Privacy Policy

Last updated: 20 October 2025

1. Introduction

HarbourReply ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information:

  • Email address
  • Business name
  • Phone number
  • Billing information

Message Data:

  • Phone numbers of senders and recipients
  • Message content
  • Timestamps
  • Delivery status

Usage Data:

  • IP addresses
  • Browser type
  • Pages visited
  • Time and date of visits

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service
  • Send and receive SMS messages on your behalf
  • Process payments and billing
  • Send service notifications and updates
  • Respond to customer support requests
  • Improve and optimize the Service
  • Comply with legal obligations

4. Data Retention

Message data is automatically deleted after 90 days. Account information is retained as long as your account is active. After account deletion, we retain minimal data for 12 months for legal and accounting purposes.

5. Data Sharing

We share your information with:

  • SMS providers (Sendmode, Twilio) to send and receive messages
  • Payment processors (Stripe) to handle billing
  • Cloud hosting (Supabase, Vercel) to store and process data
  • Law enforcement when required by law

We do not sell your personal information to third parties.

6. Data Location

Your data is primarily stored in EU data centers. Some service providers may process data in the United States under appropriate safeguards (Standard Contractual Clauses).

7. Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS)
  • Encryption at rest
  • Access controls and authentication
  • Regular security audits

8. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure ("right to be forgotten")
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact us at hugh.r.corrigan@gmail.com

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or analytics beyond basic server logs.

10. Children's Privacy

Our Service is not intended for users under 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

12. Contact Us

For privacy questions or to exercise your rights, contact:

Hugh Corrigan trading as HarbourReply
Email: hugh.r.corrigan@gmail.com
Ireland

Data Controller: Hugh Corrigan t/a HarbourReply