High5Reply

Privacy policy

High5Reply provides AI customer service chatbots to local businesses. This policy explains what we collect, why, and what control you have. It is written for both business owners with a High5Reply account and visitors who use a chatbot on a customer's website.

What we collect

  • Account data — your email address and password credentials, held by our authentication provider.
  • Business information — the details you enter during onboarding (business name, type, description, city and country, phone, website, hours, services, prices, FAQs, booking links, promotions). This is used to answer your customers' questions and is shown publicly by your chatbot.
  • Chatbot conversations — messages sent to your chatbot, stored so you can review them in your dashboard.
  • Billing data — handled by Stripe. We store a customer and subscription identifier and your plan status; we never see or store full card details.
  • Contact enquiries — the name, email, subject and message you send us through the contact form, used only to reply.
  • Analytics — only if you accept analytics cookies, and only non-personal usage data (see below).

Analytics and what we never send

Google Analytics 4 loads only after you accept analytics cookies. We send page paths, plan names shown on pricing cards, the location of the button used, a business category and the acquisition channel. We never send names, email addresses, phone numbers, contact-form text, business onboarding answers or chatbot conversation content to analytics.

We record campaign parameters (utm_source, utm_medium, utm_campaign, utm_content) and the referring domain locally in your browser so we can tell which channel a signup came from. This is not personal data and is not published anywhere.

Processors we use

  • Supabase — database, authentication and storage.
  • Stripe — subscription payments.
  • Google Analytics — optional website analytics, consent-gated.
  • Our AI model provider — generating chatbot replies from your business information.
  • Our transactional email provider — account and contact emails.

Your rights

Under UK GDPR you can request access to your data, correction, deletion, restriction of processing, or a portable copy, and you can withdraw consent for analytics at any time via the “Cookie settings” link in the footer. You may also complain to the Information Commissioner's Office (ICO).

Retention

Account, business and conversation data is kept while your account is active. Delete your chatbots or close your account and the associated data is removed. Contact enquiries are kept only as long as needed to handle the conversation.

Contact

Questions about this policy? Use our contact form. See also our cookie policy.