Privacy Policy

This policy explains how Harbor handles personal information, in line with the Australian Privacy Principles. It covers business owners who use Harbor and the customers who book with them.

What we collect

• Business owners: name, email, sign-in details, business details, and billing records from Stripe (we never see full card numbers).
• Customers of a business: what you enter when you book or ask for a quote, such as your name, email, phone, address and notes, plus your booking history with that business.
• Technical data: basic logs (IP address, browser, pages requested) to keep the service secure and working, and cookies needed for sign-in. We don’t use advertising trackers.

How we use it

• To run booking sites, hold time slots, take deposits and send confirmations and reminders.
• To let a business see and manage its own bookings, customers, quotes and invoices.
• To bill Harbor subscriptions, prevent abuse and fraud, and provide support.

We don’t sell personal information. A business can only see its own customers, never another business’s.

Who we share it with

We use trusted providers to run Harbor, and they only process data on our instructions:

• Stripe (payments and payouts)
• Clerk (sign-in)
• Resend (email delivery)
• Vercel and Neon (hosting and database)

Some of these providers store data outside Australia, including in the United States. We choose providers with strong security and privacy commitments.

Businesses and their customers

When you book with a business through Harbor, that business decides how it uses your details, for example to contact you about your appointment. Harbor processes that information on the business’s behalf. Ask the business directly about its own privacy practices.

Keeping and deleting data

We keep data while an account is active. When an account closes we delete it within 90 days, except records we must keep for tax, accounting or legal reasons.

Your choices

You can ask to see, correct or delete your personal information, or complain about how we’ve handled it, by emailing support@harbor.nz. We’ll reply within 30 days. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Data is encrypted in transit, access is limited to people who need it, and card details are handled by Stripe, never stored by Harbor.