an appeal right, you may appeal our decision by contacting us using the information in the "How to contact us" section above and stating that you are submitting an appeal. We will not charge a fee to submit an appeal.
Notice to UK users
Where this Notice applies
This "Notice to UK users" applies only to individuals located in the United Kingdom ("UK").
What "personal information" means
In the UK, "personal information" in this Privacy Policy is equivalent to "personal data" under UK data protection law. It includes information that identifies you, or that can reasonably be used to identify you. It does not include information that has been permanently de-identified (sometimes called "anonymous data").
Controller
Highchat LLC (the company behind Highchat) is the controller of your personal data covered by this Privacy Policy. See "How to contact us" above for our contact details.
UK representative
If UK data protection law requires us to appoint a UK representative, we will provide the representative's contact details here. (Insert if applicable.)
Legal bases for processing
UK data protection law requires us to have a "legal basis" for each purpose for which we use personal data. Depending on how you use Highchat and the feature involved, we rely on one or more of the following legal bases:
- Contractual necessity: processing is necessary to provide the Service to you under our Terms of Service (or to take steps you request before creating an account).
- Legitimate interests: processing is necessary for our legitimate interests (for example, keeping Highchat safe, preventing abuse, and improving the Service), and your rights do not override those interests.
- Compliance with law: processing is necessary to comply with our legal obligations.
- Consent: we ask for your consent for certain optional processing (for example, where you enable device permissions such as precise location).
Legal bases table (summary)
| Purpose | Examples of data used | Legal basis |
|---|---|---|
| Provide and operate Highchat | Account and verification info (school-issued email, phone number if provided, age/birth year), service usage info, content you post, support communications | Contractual necessity; Legitimate interests |
| Safety, integrity, moderation, and enforcement | Reports, device/network info, usage patterns, content and metadata, suspected abuse indicators | Legitimate interests; Compliance with law (where applicable) |
| Customer support and communications | Contact details, messages to support, operational notices, verification/security messages | Contractual necessity; Legitimate interests; Compliance with law (for required notices) |
| Analytics, debugging, and improvement | Device data, crash logs, usage and performance data | Legitimate interests |
| Location-based features (if enabled) | Precise geolocation (when you allow it), approximate location derived from IP | Consent (for precise location); Legitimate interests (for approximate location, security, and integrity) |
| Legal compliance and protection | Account records and logs, content and metadata needed for investigations, lawful requests | Compliance with law; Legitimate interests |
Using your data for new purposes
We may use your personal data for reasons not described in this Privacy Policy where permitted by law and where the new purpose is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis on which we rely.
Sensitive personal data (special category data)
Highchat is not designed for you to share sensitive personal data (also known as "special category" data) such as information about your health, biometrics, sexuality, political opinions, religion, or ethnic origin.
Please do not post sensitive personal data on Highchat. If you choose to include sensitive personal data in content you post, we will process it only as necessary to operate the Service and maintain safety and integrity, and only where an appropriate legal basis and condition under UK law applies (for example, where you have made it public, where needed for legal claims, or where we have your explicit consent when required).
No obligation to provide personal data
You do not have to provide personal data to us. However, if you do not provide information needed to provide key features (for example, school email verification for a School Feed), we may not be able to provide those features.
Automated decision-making
We do not use automated decision-making (including profiling) that produces legal or similarly significant effects for you. We may use automated tools to help detect spam, fraud, or harmful activity and to support moderation. Still, we do not make decisions of legal or similarly significant effect solely by automated means. If this changes, we will update this Privacy Policy.
Your UK data protection rights
UK data protection law gives you certain rights regarding your personal data. Depending on the circumstances, you may ask us to:
- Access your personal data and receive information about how we use it.
- Correct inaccurate or incomplete personal data.
- Delete your personal data (in certain circumstances).
- Restrict our processing of your personal data (in certain circumstances).
- Object to our processing (where we rely on legitimate interests).
- Data portability (in certain circumstances).
- Withdraw consent at any time (where we rely on consent). Withdrawing consent does not affect the lawfulness of processing before you withdraw it.
Some rights are subject to limitations and exceptions. If we decline your request, we will explain why (subject to legal restrictions).
How to exercise your rights
To exercise your rights, contact us using the details in "How to contact us" above. We may request information needed to verify your identity and process your request securely.
We generally respond within one month, but it may take longer if your request is complex or if you make multiple requests; if so, we will keep you informed. We generally do not charge a fee, but we may charge a reasonable fee (or refuse to act) if a request is clearly unfounded, repetitive, or excessive.
Complaints
We encourage you to contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
Children in the UK
Under UK law, children can generally consent to the processing of their personal data in the context of an "information society service" at age 13. Highchat is not intended for children under 13.
Cross-border data transfers
We are headquartered in the United States and may use service providers in the United States and other countries. This means your personal data may be transferred outside the UK.
Where UK transfer rules apply, we use appropriate safeguards. Depending on the recipient and the circumstances, this may include:
- relying on the UK–US Data Bridge for transfers to US organizations certified under the relevant framework; and/or
- using approved transfer mechanisms such as the International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses, as appropriate.
You can request more information about the transfer safeguards we use by contacting us using the details in "How to contact us" above.
