Privacy Policy

We collect the following types of information:

Information you provide

• Account information: email address, name, and password when you create an account.
• Payment information: billing details processed by our payment processor (Stripe). We do not store full card numbers.
• Communications: messages you send us via email or contact forms.

Information collected automatically

• Usage data: pages visited, features used, time spent on the Service.
• Device data: IP address, browser type, operating system, referring URLs.
• Cookies: session identifiers and preference cookies (see Section 6).

We use collected information to:

• Provide, operate, and maintain the Service.
• Process payments and manage subscriptions.
• Send transactional emails (account confirmation, billing receipts).
• Send SMS trading signal alerts only if you have expressly opted in and provided prior written consent as required by the Telephone Consumer Protection Act (TCPA). You may opt out at any time by replying STOP to any alert message.
• Respond to support requests.
• Analyze usage to improve the Service.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your information for personalized advertising.

HarborSignal uses the following third-party services that may receive your data as part of operating the Service:

• Amazon Web Services (AWS): cloud infrastructure and database hosting.
• Stripe: payment processing. Subject to Stripe's Privacy Policy.
• Twilio: SMS alert delivery if you opt into SMS notifications.
• Anthropic: AI signal generation. Prompts include port data, not personal data.

Third-party data sources (Yahoo Finance, AISStream, Finnhub, FRED) are accessed server-side. Your identity is not shared with these providers.

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Usage logs and analytics data are retained for up to 12 months and then aggregated or deleted.

All users

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and personal data.
• Opt out of marketing emails at any time via the unsubscribe link.

EU / EEA users (GDPR)

HarborSignal is not directed at residents of the EU or EEA and does not target EU users. However, if you access the Service from the EU or EEA, to the extent GDPR applies, you have additional rights including data portability, the right to restrict processing, and the right to object to processing. Our legal basis for processing is contract performance (for account and billing data) and legitimate interests (for usage analytics). To exercise your rights, contact privacy@harborsignal.io.

California users (CCPA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@harborsignal.io.

HarborSignal uses the following cookies:

• Session cookies: required for authentication. Deleted when you close your browser.
• Preference cookies: remember your settings (e.g., filter state). Persist for 30 days.

We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but some features of the Service may not function correctly.

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage of sensitive data, and access controls. However, no system is completely secure and we cannot guarantee absolute security of your data.

HarborSignal is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Service. Continued use of the Service after changes constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your rights, contact us at privacy@harborsignal.io.