Privacy Policy

PLACEHOLDER: draft document. For urgent privacy questions, write to privacy@harbor.app.

What information we collect

• Account: email, name, profile photo (from Google/Microsoft OAuth).
• Workspace: content you or your team enters (donors, donations, contacts, etc.).
• Usage: access logs, per-feature usage metrics (anonymized at the tenant level).
• Billing: payment information processed by Stripe (Fundly never sees your card number).

How we use it

• To provide the Service.
• Operational communications (plan changes, billing reminders, quota alerts).
• Product improvement (aggregated analytics, no workspace content).
• Support when you request it.

We do not sell your data

Fundly does not sell personal data to third parties. Period. We share data with sub-processors strictly necessary to run the Service (Firebase for hosting/storage, Stripe for billing, SendGrid for emails). The full list of sub-processors is available on request.

Your rights (GDPR)

• Access: export all your data from Settings → Data.
• Rectification: edit or correct data from the UI at any time.
• Deletion: cancel the subscription to start scheduled deletion in 90 days, or request immediate deletion at privacy@harbor.app.
• Portability: the GDPR export is parseable NDJSON.

Data residency

By default, data is hosted in Firebase US multi-region. For customers requiring EU residency (strict GDPR), the Enterprise plan can provision in `eur3`. Talk to sales if you need this.

Cookies

Fundly uses only strictly necessary cookies to keep the authenticated session (Firebase Auth). We do not use third-party tracking cookies.

Contact

For privacy questions or GDPR requests, write to privacy@harbor.app.