Last Updated: 3 November 2026

These Agency Terms apply when a business uses HiFiveStar to manage other businesses ("Client Businesses"), with or without its own brand on them. They are in addition to HiFiveStar's Terms of Service at https://hifivestar.com/terms/. For Client Businesses and for Customer's brand on them, these Agency Terms control if the two conflict. For Customer's own business, HiFiveStar's Terms of Service control if the two conflict.

This Agreement is between HiFiveStar and the company or person that accepts it ("Customer"). It consists of (1) the Order Form below and (2) the Framework Terms defined below.

If you are accepting this Agreement on behalf of your company, you represent that you are authorized to accept it on behalf of your company. By ticking the box that accepts these Agency Terms, Customer indicates its acceptance of this Agreement and agrees to be bound by it.

Cover Page

Order Form

Framework Terms: This Order Form incorporates and is governed by the Framework Terms, made up of the Key Terms below, the Common Paper Cloud Service Agreement Standard Terms Version 2.1 and the Common Paper AI Addendum Standard Terms Version 1.0, which are incorporated by reference. The Agency Rider at the end of this Cover Page modifies the Standard Terms and the AI Addendum Standard Terms, and controls over any conflict with either. Capitalized words have the meanings given in this Cover Page or the Standard Terms.

Cloud Service: HiFiveStar is software that helps local businesses ask their customers for reviews, collect private feedback, and reply to reviews. Under this Agreement, Customer may add Client Businesses, manage them, and show its own brand to them and to their customers.

Order Date: The date Customer first accepts this Agreement.

Subscription Period: One month for each Client Business's plan, or one year for a plan bought yearly.

Cloud Service Fees: The prices for each Client Business's plan, and for any add-on bought for it, are the ones shown on the Product's Billing pages and at https://hifivestar.com/pricing/ when Customer chooses them. If Customer turns on Provider's AI for its Client Businesses, AI usage is charged monthly in arrears at the per-token prices shown in the Product when Customer turns it on (a later rise applies only once Customer turns it on again at the new prices), and a month's AI charge never exceeds the highest monthly cap Customer set there for that month. Provider may change prices by giving at least 30 days' notice by email to Customer's Notice Address and in the Product, and the change applies from the next Subscription Period.

Payment Process: Customer authorizes Provider to charge Customer's payment method on file, through Provider's payment processor, at the start of each Subscription Period for subscription Fees and monthly in arrears for usage-based Fees, for immediate payment without further approval.

Non-Renewal Notice Period: Before the plan's next billing date. Customer can stop a Client Business's plan from the Product's Billing pages, which is notice of non-renewal for that plan.

Technical Support: By email at support@hifivestar.com and in the Product's chat. Provider supports Customer; Customer supports its Client Businesses (Section R10).

Key Terms

Customer: The company or person who accepts this Agreement. If the person accepting does so on behalf of a company, "Customer" means that company.

Provider: HiFiveStar (called "hiFive" and "the Company" in HiFiveStar's Terms of Service). Legal entity details are available on request via support@hifivestar.com.

Effective Date: The date Customer first accepts this Agreement.

Governing Law: The laws of the State of Wyoming, United States.

Chosen Courts: The state or federal courts located in the State of Wyoming.

Covered Claims:

Provider Covered Claims: Any action, proceeding, or claim that the Cloud Service, when used by Customer according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon a third party's intellectual property or other proprietary rights.
Customer Covered Claims: Any action, proceeding, or claim (1) that the Customer Content, when used according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon a third party's intellectual property or other proprietary rights; (2) arising from a breach of Section 2.1 (Restrictions on Customer) or of the Agency Rider by Customer or its own employees or contractors, except to the extent the breach results from Provider's breach of this Agreement, Provider's negligence or wilful misconduct, or the Product not working as its Documentation describes; or (3) made by a Client Business, a customer of a Client Business, Google, or a government authority, arising from or relating to the use of the Product by Customer or a Client Business, including review requests and messages sent, replies posted, reviews asked for, shown or hidden, and personal data submitted, except to the extent the claim results from Provider's breach of this Agreement, Provider's negligence or wilful misconduct, or the Product not working as its Documentation describes. A claim that falls under both (2) and (3) is treated as a claim under (3), unless it results from the acts or instructions of Customer or its own employees or contractors.

