Privacy

Effective: 2026-01-01

What we collect

• Account info: name, email, company name, phone (for SMS alerts).
• Monitor zones you define: location polygons and labels.
• Audit trail of your privileged actions (logins, exports, role changes).
• Server logs of API requests (IP, user-agent, timestamp).

What we don’t collect

• We do NOT sell or share your data with third parties for advertising.
• We do NOT track your location continuously - we use your monitor zones, which YOU define.
• We do NOT include homeowner names in canvassing exports by default.

Third-party processors

• Twilio (SMS delivery + voice escalation)
• SendGrid (transactional email)
• Firebase Cloud Messaging (push notifications)
• Stripe (billing)
• Vercel (hosting)
• Supabase (database + auth)
• Anthropic (LLM via Vercel AI Gateway, for alert copy and event narrative)
• Meta + X (social-signal ingestion — public posts only, original text never republished)

Public share links

When you generate a share link for an event (to send to an adjuster), the recipient gets a read-only view of the event details and evidence trail. Parcel addresses are included only if you opt in. You can revoke any share link at any time.

Data retention

Account data is retained as long as your account is active. Hail events and audit logs are retained indefinitely for legal-evidence purposes per the Scope of Work §4.1 immutability requirement. Server logs are retained 90 days.

Data subject rights

Email privacy@harness10.com to request a copy of your data, correct inaccuracies, or delete your account (subject to the audit log retention requirement above).