Privacy Policy

1. Introduction

Harbor Shift is operated by Harbor Ventures LLC (“Harbor,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect, why we use it, when we share it, how long we retain it, and the choices available to you.

Harbor Shift is designed around a simple boundary: a sponsor may fund access and see broad participation milestones, while your career content remains private to you and authorized Harbor personnel.

2. Information We Collect

• Invitation and account information: name, email address, account identifier, invitation status, authentication events, and account status.
• Career information: résumés, work history, education, certifications, skills, professional links, biography, corrections, and verified profile facts.
• Preferences and consent: policy versions, required permissions, optional communication choices, and the time a choice was recorded.
• Participation information: broad workflow milestones, completion state, and sponsor program eligibility.
• Communications: transactional email status, support requests, and messages you choose to send us.
• Billing and access: Stripe customer and subscription identifiers, subscription state, sponsored-seat quantity, invoice or refund status, amounts, currency, and entitlement dates. Stripe, not Harbor Shift, collects payment-card and bank-account details.
• Security and technical information: device and browser details, IP address, request metadata, security events, audit records, and privacy-scrubbed error diagnostics.

3. Information We Do Not Need

Do not provide a Social Security number, full date of birth, street address, salary history, medical details, financial-account information, immigration documents, or reference contact information unless a future feature clearly requests it and explains why.

4. How We Use Information

• Activate and secure your account and invitation.
• Build, display, and let you verify your private career profile.
• Provide assessments, path exploration, skill development, and career materials.
• Record consent and honor communication preferences.
• Send transactional messages and optional guidance you request.
• Prevent abuse, investigate incidents, maintain auditability, and improve reliability.
• Comply with legal obligations and enforce our Terms of Service.

5. Sponsor-Visible and Private Information

You choose one of three sponsor visibility levels:

• Bare Minimum: your activity remains within anonymous program totals.
• Limited: your name, broad progress, and planned training.
• Full: Limited information plus your profile contact/location summary, primary career direction, and next learning milestone.

At every level, a sponsor does not receive through Harbor Shift:

• Your résumé or original uploaded document.
• Your private or verified profile and corrections.
• Your assessment answers, coaching notes, evidence, or application activity.
• Your detailed consent history.

You may change your level from Account. Changes affect future sponsor dashboard views and are recorded for accountability. Separate career-plan share links remain under your control.

6. AI and Model Training

Harbor Shift may use automated or AI-assisted systems to structure information and generate suggestions. We do not use your personal career information to train Harbor Shift AI models. We send information to a service provider only when needed to provide an enabled feature and subject to contractual and technical safeguards.

Automated output is a starting point. You can review and correct profile facts before they are treated as verified.

7. How We Share Information

We do not sell personal information or use it for targeted advertising.

We may disclose limited information to:

• Service providers supporting hosting, authentication, private storage, email delivery, payment processing, security, and privacy-safe error monitoring.
• Authorized Harbor personnel who need access for support, safety, compliance, or documented operations.
• Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security.
• A successor in a merger, financing, acquisition, or sale, subject to appropriate confidentiality and notice requirements.

8. Document Access and Safety

Uploaded documents are stored privately and are not available to sponsors. When operational access is necessary, only specifically authorized Harbor staff may request a short-lived download link. The access is audited. Initial PDF safety checks reduce risk but are not a guarantee that a file is malware-free.

9. Retention and Deletion

We retain an active account’s current profile and current documents while needed to provide the Service, unless you request deletion or a shorter legal requirement applies. Operational records have defined limits:

• Quarantined uploads: up to 24 hours.
• Superseded résumés and extracted artifacts: up to 30 days.
• Completed workflow records: up to 90 days.
• Delivered email-outbox records: up to 30 days.
• Security and audit events: up to two years.

Account deletion requires verification. After verification, we delete or de-identify covered account and career information through an operational process. We may retain a minimal consent, security, legal, or transaction record when necessary to document compliance, prevent fraud, resolve disputes, or meet legal obligations. Backup copies age out according to backup schedules.

10. Security

We use safeguards appropriate to the sensitivity of career information, including encrypted connections, private storage, access controls, short-lived links, audit records, rate limits, secret management, and privacy scrubbing for monitoring data. No system can be guaranteed completely secure.

11. Your Choices and Privacy Rights

Depending on your location, you may have the right to:

• Access and receive a copy of personal information.
• Correct inaccurate information.
• Request deletion of covered information.
• Withdraw optional consent or unsubscribe from optional email.
• Appeal a privacy-request decision where applicable.
• Receive equal service without discrimination for exercising a privacy right.

We may need to verify your identity before completing a request. Because we do not sell personal information or use it for targeted advertising, there is no sale or targeted-ad sharing from which to opt out.

12. Cookies and Monitoring

We use essential cookies and similar storage to provide authentication, security, workflow continuity, and saved drafts. We may collect limited, privacy-scrubbed performance and error information. We do not use advertising trackers or session replay.

13. Children’s Privacy

Harbor Shift is for adults 18 and older. We do not knowingly collect personal information from children. If we learn that we have, we will take steps to delete it.

14. Third-Party Links

The Service may link to websites or services we do not control. Their privacy practices are governed by their own policies.

15. Changes to This Policy

We may update this Privacy Policy. We will post the revised policy with a new effective date and provide additional notice when legally required.

16. Contact

Privacy questions and requests may be sent to service@harbor-shift.com.