General Cap Amount: 1x the fees paid or payable by Customer to Provider in the 12-month period immediately before the claim.

Increased Claims: Customer's obligations under Section 9.2 (Protection by Customer) for Customer Covered Claims (3).

Increased Cap Amount: 5x the fees paid or payable by Customer to Provider in the 12-month period immediately before the claim.

Unlimited Claims: Customer's obligations under Section 9.2 (Protection by Customer) for Customer Covered Claims (1) and (2).

Notice Address:

For Provider: support@hifivestar.com
For Customer: the main email address on Customer's account.

Attachments and Supplements

AI Addendum: The AI Addendum Standard Terms Version 1.0 apply to the AI Services with these Variables. Training Data: None. Training Purposes: None. Improvement Restrictions: Input and Output may be used to fix and improve the AI features of the Product only after removing anything that identifies Customer, a Client Business or any person, and content received from Google's Business Profile APIs is used only as Google's API policies allow. AI Acceptable Use Policy: the usage policies of the AI provider whose account serves the request (Section R7).

Data Processing: For Client Businesses and Client Personal Information, Section R8 (US privacy terms) applies, and HiFiveStar's data processing addendum at https://hifivestar.com/dpa/ does not.

Agency Rider (Changes to the Standard Terms)

R1. Client Businesses and resale. Modifying Sections 1.1 (Access and Use) and 2.1(ii) (Restrictions on Customer): Customer may add businesses it manages to the Product as Client Businesses, give their people access, use the Product for them, and resell access to them as part of its own services, at prices Customer sets, with or without its own brand. Each Client Business is its own business in the Product with its own plan, which Customer pays for. People of a Client Business who use the Product are Users for this Agreement, and Customer is responsible for them and for each Client Business's use of the Product. Customer may not give anyone else access to the Product.

R2. Customer's agreement with each Client Business. Before adding a Client Business, Customer will have a written or electronic agreement with it that (a) authorizes Customer to manage it in the Product, including asking its customers for reviews and replying to reviews for it; (b) requires it to follow rules at least as protective as Sections R3, R5 and R6; (c) tells it that a service provider processes its customers' information on its behalf; and (d) meets the service provider contract requirements of the US privacy laws that apply to it. Customer may use the clauses in the Appendix for (c) and (d). Customer confirms in the Product, for each Client Business it adds, that it has that business's written consent to manage it there. Customer, not Provider, is responsible for its agreements with Client Businesses, the prices it charges them, and its services to them. Client Businesses are not third-party beneficiaries of this Agreement (Section 12.11).

R3. Review rules. Customer will not, and will not allow a Client Business or anyone else to, use the Product to:

(a) write, create, buy or sell a review that misrepresents that the reviewer exists, used the business, or had the experience described;
(b) offer or give anything of value, such as payment, discounts, free goods or services, or entries into a prize draw, in exchange for a review, for changing or removing a review, or on the condition that a review is positive or negative;
(c) post a review of a Client Business written by Customer, or by the Client Business's owners, managers, employees or agents, or knowingly ask any of them, or their spouses, parents, children or siblings, for one, other than in a request sent to all of the Client Business's customers alike;
(d) discourage or prohibit negative reviews, or ask only satisfied customers for reviews, including by sending customers who give a low rating to private feedback instead of the review site. The Product keeps its star filter ("Ask for a rating first") off for Client Businesses, and Customer will not try to get around that;
(e) prevent or remove a review through a groundless legal threat, a physical threat, intimidation, or a public false accusation, or present a Client Business's reviews, including in widgets, as all or most of its reviews while some are hidden for their rating or negative sentiment;
(f) pressure customers to leave a review while on the premises, or ask that a review include specific content;
(g) present a website or page that Customer or a Client Business controls, including a review page on Customer's own domain, as an independent source of reviews or opinions, or buy or sell fake indicators of social media influence, such as followers, likes or views; or
(h) send a message that breaks Section R5.

