Privacy Policy

We collect different types of information depending on how you use the Platform. Here is a breakdown:

Account information

• Name, email address, phone number, and mailing address
• Profile photo (optional)
• Property details such as home address, home size, and property type (for homeowners)
• Business name, service areas, and service categories (for Pros)

Payment information

• Payment transactions are processed by Stripe. We do not store your full credit card number, CVV, or bank account number on our servers.
• We retain transaction records (amounts, dates, booking references) for accounting and dispute resolution purposes.
• For Pros, we collect bank account or debit card details through Stripe Connect for payout processing.

Identity verification data

• For Pros and Harbor Helpers, we facilitate background checks through our partner, Checkr. This may involve Social Security numbers, driver's license numbers, and date of birth.
• This sensitive information is processed directly by Checkr. Home Harbor receives only the pass/fail result and relevant flags — we do not store SSNs, license numbers, or other government ID details on our servers.

Location data

• Property addresses for service matching and scheduling
• GPS data for crew clock-in/clock-out verification (Pros and Helpers, only during active jobs)
• General location (city/region) for search and matching purposes

Communication data

• Messages exchanged through the Platform's messaging system
• Call metadata (duration, timestamps) from masked phone calls routed through Twilio — we do not record call audio
• Customer support correspondence

Usage and device data

• Pages visited, features used, and actions taken on the Platform
• Device type, operating system, browser type, and screen resolution
• IP address and general geolocation derived from it
• Referring URLs and search terms that led you to our site

Photos and media

• Job completion photos uploaded by Pros
• Portfolio and storefront images
• Photos submitted as evidence in safety reports or disputes

We use the information we collect for the following purposes:

• Service matching: Connecting homeowners with qualified Pros and Harbor Helpers based on location, service type, availability, and ratings
• Payment processing: Collecting payments, holding escrow, releasing funds, processing refunds, and managing milestone-based payments
• Identity and credential verification: Facilitating background checks, verifying licenses and insurance, and confirming user identities
• Communication: Enabling masked phone calls and in-app messaging between homeowners and Pros
• Safety and content moderation: Detecting and blocking prohibited content, investigating safety reports, and enforcing community guidelines
• Performance analytics: Calculating Pro health scores, response rates, completion rates, and other metrics displayed on profiles
• Maintenance score tracking: Helping homeowners track property maintenance history and upcoming needs
• Marketing communications: Sending service recommendations, promotions, and platform updates (with opt-out available)
• Platform improvement: Analyzing usage patterns to improve features, fix bugs, and develop new services
• Legal compliance: Meeting tax reporting, regulatory, and legal obligations

We share your information only as necessary to operate the Platform and provide our services. We never sell your personal information to data brokers, advertisers, or other third parties.

With Pros you book

When you book a service, we share your name, property address, and project details with the assigned Pro so they can perform the work. We do not share your phone number directly — all calls are routed through masked numbers.

With service providers and partners

• Stripe — Payment processing, escrow, and Pro payouts
• Checkr — Background checks for Pros and Harbor Helpers
• Amazon Web Services (AWS) — Cloud infrastructure and data storage
• Twilio — Masked phone calls and SMS notifications
• Clerk — Authentication and account management

Each of these partners is contractually bound to use your data only for the specific services they provide to Home Harbor and to maintain appropriate security measures.

With law enforcement and legal processes

We may disclose your information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to protect the safety of any person; to prevent fraud; or to protect Home Harbor's legal rights.

In business transfers

If Home Harbor is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

We take the security of your data seriously and implement multiple layers of protection:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security)
• Encryption at rest: Sensitive data stored on our servers is encrypted at rest using AES-256 encryption
• PCI compliance: All payment processing is handled by Stripe, which is PCI DSS Level 1 certified. We never see or store your full credit card number.
• Background check isolation: Sensitive identity documents are processed directly by Checkr. We store only the pass/fail outcome.
• Phone number masking: All calls between homeowners and Pros are routed through Twilio proxy numbers. Neither party ever sees the other's real phone number.
• Access controls: Internal access to user data is restricted by role-based permissions and follows the principle of least privilege
• Security monitoring: We conduct regular security audits and monitor our systems for unauthorized access attempts

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to following industry best practices and promptly addressing any vulnerabilities that are discovered.

