Privacy Policy

This Privacy Policy describes how Harbor Works LLC ("Harbor Works," "we," "us") collects, uses, and protects your information when you use our website (harborworks.ai) and managed AI agent platform ("Platform"). By using the Platform, you agree to the practices described here.

---

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Name and email address
• Company or organization information you provide
• Authentication identifiers and account metadata from our identity and authentication providers

We do not store your plaintext password in Harbor Works systems. Authentication providers we use on our behalf may process login credentials as part of account authentication.

1.2 Payment Information

We use Stripe to process payments. We do not store your credit card number or bank account details on our systems. Stripe's handling of your payment data is governed by the Stripe Privacy Policy.

1.3 Platform Usage Data

When you use the Platform, we collect:

• Agent configuration and task data (this is your Customer Data, owned by you)
• Usage metrics (token consumption, agent activity, API calls)
• Log data (timestamps, error logs, system events)
• Feature usage and interaction data within the Dashboard

1.4 Communications

When you contact us for support or sales, we collect:

• Email correspondence
• Support ticket content
• Any information you voluntarily provide

1.5 Website Data

When you visit harborworks.ai, we may collect:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring URL

We may use analytics tools to understand how visitors use our website. We do not use advertising trackers inside customer Platform environments.

2. How We Use Your Information

We use your information to:

• Operate the Platform: Provision your environment, run your agents, process your tasks
• Bill you: Process payments, send invoices, manage your subscription
• Provide support: Respond to your requests, troubleshoot issues, communicate service updates
• Improve the Platform: Analyze aggregated usage patterns to improve performance and features
• Comply with law: Meet legal obligations, respond to lawful requests, protect our rights

3. What We Do Not Do

• We do not sell your personal information or Customer Data to third parties
• We do not use your Customer Data to train AI models
• We do not share your data with third parties for their marketing purposes
• We do not access the content of your agent conversations, documents, or tasks except as needed to operate the Platform, provide support you request, investigate security or abuse issues, or comply with law

4. Information Sharing

We share your information only in these situations:

4.1 Service Providers

We use third-party services to operate the Platform, including:

• Stripe for payment processing
• AWS for infrastructure and hosting
• Authentication providers (such as Amazon Cognito) for user authentication and account management
• Nylas for connected email, calendar, and contact integrations when you enable those features
• LLM providers (OpenAI, Anthropic, etc.) to process agent requests on your behalf

These providers access only the data necessary to perform their function and are bound by their own privacy and security commitments.

4.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or government request.

4.3 Business Transfers

If Harbor Works is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Data Retention

• Account data: Retained while your account is active and for up to 12 months after termination for billing and legal purposes.
• Customer Data: We generally retain Customer Data for up to 30 days after termination to support offboarding and export assistance, then delete or de-identify it from active systems on our standard schedule, subject to backups and legal retention requirements.
• Usage and log data: Retained as needed for operations, security, support, analytics, and capacity planning, then deleted or de-identified according to our standard retention practices.
• Payment records: Retained as required by tax and accounting law.

6. Data Security

We protect your information with commercially reasonable security measures, including:

• Encryption in transit (TLS) and at rest
• Dedicated, isolated runtime environments per customer
• Access controls based on the principle of least privilege
• Regular security updates and patching

No system is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your data.

7. Your Rights

7.1 Access and Export

You may be able to access and export certain Customer Data through the Platform. If you need additional export assistance, contact us at privacy@harborworks.ai.

7.2 Correction

You can update certain account information through the Dashboard or by contacting us.

7.3 Deletion

You can request deletion of your account and personal data by contacting us at privacy@harborworks.ai. We will process deletion requests within 30 days, subject to legal retention requirements.

7.4 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your data)
• Not be discriminated against for exercising your rights

To exercise these rights, contact us at privacy@harborworks.ai.

7.5 European Residents (GDPR)

If you are in the European Economic Area, you have additional rights including:

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent

Our legal basis for processing is contract performance (to deliver the Platform) and legitimate interest (to improve and secure the Platform). To exercise your rights or file a complaint, contact us at privacy@harborworks.ai.

8. Cookies

Our website uses cookies for:

• Essential cookies: Session management, authentication
• Analytics cookies: Understanding website usage when analytics are enabled (can be disabled in your browser)

We do not use advertising cookies. The Platform Dashboard uses only cookies and similar storage mechanisms needed for authentication, session management, and core product operation.

9. Children

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your data is processed and stored in the United States. If you are located outside the US, your data will be transferred to the US for processing. By using the Platform, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Dashboard at least 15 days before they take effect. The "Last Updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related questions, requests, or complaints:

Email: privacy@harborworks.ai

Mail: Harbor Works LLC 13520 Discovery Dr Ste 119 Omaha, NE 68137