Privacy
What we keep, and for how long.
Requesting a berth
When you request a berth we store the name, email address, organization, and note you give us, which products you asked about, and a one-way hash of your network address used only to slow down abuse. We email you once to confirm the address is yours. Nothing is shown to anyone until you've done that.
Requests we decline, and requests never confirmed, are deleted after ninety days. Requests we approve become an account; the details then live with that account until it's closed.
Notes from the yard
If you leave an email address in the box on the front page we store that address, the time, and the same one-way hash of your network address. We send one email asking you to confirm; until you do, the address isn't on any list, and it's deleted after seven days. Confirmed addresses are used only to send notes from the yard, which are rare, and are removed on request. Each note, and how many addresses received it, is kept in the admin history.
Your content stays yours
Every conversation, file, skill, goal and preference in Harbor belongs to one account and is only ever shown to that account. Personal skills and memories never enter another person's prompts. The only shared material is skills an Officer has explicitly published for the crew.
We do not train models on your content. Your conversations are sent to the model providers we run, to answer you, and nowhere else.
Activity is logged. Sign-ins, tool approvals, permission changes, and administrative actions are written to an append-only audit trail, so both you and we can see what happened to your account. Accounts that put the platform or other people at risk can be disabled without notice.
Retention
| What | How long |
|---|---|
| Your conversations, files, and skills | Until you delete them. Deleted conversations can be restored for 30 days, then everything under them is erased. |
| Uploads (images, documents) | Erased with the conversation that referenced them, on the same 30-day schedule. |
| Data exports you request | Download link for 24 hours, then the archive is deleted. |
| Guest accounts | Disabled after 90 days without a sign-in; erased 90 days after that. Crew and Officer accounts do not idle out. |
| Deleted accounts | Content is trashed the moment you confirm. Rows, workspaces and uploads are erased on the next hourly sweep. |
| Berth requests we decline or that go unconfirmed | Ninety days. |
| Notes from the yard (the email box on the front page) | Unconfirmed addresses are deleted after seven days. Confirmed addresses stay until you ask us to remove them. Each note we send, and how many addresses received it, stays in the admin history. |
| Server logs (request lines, errors) | Ninety days. |
| Security and audit events (sign-ins, permission changes, admin actions) | 365 days, then archived to an encrypted export we control. |
Your rights, self-service
In Harbor, open Account. Export my data builds a zip of your profile, conversations, workspace files, uploads and skills; the link is shown to you (and emailed, when mail is configured) and works for 24 hours. Delete my account asks you to type DELETE, trashes all your content immediately, and then hands you to the sign-in service to confirm the deletion there too. You don't have to ask anyone.
Terms of use
These are the terms every account accepts on first sign-in (the same text is shown by the sign-in service). Harbor is a small, invitation-only alpha; using it means you agree to them.
- Keep secrets and other people's data out. Don't paste passwords, API keys, private keys, or personal data about other people into Harbor. Anything you type may be sent to a model provider to answer you.
- No illegal, abusive, or deceptive use. No malware, harassment, fraud, attacks on this or any other system, and no attempts to reach other people's accounts or content.
- Activity is logged. Sign-ins, tool approvals, permission changes, and administrative actions are written to an append-only audit trail. Outbound requests made by tools on your behalf are checked and recorded.
- Your content stays yours and is not used for training. We don't train models on your conversations or files, and we don't show them to other users.
- Allowances apply. Each tier has usage limits. When you reach one, Harbor slows down or says so; it never bills you.
- You can leave with your data. Account › Export my data gives you a zip of everything you own; Delete my account erases it. You don't have to ask anyone.
- Accounts can be disabled without notice when they put the platform, its models or other people at risk, or after long inactivity on a Guest berth.
Where it lives
Harbor runs on hardware we operate. Databases and uploads sit on an encrypted drive with encrypted nightly backups. Sign-in is handled by our own identity service; passwords are stored only there, hashed. Secrets are never stored in the tables that hold your content.
We don't use analytics scripts, advertising pixels, or third-party trackers on this site. The only outside service that loads here is Cloudflare's bot check on the request form and the email box.
Questions or removal requests: access@shipwrightcode.ai.