Placeholder notice.
[LEGAL ENTITY],[REGISTERED ADDRESS]and[DATA REGION]must be filled in before launch. This is a working draft, not legal advice.
Who is responsible
[LEGAL ENTITY], [REGISTERED ADDRESS], is the controller of personal data processed through the HarperHarbor platform. Contact: privacy@harperharbor.com.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Account data: public numeric id, nickname, email, sign-in provider | to operate your account and sign you in | life of the account |
| Wallet and payment records: top-ups, debits, refunds, Stripe payment ids | to provide the prepaid service and meet accounting law | 7 years after the transaction |
| Usage events: which App, which service, which lane, tokens, points | to meter, bill, enforce quotas and reconcile the wallet | 13 months, then aggregated |
| Content: cards, worldbooks, notes, messages | to provide the Services you asked for | until you delete it, or the account closes |
| Audit log: admin actions with actor, time and channel | security and dispute resolution | 180 days |
| Technical: IP address (hashed in logs), user agent, error reports | security, abuse prevention, debugging | 30 days |
We do not sell personal data and we do not use your content to train models without your explicit opt-in.
Payments
Card details are entered on pages hosted by Stripe and are processed by Stripe under its own privacy policy. We receive a payment id, the amount, the last four digits of the card and the card brand.
Apps
An App you authorize receives your public numeric id and nickname, and can see your activity within that App only. It never receives your balance, your email or your activity in other Apps. Revoking an App stops its access immediately; data the App already stored is governed by that App’s policy.
Where data is processed
Data is stored in [DATA REGION]. Model requests are sent to upstream providers to generate replies; we send only the content needed for the reply, never your account identifiers. Upstream providers are contractually bound not to retain or train on the content.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to processing. You can delete content and revoke Apps yourself from your account page; for anything else, write to privacy@harperharbor.com. We answer within 30 days.
Cookies
The marketing site sets no tracking cookies. The console uses strictly necessary storage (session token, UI preferences). Analytics, if enabled, are cookie-less and aggregated.
Children
The Services are not directed at people under 18. If you believe a minor has created an account, contact us and we will remove it.
Changes
We will post changes here with a new “updated” date and notify account holders of material changes.