Cookie Notice
Notice last updated: January 14, 2026
This Cookie Notice explains how Highchat LLC (the company behind Highchat) ("Highchat LLC," "we," "us," or "our") uses cookies and similar technologies in connection with:
- any website we own or control that posts or links to this Cookie Notice (collectively, the "Sites"); and
- the Highchat mobile application (the "App").
What are cookies?
Cookies are small data files that a website stores on your device when you visit the website. Cookies can help websites function properly, remember preferences, and understand how a site is being used.
Cookies can be:
- Session cookies, which expire when you close your browser; or
- Persistent cookies, which remain on your device until they expire or you delete them.
We may use first-party cookies (set by us) and third-party cookies (set by service providers we use).
Similar technologies (beyond cookies)
In addition to cookies, we may use similar technologies on our Sites or in the App, such as:
- Browser web storage (for example, HTML5 local storage) to store certain information on your device.
- Pixels / web beacons (sometimes called clear GIFs) in our Sites or HTML emails to understand whether content was viewed or an email was opened.
- Mobile SDKs in the App. An SDK is third-party code that helps with things like analytics, crash reporting, security, or feature functionality. SDKs may collect information from your device (for example, device identifiers and app usage events) depending on how the SDK operates and how it is configured.
How we use cookies and similar technologies
We use cookies and similar technologies to:
- operate and secure our Sites and App,
- remember preferences and settings,
- understand how our Sites and App are used so we can improve them (for example, usage analytics and crash/performance diagnostics), and
- communicate with you (for example, measuring whether operational emails are opened).
Highchat currently does not run ads, and we do not use cookies or SDKs to deliver targeted advertising in the App.
Types of cookies and similar technologies we may use
| Type | What it does | Where it's used | Who serves it | How to control it |
|---|---|---|---|---|
| Essential (Strictly Necessary) | Helps our Sites/App work (e.g., security, session management, load balancing) | Sites and/or App | Us and service providers | Browser settings (Sites); device settings (App). Some essential technologies can't be disabled without affecting functionality. |
| Analytics / Measurement | Helps us understand usage and improve performance (e.g., which pages/features are used, crash logs) | Sites and/or App | Typically service providers | Cookie banner/settings on Sites (where required); device settings and in-app controls (if offered); you can also limit analytics by adjusting browser controls. |
| Functionality / Performance | Remembers preferences (e.g., language, settings) and supports feature performance | Sites and/or App | Us and service providers | Browser settings (Sites); device settings (App); in-app settings (if available). |
| Advertising | Used to show or measure ads across services | Currently not used in Highchat | N/A | N/A |
Important: The specific providers we use may change over time. Where required by law, we will provide appropriate notice and choices (for example, through a cookie banner on the Sites).
Your choices and controls
Browser controls (Sites)
Most browsers let you:
- delete cookies,
- block all cookies, or
- block certain types of cookies.
If you block cookies, parts of the Sites may not work correctly.
Mobile device controls (App)
Your mobile operating system may let you control certain data collection (such as resetting device identifiers or limiting certain tracking). Because Highchat currently does not run ads, these settings generally affect third-party services outside of Highchat more than Highchat itself. However, they may still limit certain types of analytics or measurement depending on your device.
Email settings (pixels/web beacons)
If you receive HTML emails from us, your email client may allow you to block images or disable automatic image loading, which can limit pixel/web beacon functionality.
Do Not Track (Sites)
Some browsers send "Do Not Track" signals. Our Sites currently do not respond to "Do Not Track" signals.
Updates to this Cookie Notice
We may update this Cookie Notice from time to time. When we do, we will update the "Notice last updated" date and post the revised notice on the applicable Site(s) and/or in connection with the App.
Your choices
You have options for controlling what information cookies and similar technologies collect about you.
Browser controls (Sites)
Most browsers let you remove or reject cookies. To do this, follow your browser's instructions (usually located in "Help," "Tools," or "Settings").
If you disable cookies, parts of our Sites may not work correctly. For example, the Sites may not remember your preferences, and you may need to re-enter information more often.
You can learn more about cookies and how to manage them at allaboutcookies.org.
Analytics controls (Sites)
If we use analytics tools on our Sites, you may have additional choices. For example, some analytics providers offer opt-out tools (such as browser add-ons) or settings that limit collection.
(If you use Google Analytics specifically, insert your Google Analytics opt-out language here. If you do not use Google Analytics, do not include this.)
Email pixels and images
Some emails we send may include pixels (also called web beacons or clear GIFs) that help us understand whether an email was opened or a link was clicked.
Most email clients allow you to block images or disable automatic image loading, which can limit pixel functionality. Check your email client settings for details.
Mobile device controls (App)
Your mobile operating system may offer privacy controls that can affect how certain information is collected (for example, limiting background location access, resetting certain device identifiers, or controlling tracking permissions).
Because Highchat currently does not run ads, we do not use your device advertising ID to deliver interest-based advertising in the App. However, your device settings may still affect certain measurement or security-related features depending on how your device is configured.
Where to learn more
For more information about how we collect, use, and share personal information, please review our Privacy Policy.
Changes to this Cookie Notice
We may update this Cookie Notice from time to time to reflect changes in our use of cookies and similar technologies, or for other operational, legal, or regulatory reasons.
When we update this Cookie Notice, we will revise the "Notice last updated" date at the top of the notice and post the updated version on the applicable Sites and/or in connection with the App.
Questions
If you have questions about this Cookie Notice, you can contact us at:
Email: support@highchat.app