Privacy Policy
How we collect, use, and protect your information.
Effective date: February 1, 2026
1. Information We Collect
We collect information you provide directly when you create an account, set up your marina, or contact us for support:
- Account information: Name, email address, phone number, and business name.
- Marina data: Slip configurations, customer records, vessel details, billing information, and contracts you enter into the platform.
- Payment information: We use third-party payment processors. We store only the last four digits of card numbers and processor tokens — never full card numbers.
- Usage data: Log files, device information, browser type, IP address, pages visited, and feature usage patterns.
- Communications: Support emails, feedback, and any content you send to us.
2. How We Use Your Information
- Provide, maintain, and improve the HarborDesk platform.
- Process billing and generate invoices on your behalf.
- Send transactional emails (invoice delivery, password resets, security alerts).
- Respond to support requests and communicate about your account.
- Detect, prevent, and address technical issues and security threats.
- Analyze usage patterns to improve product features (aggregated, anonymized data only).
3. Data Storage and Security
Your data is stored in encrypted PostgreSQL databases hosted on infrastructure within the United States. We implement industry-standard security measures including:
- Encryption at rest and in transit (TLS 1.2+).
- Row-level security ensuring strict tenant isolation — your data is never accessible to other marina operators.
- Regular security audits and vulnerability scanning.
- Access controls limiting employee access to production data.
4. Third-Party Services
We share data only with service providers necessary to operate the platform:
- Supabase: Authentication and database hosting.
- Payment processors: To process subscription payments.
- Email delivery: Transactional email service for invoice delivery and notifications.
- Analytics: Aggregated, anonymized usage analytics.
We do not sell your personal information to third parties. We do not share your marina's operational data with anyone.
5. Your Rights
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate information.
- Deletion: Request deletion of your account and associated data.
- Export: Export your marina data in standard formats (CSV).
- Opt-out: Unsubscribe from marketing emails at any time (transactional emails cannot be opted out of while your account is active).
6. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. You can configure your browser to block cookies, but some features may not work correctly.
7. Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow for reactivation, after which it is permanently deleted. Financial records required for tax or legal compliance may be retained longer as required by law.
8. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes via email or an in-app notification at least 30 days before the changes take effect.
9. Contact Us
If you have questions about this privacy policy or your data, contact us at support@harbordesk.app.