Privacy Policy

Information We Collect

• Account and profile info: name, email, phone number, brokerage, agent profile, business or brokerage mailing address, signature block, and license or jurisdiction information if collected or provided.
• Team and workspace data: teams, members, roles, invites, workspace settings, visibility settings, plan or entitlement status, and team activity.
• Listing, property, and farm data: listing addresses, property details, farm boundaries, nearby homeowner records, lead status, notes, dispositions, call outcomes, follow-up tasks, exports, and related audit history.
• Homeowner and prospecting data: names, property addresses, mailing addresses, phone numbers, emails, property attributes, ownership signals, estimated values, DNC or suppression flags where applicable, and provider match information.
• Campaign and suppression records: generated copy, campaign records, exported recipient lists, unsubscribes, opt-outs, do-not-contact flags, and suppression records.
• AI inputs and outputs: prompts, listing/contact context, notes, scripts, emails, texts, summaries, transcripts, and other information needed to fulfill user-triggered AI features.
• Usage and purchase information: device type, OS version, app version, diagnostics, crash logs, usage events, and Apple-provided purchase transaction identifiers. We never see your payment card number.

Third-party contact, skip-trace, property, and homeowner data may be inaccurate, incomplete, outdated, or misattributed. Users should verify contact and property information before relying on it.

Sources & Device Permissions

We collect information directly from you when you create an account, complete your profile, set up a team, upload or enter listings, import contacts, create farms, write notes, generate drafts, export data, contact support, or otherwise use Harvest.

We may receive information from team members or administrators, public and property records, third-party property/contact/skip-trace providers, service providers, Apple, authentication providers, email providers, diagnostics providers, and AI providers when you trigger AI features.

Device permissions are optional and controlled by your device settings. Harvest requests permissions only when a feature needs them.

How We Use Your Information

• Create farms around listings, properties, and nearby homeowner opportunities.
• Identify property context and organize homeowner, lead, and follow-up workflows.
• Generate user-triggered scripts, texts, emails, campaign copy, summaries, and follow-up drafts.
• Maintain team separation, permissions, activity reporting, and workspace audit history.
• Apply opt-out, unsubscribe, DNC, do-not-contact, and suppression controls where available.
• Process App Store purchase status, send transactional messages, troubleshoot issues, prevent abuse, and secure the service.

AI Processing

When you generate a follow-up message, post-call summary, campaign draft, text, email, or calling script, Harvest may send the relevant context needed to supported third-party AI providers solely to fulfill that request.

Harvest does not sell customer data and does not use customer data to train Harvest-owned general AI models. We configure supported AI providers, where available, to process customer data for the requested feature and not to train their public models. Third-party AI providers process data under their applicable terms and data-processing commitments.

AI output may be wrong, incomplete, outdated, biased, or unsuitable. Users should not enter unnecessary sensitive information and must review AI output before use.

Sharing

We may also disclose information when required by law, court order, or to protect the rights and safety of Harvest, our users, or the public.

Retention

• Account data is retained while your account is active.
• If you delete your account (Settings → Account & Security → Delete my account), we remove or de-identify account data within a reasonable period, except where retention is needed for legal, tax, audit, payment, backup, security, fraud-prevention, abuse-prevention, or dispute-resolution purposes.
• Team workspace data may remain available to a team, brokerage, or administrator where appropriate.
• Suppression, unsubscribe, opt-out, and do-not-contact records may be retained as needed to honor those requests.
• Raw audio, transcripts, or summaries are retained according to the feature behavior and user/team settings available in the app, subject to backup, audit, legal, and security retention.

Your Rights

Residents of certain jurisdictions, including California and other U.S. states, may have additional privacy rights. If you use Harvest as part of a team, some workspace data may be controlled by your team, brokerage, or administrator.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of certain sale, sharing, targeted advertising, or profiling activities where applicable.
• Limit certain uses of sensitive personal information where applicable.

The categories of information we may collect include identifiers, account/profile information, commercial information, internet or device activity, geolocation information if you grant location permission, audio information if you use voice features, professional information, inferences or product analytics, and property/contact/prospecting information. Sources and purposes are described above.

Harvest does not sell personal information for money and, based on the current launch implementation, does not share personal information for cross-context behavioral advertising.

To exercise these rights, email Joe@harvest-app.net. We will respond within 45 days. We will not discriminate against you for exercising your rights.

EU / UK Privacy Rights (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, you have the right to:

• Access your personal data.
• Request rectification or erasure.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with your local supervisory authority.

The legal bases on which we process your data:

• Contract: to provide the service you signed up for.
• Legitimate interest: to improve, secure, and protect the service.
• Consent: for optional features you explicitly enable, such as AI summaries, location, and notifications.
• Legal obligation: when required by law.

To exercise any GDPR right, email Joe@harvest-app.net.

Security

• All data is encrypted in transit using HTTPS / TLS.
• Data at rest is encrypted by our infrastructure providers (Supabase, Apple).
• Authentication is handled by Supabase Auth with industry-standard password hashing.
• We review the security practices of our infrastructure providers annually.
• No system is perfectly secure. Use a strong, unique password and enable device-level biometrics.

If you discover a security vulnerability, email Joe@harvest-app.net. We review responsible reports and may follow up for additional detail.

Children's Privacy

Harvest is a business tool for licensed real estate professionals and is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children under 13. If you believe a child has provided data to Harvest, email Joe@harvest-app.net and we will delete it promptly.

International Data Transfers

Harvest's primary infrastructure (Supabase, Anthropic, OpenAI, and Resend) operates from the United States. If you are in the EU or UK, your data may be transferred to and processed in the US. Where required by law, we rely on Standard Contractual Clauses approved by the European Commission and the UK ICO.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email at least 7 days before they take effect. The "Effective" date at the top of this page always reflects the latest revision.

Contact