Privacy Policy

HighRiseBot, operated by NETSYNTAX S.L., CIF B76204783, Tajaste 5, Las Palmas, Spain ("we", "us", the data controller), provides host bots for rooms in the social game Highrise: 24/7 radio with song requests, looping emotes, custom welcomes, profiles and an optional VIP economy. This policy explains what data we collect to run that service and how we protect it.

What we collect

• Account data. When you sign up we receive your email address and basic profile from our authentication provider (Clerk). We never see or store your password.
• Bot credentials. To deploy your bot you paste the API token and bot ID of the Highrise bot account that YOU create and own. Tokens are encrypted at rest with AES-256-GCM; they are never shown back to you, never written to logs, and are only decrypted at the moment your bot instance is launched.
• Room configuration. Your room ID, language, feature toggles, pass names and prices, and custom messages — everything you set in the panel.
• Usage data. Operational events needed to run and audit the service: songs requested, passes redeemed, balance movements inside your room's economy, and instance health. Sensitive actions are recorded in an append-only audit log.
• Payments. Handled entirely by Stripe. We never receive or store card numbers — only the subscription status and invoices Stripe reports to us.

What we do NOT do

• We do not sell or share your data with third parties for advertising.
• We do not hold in-game gold. Tips sent to your bot go to YOUR Highrise bot account; our system only keeps the bookkeeping of balances and passes.
• We do not read your room's chat beyond what the bot needs to respond to commands, and chat content is not stored.

Retention

While your plan is active we keep your configuration, song library and room data so the bot can do its job. If your plan expires, everything is kept for 7 days so you can reactivate with one click; after that it is permanently deleted, and we warn you in the panel and by email before it happens. You can request earlier deletion at any time.

Cookies

We use only essential cookies: session cookies from our authentication provider and the cookie that remembers your language. No advertising or cross-site tracking cookies.

Your rights

Under the GDPR you can request access, correction, export or deletion of your data. Contact us and we will resolve it within 30 days. Our services are operated from the European Union.

Third parties we rely on

• Clerk (authentication) · Stripe (payments) · Cloudflare (network and caching).

HighRiseBot is an independent service and is not affiliated with, endorsed or sponsored by Highrise or Pocket Worlds Inc.