Modifying Section 2.2 (Suspension): if Provider reasonably believes Section R3, R4 or R5 is being breached, or Google asks Provider to act, Provider may immediately suspend the Client Business concerned, the feature concerned, or Customer, without notice. Provider will tell Customer why as soon as practical. A suspension never stops a Client Business's own people from leaving Customer, disconnecting Google or getting their data.

R4. Google Business Profile. Where Customer manages a Client Business's Google Business Profile through the Product, Customer will follow Google's Business Profile third-party policies, its Business Profile API policies and its guidelines for authorized representatives, including:

(a) getting the Client Business's express consent before managing its profile, and its explicit written or digital approval before replying to reviews for it. The Product records that approval and does not let Customer reply without it;
(b) keeping the Client Business as the owner of its profile, and letting it decide what access Customer has;
(c) if Customer charges a management fee, telling the Client Business in writing, before managing its profile, that Business Profile is a service Google provides at no charge, and showing the fee on Customer's invoices;
(d) linking Google's "Working with a third party" notice in a clearly visible place on Customer's website, and telling each Client Business about it by email or mail when Customer starts managing it and whenever Customer renews its agreement with it;
(e) within 7 business days of a Client Business's notice, letting it disconnect the Google account used for its profile from Customer's services, and giving up Customer's permissions on that profile. A Client Business's own people can disconnect Google in the Product at any time;
(f) never comparing or sharing one Client Business's Business Profile data with another;
(g) using the Product's Google features only by signing in and acting by hand: never through scripts, bots, browser automation or any other automated tool, and never in a way that lets Customer or a Client Business avoid applying for its own Business Profile API project;
(h) telling the Client Business about every change Customer makes to its profile, and making none without its consent;
(i) reporting Business Profile data separately from other sites' data, and making its cost and performance reports easy for the Client Business to get;
(j) keeping each Client Business's consent and approval on record, and giving Provider a copy within 5 business days of asking; and
(k) answering Google's compliance questions through Provider without delay, and never interfering with Google's monitoring or audits.

R5. Messages and sender identity. For each Client Business, Customer will make sure that (a) the Client Business is named as the sender of every review request and message the Product sends for it; (b) every email the law treats as commercial identifies itself as an advertisement where the law requires it and carries the Client Business's valid physical postal address, which Customer can add in the Product's email templates (the request email and its email reminders); (c) a Client Business messages only people who did business with it and whom it may lawfully contact; (d) if texting is turned on for a Client Business, it has each recipient's consent to its texts as the Telephone Consumer Protection Act and carrier rules require; and (e) any opt-out from the Client Business's emails or texts that reaches Customer or the Client Business outside the Product is, within 2 business days, entered on the Client Business's opt-out page (the page every request links to) or passed on to Provider by email to Provider's Notice Address, and nobody removes or works around the Product's opt-out or adds back a person who opted out. The Product adds an opt-out to each email and text it sends, and stops messaging a person who opts out through it or whose opt-out is passed on to Provider. Texting is off for Client Businesses; Provider turns it on for one only after the phone carriers have registered that business as the sender.

R6. Health information, and the United States only. Prohibited Data (Section 3.2) includes protected health information regulated by HIPAA, and Provider does not sign HIPAA business associate agreements. For a Client Business that is a health care provider: (a) Customer must not add patients' names, email addresses, phone numbers or other patient details unless the laws that apply to that Client Business allow it without such an agreement, and Customer and the Client Business are responsible for that decision; and (b) no reply may confirm that the reviewer is or was a patient, or mention their visit, care or condition. The Product's AI drafts for a business marked as a health care provider follow (b), and Customer checks every draft against it before posting. Customer may add only Client Businesses located in the United States, and will not use the Product for the personal data of people in the European Economic Area, the United Kingdom or Switzerland, other than a Client Business's customers it served in the United States (modifying Section 3.1). Provider offers no processor terms under the GDPR or the UK GDPR for Client Businesses, and Customer is responsible for any such law that applies to its own processing.

R7. AI. Section 1.6 (Machine Learning) does not apply: Provider will not use Customer Content, Input or Output to Train any Model. For a Client Business, the AI Services run only (a) through an AI provider account and key that Customer supplies, in which case Customer is responsible for that account, its fees and its terms, and Provider sends that provider only what each request needs, on Customer's instruction; or (b) if Customer turns it on, through Provider's own AI provider account, charged as the Order Form says, with that provider acting as Provider's subprocessor. AI drafts are suggestions: a person decides whether to post each reply.

