Harbor

Privacy Notice

Last updated: July 5, 2026

1. Who we are

Harbor is operated by Harbor Works ("we", "us", "our"). Harbor Works is the data controller for personal data processed through the Harbor service. This notice explains what personal data we collect, why we collect it, and the rights you have.

2. Personal data we collect

We collect the following categories of personal data:

  • Account data — name, email address, and login credentials.
  • Profile and content data — bills, subscriptions, renewals, reminders, and documents you add to your Harbor.
  • Support data — messages you send us when you contact support.
  • Usage and telemetry data — pages visited, features used, error reports.
  • Device and technical data — device identifiers, browser type, operating system, IP address, and approximate location derived from IP.

Payment-related data (such as card details) is collected directly by our Merchant of Record, Paddle, and is handled under Paddle's own privacy notice.

3. Why we use your data

  • Provide the service — create your account, store your data, sync across devices, send reminders.
  • Customer support — respond to your questions and troubleshoot issues.
  • Security and fraud prevention — detect and prevent abuse, protect accounts.
  • Service improvement — understand aggregate usage to improve features and reliability.
  • Legal compliance — comply with tax, accounting, and other legal obligations.
  • Communications — send service announcements and, with your consent where required, marketing messages.

4. Legal bases

  • Performance of a contract — to deliver the service you signed up for.
  • Legitimate interests — for security, fraud prevention, and improving the service.
  • Consent — for optional marketing and non-essential cookies, where required.
  • Legal obligation — where the law requires us to retain or disclose data.

5. Who we share data with

We share personal data with the following categories of recipients:

  • Service providers / subprocessors — hosting, database, authentication, analytics, and support tools that help us run Harbor.
  • Merchant of Record — Paddle — for the sale of Harbor Plus, subscription management, payments, tax compliance, invoicing, and refunds.
  • Professional advisers — legal, accounting, and audit advisers, under confidentiality obligations.
  • Authorities — where we are required by law or valid legal process.

We do not sell your personal data.

6. Data retention

We keep your personal data for as long as your account is active. If you delete your account or stop using Harbor, we delete or anonymise your data within a reasonable period, except where we need to retain it to comply with legal obligations (for example, tax or accounting records) or to resolve disputes.

7. International transfers

Your personal data may be processed in countries outside the UK or European Economic Area (EEA). Where this happens, we rely on appropriate safeguards, including Standard Contractual Clauses or adequacy decisions issued by the relevant authorities.

8. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority. We aim to respond to requests within one month.

To exercise your rights, contact us through the support channel in your Harbor account.

9. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and monitoring. No system is perfectly secure, but we work to keep your data safe.

10. Cookies

Harbor uses cookies and similar technologies. Essential cookies are required to sign you in and keep the service running. Where analytics or marketing cookies are used, we ask for consent as required and you can manage your preferences in your browser or through in-app settings.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be notified through the service or by email.

12. Contact

For any privacy question, contact Harbor Works through the support channel in your account. For billing-related data, you can also contact Paddle at paddle.net.