Last updated: October 14, 2026
This policy explains how HigherOps Inc. ("HigherOps", "we") handles personal information on higherops.io, highertools.io and app.highertools.io, and in the HigherTools tools. Where our customers use HigherTools to process information about their own customers, prospects, callers or website visitors, the customer decides how that information is used and its own privacy policy applies; we process it on the customer's behalf.
What we collect
| Source | Information |
|---|---|
| Account sign-up and sign-in | Work email, your name if you sign in with Google, workspace name, team membership and role, sign-in method (Google or an email code) |
| Billing | Billing contact, plan, purchase history and tax details. Card details are collected and held by Stripe, not by us |
| Forms on our sites | Name, work email, company and your message, from contact, waitlist and access request forms |
| Chat on our sites | Our own sites use HigherChat. We collect your conversation, an anonymous visitor identifier, pages viewed and any contact details you share. IP addresses are used for abuse prevention and deleted within 2 days |
| Proposals and client portal | Email address and the one-time codes used to open a proposal or the portal, and your activity there |
| Using the tools | Content and data you submit or connect (Customer Data), settings, and logs of how the tools are used and perform |
| Cookies and similar | HubSpot analytics cookies on higherops.io; local and session storage used by HigherChat; essential sign-in cookies in the apps |
How we use it
We use personal information to provide, secure and support the Services; to create and manage accounts; to bill; to respond to requests and book meetings; to send service and account messages; to send marketing where the law allows, with an unsubscribe in every message; to understand and improve our products; to prevent fraud and abuse; and to meet legal obligations.
Who we share it with
We share personal information with service providers who process it for us, under contracts that require them to protect it:
| Provider | Purpose |
|---|---|
| Supabase | Databases and authentication |
| Vercel | Website and app hosting |
| Railway | Hosting for HigherCoach |
| Stripe | Payments and tax |
| Resend | Sign-in codes and service email |
| HubSpot | Our CRM, forms, and higherops.io analytics; also a customer-connected integration |
| Sign-in with Google; Google Cloud hosting for HigherData | |
| Microsoft | Sign-in with Microsoft in HigherCoach |
| OpenRouter, OpenAI, Anthropic | AI processing |
| BounceBan | Email verification in HigherData |
| IPinfo | Optional company lookup from IP address in HigherChat, off unless a customer enables it |
| Sentry | Error monitoring for HigherCoach |
| Tools a customer connects (call recorders, Slack, webhooks) | Only when a customer connects them; the customer's own agreements with them apply |
We also disclose information when the law requires, to protect rights and safety, with your direction, or as part of a merger, acquisition or sale of assets. We do not sell personal information.
HigherData records
HigherData includes business contact information about professionals, such as names, job titles, employers, business email addresses and phone numbers, and company details. We use it to provide HigherData to our customers for business-to-business purposes. If you are in the HigherData dataset, you can ask us to tell you what we hold about you, correct it, or remove you, by writing to info@higherops.io.
Where it is stored
Our databases are hosted in the United States (AWS us-east-1), and our providers may process information in the United States and other countries. Information stored outside Canada is subject to the laws of those countries and may be accessed by their courts and authorities.
How long we keep it
We keep personal information as long as needed for the purposes above, then delete or de-identify it. Account and billing records are kept while the account is open and afterwards as tax and accounting law requires. Each tool's terms describe its own retention. Backups expire on a rolling schedule.
Security
We use administrative, technical and physical safeguards, including encryption in transit, access controls and row-level security in our databases. No system is completely secure.
Your choices and rights
You can ask to access or correct your personal information, withdraw consent, or ask us to delete it, subject to legal limits, by writing to info@higherops.io. You can unsubscribe from marketing using the link in any message. Depending on where you live, you may have other rights, such as to complain to a privacy regulator; in Canada that is the Office of the Privacy Commissioner of Canada. If your information is held by one of our customers, contact that customer first and we will help them respond.
Children
Our services are for businesses and not directed to children. We do not knowingly collect information from anyone under 16.
Changes
We may update this policy at any time. Changes take effect when posted, and we will notify account owners of material changes.
Contact
Our Privacy Officer, Craig Handy, is accountable for how we handle personal information. Privacy questions, requests and legal notices: info@higherops.io. HigherOps Inc., Ontario, Canada.