R8. US privacy terms. To the extent the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.) or a similar US state privacy law applies, Provider acts as Customer's service provider, and through Customer as a service provider to each Client Business, for the personal information it processes for them under this Agreement ("Client Personal Information"), and:

(a) Purposes. Provider processes Client Personal Information only to send review requests and reminders for the Client Business; to receive its customers' details from the apps it connects, in order to send those requests; to receive and show its ratings, private feedback and reviews; to draft and post the replies Customer or the Client Business approves; to analyze its reviews and feedback into reports and insights for it; to show the Client Business its own reports and review widgets; and to provide support, security and billing for those services. Customer and each Client Business disclose Client Personal Information to Provider only for these purposes;
(b) Provider will not sell or share Client Personal Information;
(c) Provider will not retain, use or disclose Client Personal Information for any other purpose, or outside its direct business relationship with Customer and the Client Business, and will not combine it with personal information from another source or from its own interactions with the person, except as those laws allow;
(d) Provider will comply with those laws and give Client Personal Information the same level of privacy protection they require, including reasonable security procedures and practices, and will cooperate with the business's cybersecurity audits and risk assessments as the California regulations require;
(e) Customer may take reasonable and appropriate steps to make sure Provider uses Client Personal Information consistently with Customer's and the Client Business's obligations, including reasonable written questions about Provider's practices, which Provider will answer within 30 days;
(f) Provider will tell Customer if it decides it can no longer meet its obligations under those laws;
(g) on notice, Customer may take reasonable and appropriate steps to stop and remediate unauthorized use of Client Personal Information, including asking Provider to confirm it no longer keeps or uses the information of a person who made a valid request to delete;
(h) Provider will help Customer and each Client Business respond to the requests people make under those laws, including deleting, correcting or providing their information;
(i) Provider's subprocessors process Client Personal Information only under written terms that limit them to providing their services to Provider and require them to keep it confidential and secure, and Provider gives Customer the list of them on request. Google, Meta and the other platforms a Client Business connects are not Provider's subprocessors: their own terms govern what they receive;
(j) Client Personal Information includes the names, email addresses, phone numbers, ratings, feedback, reviews and replies of the Client Business's customers, and any other personal information submitted with them or about the Client Business's people; Provider processes it while the Client Business uses the Product, and afterwards only as Section R9 says;
(k) everyone who processes Client Personal Information for Provider is bound to keep it confidential;
(l) at the end of the services, at Customer's or the Client Business's direction, Provider deletes or returns Client Personal Information, unless the law requires keeping it; and
(m) Provider makes available the information needed to show it meets these terms, and cooperates with reasonable assessments, which it may meet with an independent assessor's report.

R9. When a Client Business leaves, or this Agreement ends. A Client Business may leave Customer at any time. When it leaves, or Customer stops managing it, or this Agreement ends, Customer's access to it ends at once, and the Client Business keeps its account, its data, its reviews, its review link and every connection its own people made. A Google, Facebook or Instagram connection that Customer made, or whose maker the Product did not record, is removed, and the Client Business can connect its own. From then on, the Client Business's use of the Product is governed by HiFiveStar's Terms of Service, which its people accept at their next sign-in. Until they do, the service terms its people accepted keep applying, Section R8 keeps applying to its data, and Provider keeps the Product's free features working for it and gives back or deletes its data when its people ask. Its own people may ask Provider to delete its data, which Provider will do within 60 days. Section 5.5(b) does not let Customer have a Client Business's data deleted. Customer will not delete a Client Business's data or reviews, or disconnect its accounts, to stop it from leaving.

R10. Support and contact. Customer gives its Client Businesses first-line support. Provider supports Customer, and may answer a Client Business's people directly about access, privacy, safety or anything these terms require. Provider will give Customer its legal entity details on request, so Customer can pass them to a Client Business. While a business is Customer's Client Business, Provider will not use the contact details Provider holds only because Customer added it to market Provider's own services to it. This does not limit messages the Product sends as part of the service, or Provider's dealings with a business that contacts Provider on its own.