You have the following rights regarding your personal information:

• Access: You can view the personal information we hold about you at any time through your account settings or by contacting us
• Correction: You can update or correct inaccurate information through your account settings or by contacting our support team
• Deletion: You can request deletion of your account and personal data by contacting privacy@homeharbor.app. We will process deletion requests within 30 days, subject to legal retention requirements
• Data portability: You can request a machine-readable export of your personal data
• Marketing opt-out: You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email, or by updating your notification preferences in account settings
• Communication preferences: You can manage which types of notifications you receive (email, SMS, push) through your account settings. Note that transactional notifications related to active bookings cannot be disabled.

California residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we share it
• Right to delete: You may request that we delete your personal information, subject to certain legal exceptions
• Right to opt out of sale: We do not sell your personal information. If this changes in the future, we will provide a clear opt-out mechanism.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights
• Right to correct: You may request that we correct inaccurate personal information
• Right to limit use of sensitive personal information: You may request that we limit the use of sensitive personal information to what is necessary to provide the services

To exercise any of these rights, contact us at privacy@homeharbor.app or call us. We will verify your identity before processing your request and respond within 45 days.

We use cookies and similar technologies to operate and improve the Platform:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled without affecting Platform functionality.
• Preference cookies: Remember your settings such as language, region, and display preferences
• Analytics cookies: Help us understand how users interact with the Platform so we can improve the experience. Analytics data is aggregated and anonymized.
• No advertising cookies: We do not use third-party advertising or tracking cookies. We do not participate in ad networks or retargeting programs.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent certain Platform features from functioning properly.

We respect Do Not Track (DNT) signals sent by your browser. When we detect a DNT signal, we disable non-essential analytics tracking for that session.

We retain your data only as long as necessary to fulfill the purposes described in this policy:

• Active accounts: Your data is retained for as long as your account remains active
• Deleted accounts: Upon account deletion, we purge your personal data within 30 days, except where retention is required by law or necessary to resolve pending disputes
• Reviews: Reviews remain visible on the Platform even after the reviewer's account is deleted, but are anonymized (the reviewer's name is removed)
• Financial records: Transaction and tax-related records are retained for 7 years in compliance with IRS requirements and applicable financial regulations
• Background check results: Pass/fail results are retained in accordance with Checkr's data retention policy and applicable law. We do not retain the underlying sensitive documents.
• Communication logs: Message and call metadata are retained for 2 years after the associated booking, or longer if needed for an ongoing dispute
• Usage and analytics data: Aggregated and anonymized usage data may be retained indefinitely for Platform improvement purposes

The Home Harbor Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a person under 18, we will take prompt steps to delete that information and terminate the associated account. If you believe that a minor has provided us with personal information, please contact us immediately at privacy@homeharbor.app.

Home Harbor is currently available only in the United States. Our servers and service providers are located in the United States. If you access the Platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using the Platform from outside the United States, you consent to the transfer and processing of your information in the United States.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

• For material changes, we will provide at least 30 days' advance notice via email and/or a prominent notice on the Platform
• The updated policy will include a revised "Last updated" date at the top
• Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes
• If you disagree with the updated policy, you should stop using the Platform and may request deletion of your data

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy inquiries: privacy@homeharbor.app
• General support: support@homeharbor.app
• Mail: Home Harbor, Inc., Privacy Team, Phoenix, AZ

We aim to respond to all privacy-related inquiries within 30 days. For CCPA/CPRA requests, we will respond within the legally required 45-day period.