Privacy Policy

Last updated: October 9, 2026

HiGHLiGHTR ("we", "us") provides an AI marketing assistant for bars and restaurants. This policy explains what information we collect, how we use it, and the choices you have. Questions: our contact form.

Information we collect

Account information: your name, email address, business name, city, and the package you choose.
Business information you provide: menu items and prices, sales and inventory reports, supplier invoices, hours, events, photos, videos, and brand details.
Connected accounts: when you choose to connect an account such as Instagram, Facebook, TikTok, Google or a point-of-sale system, we receive the information that account allows, for example your profile name, your posts and media, calendar events, or sales data. We only request the permissions needed for the features you use.
Usage information: basic technical information such as log data needed to run and secure the service.

How we use information

To provide the service: planning, writing and designing social media content, reports, and recommendations for your business.
To import your own photos and media from accounts you connect, so they can be used in your content.
To publish content to your connected accounts only after you approve it (or if you turn on automatic publishing).
To secure, maintain and improve the service, and to communicate with you about your account.

We do not sell your personal information, and we do not use your data from connected social accounts for advertising to other people.

Service providers we use

We share information only with providers that help us run the service, under their own privacy and security terms: Supabase (hosting and database), Anthropic (AI text generation), Google (AI image and video generation, Calendar, YouTube and Business Profile, when connected), Meta (Instagram and Facebook, when connected), TikTok (when connected), Stripe (payments), and email delivery providers. We may disclose information if required by law.

Data from TikTok, Meta and Google

Information we receive from TikTok, Instagram, Facebook or Google through their APIs is used only to provide the features you requested for your own business, such as importing your media or publishing your approved posts. You can disconnect any account at any time in HiGHLiGHTR (Settings), or remove HiGHLiGHTR's access in that platform's own settings. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How long we keep information

We keep your information while your account is active. When you disconnect an account, we delete its access tokens. When you delete your account, we delete your business data within 30 days, except where we must keep records by law (for example, billing records).

Deleting your data

You can delete photos and content in the app at any time. To delete your account and all associated data, or the data from a connected account, email our contact form with the subject "Delete my data" from the email address on your account. We will confirm and complete the deletion within 30 days.

Security

Data is encrypted in transit, access to each business's data is restricted to that business's team, and access tokens for connected accounts are stored so that only our servers can read them.

Children

HiGHLiGHTR is a business service for bars and restaurants and is not directed to anyone under 18.

Changes

We will post any changes to this policy on this page and update the date above.