Website Privacy Policy
How Harbor collects, uses, shares, and protects personal information on our sites and services.
This Website Privacy Policy explains how Harbor ("Harbor", "we", "us") collects, uses, discloses, and protects personal information when you visit harborml.com and related domains, use our web applications, request demos or contact us, or otherwise interact with our online Services as a website visitor or account holder.
If you apply to or participate in contributor or expert programs, the Contributor Privacy Notice also applies and may provide additional detail for those activities.
Harbor-1, contribution, and training
An ordinary Harbor conversation is not a contribution and is not training data. Harbor may still process account, security, and abuse-prevention records for that conversation, as described below. Harbor does not claim that a private chat is never stored.
Three states are different:
- Ordinary conversation — you are using Harbor-1. That exchange is not submitted for contribution and is not used to train Harbor models.
- Submitted contribution — you explicitly submit a prompt, correction, comparison, or other material. That submission is no longer private. It can be reviewed. A review can lead to a reward in USDC or Harbor API Credits. HUMAN is not a reward.
- Training-approved contribution — a separate approval. Accepting work, or paying for it, does not by itself authorize training.
1. Who is responsible
Harbor is the controller of personal information described in this policy unless a separate agreement states otherwise (for example, where we process data as a processor for an enterprise client). Privacy enquiries: info@harborml.com.
2. Scope
This policy covers:
- Public marketing websites and research or blog content
- Account registration, authentication, and logged-in product surfaces we operate
- Contact, demo, newsletter, and support forms
- Cookies and similar technologies (see also our Cookie Policy)
It does not replace enterprise data processing agreements, statements of work, or program-specific notices that may apply to particular engagements.
3. Information we collect
3.1 Information you provide
- Identity and contact — name, email, phone, company, role, and message content when you contact us or request a demo
- Account data — credentials, profile fields, preferences, and security settings
- Communications — emails, chat, support tickets, and call notes where applicable
- Marketing preferences — newsletter sign-ups and consent records
3.2 Information collected automatically
- IP address, approximate location derived from IP, device and browser type, OS, language
- Pages viewed, referring URLs, timestamps, and interaction events
- Cookie identifiers, analytics IDs, and similar technologies
- Log and diagnostic data used for security, reliability, and abuse prevention
3.3 Information from third parties
We may receive limited business contact information from partners, enrichment providers, or publicly available sources when you engage with our enterprise outreach, and authentication attributes from identity providers you choose to connect.
4. How we use information
- Operate, secure, and improve the Services
- Respond to enquiries, schedule demos, and provide customer support
- Create and administer accounts, authenticate users, and prevent fraud or abuse
- Send service notices and, where permitted, product or research updates
- Analyse usage to improve content, performance, and accessibility
- Comply with law, enforce agreements, and protect rights, safety, and security
We do not sell personal information. We do not share personal information for cross-context behavioural advertising where prohibited by applicable law.
5. Legal bases (UK / EU GDPR)
- Contract — to provide Services you request or perform steps prior to entering a contract
- Legitimate interests — securing systems, improving products, B2B outreach where appropriate, balanced against your rights
- Consent — where required for optional marketing, certain cookies, or other consent-based processing
- Legal obligation — where we must retain or disclose information to comply with law
6. How we share information
We may share personal information with:
- Service providers who host infrastructure, send email, provide analytics, process payments, or support security — under contractual confidentiality and use restrictions
- Third-party AI providers when we send text or other product inputs to run a Harbor feature. Those providers process that information under their own terms. See our AI data and privacy notice for Anthropic and OpenAI documents. This is separate from Collect mission files, which Harbor stores on its own infrastructure.
- Professional advisers (legal, accounting, auditors) under confidentiality
- Authorities when required by law or to protect rights and safety
- Corporate transaction parties in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards
Website visitors and customer accounts are covered by this policy. People who capture or evaluate data under Harbor programs are also covered by the Contributor Privacy Notice.
7. International transfers
Harbor may process information in the United Kingdom, European Economic Area, United States, and other countries where we or our providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent transfer mechanisms.
8. Retention
We retain personal information only as long as needed for the purposes described above, including legal, accounting, dispute-resolution, and security requirements. Retention periods vary by category (for example, marketing lists vs. security logs vs. contractual records).
9. Your rights
Depending on your location, you may have rights to:
- Access, correct, or delete personal information
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
- Request portability of information you provided
- Lodge a complaint with a supervisory authority (including the UK ICO)
To exercise these rights, contact info@harborml.com. We may need to verify your identity before responding. California and other US state residents may have additional rights under applicable privacy laws; contact us to make a request.
10. Security
We implement administrative, technical, and organisational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
11. Children
Our Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact info@harborml.com.
12. Changes
We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the Services after changes take effect constitutes acceptance where permitted by law.
13. Related documents
14. Contact
Harbor · Privacy
Email: info@harborml.com