Privacy Policy

Last updated: August 8, 2026

At Highlightly, accessible from https://highlightly.net and all associated subdomains, one of our main priorities is the privacy of our visitors and users. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at [email protected].

1. Information We Collect

1.1 Information You Provide

When you create an account, purchase a plan, or contact us directly, we may collect the following information:

Name and email address
Account credentials
API keys associated with your account
The contents of messages you send to our support
Any other information you choose to provide

1.2 Information Collected Automatically

When you visit our website or use our API, we automatically collect certain technical information:

IP address
Browser type and version
Pages visited and time spent on pages
Date and time of visits
Referring and exit pages
API usage data (endpoints called, request frequency, response status codes)
Device and operating system information

1.3 Payment Information

We use Stripe, Inc. as our payment processor. When you purchase a plan, your payment information (such as credit card number, billing address, and other financial details) is collected and processed directly by Stripe. We do not store your full payment card details on our servers. We may receive from Stripe limited information such as the last four digits of your card, card brand, expiration date, and billing country for record-keeping and support purposes.

Stripe's collection and use of your payment information is governed by their own privacy policy, available at stripe.com/privacy.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service and API
Process payments and manage your account
Monitor API usage and enforce plan limits
Improve, personalize, and expand our services
Understand and analyze how you use our website and API
Communicate with you, including for customer support, updates, and service-related notices
Detect and prevent fraud, abuse, or misuse of the Service
Comply with legal obligations

We do not sell your personal data to third parties.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity on our website. Specifically, we use:

Google Analytics to understand how visitors interact with our website, including page views, session duration, and traffic sources
Google Ads (AW-11401225328) for conversion tracking and advertising measurement
Essential cookies for maintaining your session and account authentication

You can choose to disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. For more information about how Google uses your data, visit Google's Privacy Policy.

4. Third-Party Service Providers

We share your information with the following third-party service providers who assist us in operating our business:

Stripe, Inc. for payment processing, as described in Section 1.3. See Stripe's Privacy Policy
Google Analytics for website usage analytics. Google receives anonymized browsing data. See Google's Privacy Policy
Cloudflare for hosting, CDN, and security services. Cloudflare may process request data including IP addresses. See Cloudflare's Privacy Policy
RapidAPI for API marketplace distribution. If you access our API through RapidAPI, their own privacy policy governs data collected on their platform. See RapidAPI's Privacy Policy

These providers only have access to the information necessary to perform their specific functions and are obligated to protect your data in accordance with applicable laws.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

Account information is retained for the duration of your account
API usage logs are retained for up to 12 months for analytics and security purposes
Payment records are retained as required by applicable tax and accounting laws
Support correspondence is retained for up to 24 months

After account deletion, we may retain certain data in anonymized form for analytics purposes or as required by law.

6. Data Deletion

You may request deletion of your personal data at any time by contacting us at [email protected]. Upon receiving a valid deletion request, we will:

Delete your account and associated personal data
Remove your API keys and usage data
Request deletion of your data from our payment processor (Stripe)

Please note that deletion of your account is permanent and will result in the loss of access to the API. Certain data may be retained where required by law (such as tax records and transaction history).

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following data protection rights under the General Data Protection Regulation (GDPR):

Right to access your personal data and request copies of it
Right to rectification of any inaccurate or incomplete personal data
Right to erasure of your personal data under certain conditions
Right to restrict processing of your personal data under certain conditions
Right to object to our processing of your personal data under certain conditions
Right to data portability to receive your data in a structured, commonly used format

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

The legal basis for processing your personal data includes performance of a contract (providing the Service), legitimate interests (improving our services, preventing fraud), and your consent (cookies and marketing communications).

8. Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Request disclosure of the categories and specific pieces of personal data we have collected
Request deletion of your personal data
Opt out of the sale of your personal data

We do not sell personal data. If you would like to exercise any of these rights, please contact us at [email protected]. We will respond within one month.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including countries where our service providers operate (such as the United States). These countries may have data protection laws that are different from the laws of your country. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy and applicable law.

10. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that data promptly.

11. Links to Other Websites

Our website may contain links to other websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites. We encourage you to review the privacy policy of every website you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us:

Email: [email protected]