Privacy Policy

Phillips Harbor LLC ("Harbor", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at phillipsharbor.com.

Account information: When you sign up via Clerk (our authentication provider), we receive your name, email address, and profile information from your chosen auth provider (GitHub, Google, or email).

Billing information: Payment processing is handled by Stripe. We do not store your credit card numbers. We receive your subscription status, plan tier, and billing email from Stripe.

Usage data: We collect information about how you use Harbor, including: tickers analyzed, agent console sessions, signal scans, and feature usage patterns.

Technical data: IP addresses, browser type, device information, and access timestamps for security and rate limiting purposes.

We use your information to: (a) provide and maintain the Service; (b) process subscriptions and billing; (c) personalize your experience (agent preferences, watchlists, sleeves); (d) communicate with you about your account; (e) enforce rate limits and prevent abuse; (f) improve the Service through aggregated, anonymized analytics.

We use the following third-party services that process your data:

Clerk — Authentication. Processes your login credentials and session tokens. See Clerk's privacy policy at clerk.com/legal/privacy.

Stripe — Payment processing. Handles your billing information. See Stripe's privacy policy at stripe.com/privacy.

Anthropic — AI processing. When you use the Agent Console, your prompts and selected tickers are sent to Anthropic's Claude API for analysis. Anthropic does not use your data for training. See Anthropic's privacy policy at anthropic.com/privacy.

Amazon Web Services — Infrastructure hosting and email delivery (SES).

We retain your account data for as long as your account is active. Agent console sessions and analysis history are retained for 90 days. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

We implement industry-standard security measures including: HTTPS encryption in transit, authentication via Clerk, rate limiting, input validation, and access controls. However, no electronic transmission or storage method is 100% secure.

You have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data; (d) export your data in a portable format; (e) withdraw consent for optional data processing. To exercise these rights, contact privacy@phillipsharbor.com.

Harbor uses essential cookies for authentication (Clerk session cookies) and preferences (theme). We do not use advertising or tracking cookies. Third-party services (Clerk, Stripe) may set their own cookies as described in their respective policies.

Harbor is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

Harbor is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. By using Harbor, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates the most recent revision.

For privacy-related questions or requests, contact us at privacy@phillipsharbor.com or Phillips Harbor LLC, Chicago, IL.