This Privacy Policy explains how Highscore (“Highscore,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you use our website, applications, and services (collectively, the “Service”).
1. Information we collect
1.1 Information you provide
- Account information. When you sign up via Clerk, we receive your name, email address, and authentication identifiers.
- Billing information. When you subscribe to a paid plan, Paddle (our payments processor and merchant of record) collects and processes your billing details. We receive limited metadata such as your customer ID, subscription status, and the last four digits of your payment card.
- Tool inputs and reports. Content you submit to a tool (e.g. URLs, code snippets, stack traces, product descriptions) and the generated reports are stored in your account so you can view, download, and compare them later.
- Communications. If you contact support, we receive your message and any attachments.
1.2 Information collected automatically
- Usage data. We log which tools you run, the timestamps, and your credit usage to enforce plan limits and improve the Service.
- Device and log data. IP address, browser type, operating system, referrer, and pages visited.
- Cookies and similar technologies. Used by Clerk to maintain your session, by Paddle for checkout, and by us (or our analytics provider) to understand product usage. You can control cookies through your browser settings.
2. How we use information
We use the information described above to:
- Provide, operate, secure, and improve the Service;
- Process tool runs and generate reports;
- Process payments, manage subscriptions, and prevent fraud;
- Enforce credit limits, fair-use policies, and these Terms;
- Communicate with you about your account, billing, and product updates;
- Comply with legal obligations and respond to lawful requests.
2.1 AI inputs and outputs
Inputs you submit to a tool are sent to our AI inference provider (NVIDIA NIM) to generate the report. We do not use your Inputs or Outputs to train AI models, and we contractually require our providers not to retain Inputs for longer than is necessary to fulfill the request unless their applicable terms state otherwise. Always avoid submitting confidential, personal, or sensitive data you do not have the right to share.
3. How we share information
We do not sell your personal data. We share information only with third-party service providers (“subprocessors”) that help us operate the Service, and only as needed for them to perform their functions. Current subprocessors:
- Clerk — Authentication and account management (United States).
- Firebase (Google Cloud) — Database, storage, and analytics (United States / multi-region).
- Paddle — Payments and subscription billing (merchant of record) (United Kingdom / United States).
- NVIDIA NIM — AI model inference (large language models) (United States).
- Vercel — Application hosting and content delivery (United States / global edge).
We may also disclose information if required by law, to respond to lawful requests from public authorities, to protect the rights, safety, or property of Highscore, our users, or others, or as part of a business transaction (such as a merger or acquisition), in which case we will provide notice before your information becomes subject to a different privacy policy.
4. Data retention
We retain account information for as long as your account is active. Tool inputs and reports are retained until you delete them or close your account. Billing records are retained as required by tax and accounting laws. We may retain anonymized or aggregated data indefinitely.
5. Your rights
Depending on where you live, you may have the following rights with respect to your personal data:
- Access. Request a copy of the personal data we hold about you.
- Rectification. Ask us to correct inaccurate or incomplete data.
- Deletion. Ask us to delete your personal data, subject to legal exceptions.
- Portability. Ask for a machine-readable export of your data.
- Restriction or objection. Ask us to limit or stop certain processing.
- Withdraw consent. Where processing is based on consent, you may withdraw it.
- Lodge a complaint. If you are in the EEA or UK, you may lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@high-score.dev. We may need to verify your identity before we can act on your request.
6. International transfers
Your information may be processed in countries other than your own, including the United States, where our infrastructure providers are located. Where required by law, we use appropriate safeguards such as Standard Contractual Clauses to protect international transfers of personal data.
7. Security
We use commercially reasonable administrative, technical, and physical safeguards to protect personal data, including encryption in transit, access controls, and infrastructure provided by reputable cloud providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please email privacy@high-score.dev.
9. Changes to this Policy
We may update this Privacy Policy from time to time. We will revise the “Effective” date at the top, and for material changes we will provide additional notice (e.g. in-product or by email).
10. Contact us
Questions, requests, or complaints? Email privacy@high-score.dev (privacy) or support@high-score.dev (general support).