Privacy Policy

Last Updated: January 15, 2026

1. Introduction

Work In Biotech LLC d/b/a Harbor ("Harbor," "we," or "us") provides a recruiting platform and browser extension (the "Services"). We are committed to protecting the privacy of our Users (recruiters/hiring managers/account owner) and the Candidate and Client Data they manage.

2. Information We Collect

A. Information You Provide (User Data)

• Account Information: Name, email address, password, and billing details (processed by our payment provider).
• Communications: Feedback, support tickets, and direct emails.

B. Information Processed on Your Behalf (Candidate Data and Client Data)

• ATS Data and CRM data: When you use Harbor to track applicants or clients, you may upload resumes, notes, and contact details. We process this data solely as a Data Processor on your behalf; you are the Data Controller.
• Imported Profiles: Data you explicitly choose to save from third-party sources (e.g., LinkedIn, GitHub) via our Extension.

C. Automatically Collected Information (Usage Data)

• Device Data: Browser type, operating system, and IP address.
• Extension Activity: While our extension may request broad permissions (e.g., <all_urls>) to function across various job boards, we only actively parse data from domains you specifically invoke the tool on (e.g., LinkedIn, GitHub).

3. How We Use Information

We use your data to:

• Provide the Service: Authenticate users, store candidate profiles, and sync data between the Extension and Dashboard.
• AI Features: Some features (e.g., summarizing resumes, generating outreach) utilize Artificial Intelligence models. Data sent to these models is for processing only and is not used to train public AI models.
• Improve Reliability: Monitor error logs (e.g., stack traces) to fix bugs.

4. Sharing & Disclosure

We do not sell your personal data. However, we share data with trusted third-party service providers ("Sub-processors") essential to our infrastructure:

• Hosting & Database: (AWS, Google Cloud, Microsoft Azure, Digital Ocean) to store data securely.
• AI Providers: (Fireworks AI) to generate text summaries.
• Payment Processors: (Stripe) to handle billing.
• Analytics: (Plausible) to understand product usage.

These providers are bound by strict confidentiality agreements and may only use data to provide services to Harbor.

5. Google User Data & Chrome Extension Policy

• Limited Use: Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Extension Permissions: We request only the permissions necessary to overlay Harbor tools on recruiting websites. We do not harvest browsing history or data from unrelated websites.

6. Data Retention & Deletion

• User Account: We retain your account data as long as your subscription is active. You may request deletion at support@findharbor.com.
• Candidate Data: You control the retention of candidate profiles. If you delete a candidate from your dashboard, it is removed from our active databases immediately (and from backups within 30 days).

7. Your Rights (GDPR / CCPA)

Depending on your location, you may have rights to access, correct, delete, or port your personal data. To exercise these rights, please email support@findharbor.com.

8. Security

We implement industry-standard security measures (encryption at rest and in transit) to protect data. However, no transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your information.

9. Contact Us

For questions about this policy or our privacy practices:

Work In Biotech LLC
Email: support@findharbor.com