R11. Customer's brand. Customer is responsible for the names, logos and domain names it uses with the Product, and represents that it has the right to use them. Customer's brand must not use the word Google, or suggest that Customer or the Product is Google, part of Google or certified by Google. On Client Businesses' pages, Provider may show the privacy policy that covers the Client Business's customers (the Client Business's own, or one Customer publishes for it), Customer's terms, or, if Customer gives none, a neutral notice that a service provider processes information for the Client Business, and the notices Google requires. Section 12.8 (Logo Rights) does not apply: Provider will not name Customer or use its logo in marketing without Customer's written permission.

R12. Indemnity, the liability cap and defense. Section 8.2 (Damages Waiver) does not apply to amounts Customer owes under Section 9.2 (Protection by Customer). Section 9.5(b) applies only to Provider's use of Customer Content in a way this Agreement does not allow; it never excuses Customer from a Customer Covered Claim that results from the use of the Product or of Customer Content by Customer, its Users or a Client Business. For a claim by a government authority or by Google, Provider may control the defense and settlement with counsel it chooses, at Customer's reasonable expense, and Section 9.3(c) does not apply to that claim. Provider will not settle such a claim in a way that admits fault for Customer or makes Customer pay a settlement amount without Customer's written consent, which Customer will not unreasonably withhold.

R13. Changes to these Agency Terms. Modifying Section 12.2 (Modifications, Severability, and Waiver): Provider may update these Agency Terms by posting the new version and telling Customer at least 30 days before it takes effect, by email to Customer's Notice Address and in the Product. If Customer does not agree, Customer may stop its plans before the change takes effect. Using the Product for Client Businesses after that date accepts the change, and the Product may ask Customer to accept the new version before it adds more Client Businesses. A change does not apply to a dispute or claim that arose before it took effect. Changes required by law or by Google's policies may take effect sooner.

R14. Term and survival. Modifying Section 5.2: the Framework Terms end 30 days after Customer's last Client Business stops being one; before Customer adds a Client Business after that, it accepts the Agency Terms then current. Sections R2, R4(e), R6, R8, R9, R10 and R12 survive expiration or termination of this Agreement under Section 5.6.

Appendix: clauses Customer may use in its agreements with Client Businesses

Customer may copy these into its agreement with each Client Business (Section R2(c) and (d)). They are offered as a convenience, without any warranty that they meet every law that applies to Customer or the Client Business.

Service provider. We use a software provider to send review requests for you, collect your customers' ratings and feedback, show your reviews and help draft replies. The provider processes your customers' personal information only on your behalf and only for those purposes. You give it to us only for these purposes.
No sale. Neither we nor the provider will sell or share your customers' personal information, or use it for any purpose other than the services we provide to you, except as the law allows.
Your obligations. You will give us only the details of customers who did business with you and whom you may lawfully contact, and you will not ask for or post reviews in a way the FTC's rule on consumer reviews (16 CFR Part 465) or the review site's policies forbid.
Requests and deletion. We will help you answer your customers' requests to see, correct or delete their information, and when our services end we will delete or return it at your direction, unless the law requires us to keep it.
Only for you. We and the provider will not use your customers' personal information outside our work for you, or combine it with personal information from any other source, except as the law allows.
Same protection. We will comply with the California Consumer Privacy Act and its regulations, and give your customers' personal information the same level of privacy protection they require of you, including reasonable security.
Your checks. You may take reasonable and appropriate steps to make sure we use it as your obligations under those laws require, and, after telling us, to stop and fix any use you did not allow.
If we can't comply. We will tell you if we decide we can no longer meet our obligations under those laws.

These Agency Terms are based on the Common Paper Terms of Service (a click-through Cover Page for the Cloud Service Agreement), the Cloud Service Agreement Standard Terms Version 2.1 and the AI Addendum Standard Terms Version 1.0, used under the Creative Commons Attribution 4.0 license. HiFiveStar changed the Cover Page and added the Agency Rider and the Appendix. Common Paper's standard terms are incorporated by reference and are not changed except as this Agreement says.