Privacy Policy

1. Scope

This Privacy Policy applies to the Harvest Search Partners website, workspace, browser extensions, APIs, and related services (the “Service”). It covers personal information we process about users of the Service and personal information contained in business-research records.

When an organization provides your account, that organization may control your account and Customer Data. Its own privacy notices and policies may also apply.

2. Information we collect

Account and organization information

Name, work email, username, firm name and type, account role, encrypted or hashed authentication information, email-verification status, consent timestamps, and organization membership.

Service and device information

Features used, searches run, records processed, usage and billing events, support interactions, approximate location derived from IP address, browser and device information, timestamps, diagnostic logs, and security events.

Customer Data and integrations

Files, spreadsheets, search criteria, notes, messages, assignments, pipeline records, and other content you or your organization submit. If you connect Google or another integration, we receive the account identifiers, authorization tokens, and content needed to perform actions you request. We do not receive your Google password.

Business-research information

Business names, locations, websites, public registration records, professional contact information, ownership indicators, and related research output. Some of this information may identify a business owner, officer, employee, or other professional contact.

Payment information

If payment is enabled, our payment processor handles card and bank details. Harvest receives transaction identifiers, subscription status, billing contact information, and limited payment metadata, but not full payment-card numbers.

3. Where information comes from

We collect information directly from users and their organizations, automatically through use of the Service, from connected services at a user’s direction, from public records and websites, and from commercial providers of business listings or professional contact information.

4. How we use information

• provide, operate, personalize, and improve the Service;
• authenticate users, maintain sessions, and protect accounts and organizations;
• run searches, enrich records, synchronize connected services, and create requested exports;
• measure usage, administer subscriptions, process payments, and enforce plan limits;
• send transactional messages such as invitations, verification notices, password resets, assignments, and run-completion notices;
• respond to support requests and communicate Service updates;
• detect, investigate, and prevent abuse, fraud, security incidents, and technical failures; and
• comply with law and establish, exercise, or defend legal claims.

5. How we disclose information

We may disclose information:

• Within your organization, according to roles, sharing settings, assignments, and links configured by authorized users.
• To service providers that host data, supply business listings, process AI or web research, deliver email, provide analytics and security, support connected workspaces, or process payments. They may process information only to provide services to us and under appropriate contractual restrictions.
• At your direction, including when you export data, connect an integration, create a shared link, or send information to another person or service.
• For legal and safety reasons, if reasonably necessary to comply with law, respond to valid process, protect rights and safety, or investigate misuse.
• In a business transfer, as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate confidentiality protections.

Public or link-shared pipeline content can be viewed by anyone with the applicable link until an authorized user restricts or disables that link.

6. Cookies and similar technologies

The Service uses cookies and browser storage that are necessary to keep you signed in, secure authentication, remember interface state, support offline or installable-app features, and prevent abuse. Connected or embedded third-party services may set their own cookies under their privacy policies. You can control cookies through your browser, but blocking required storage may prevent sign-in or other features from working.

7. Retention

We retain account information and Customer Data while the account or organization remains active and as needed to provide the Service. A user can delete owned pipelines and, subject to organization safeguards, delete their account from account settings. Account deletion removes the account and owned research content from active systems.

We may retain limited information for longer where reasonably necessary for legal compliance, security, fraud prevention, dispute resolution, backup recovery, or financial recordkeeping. For example, transaction and billing ledger records may be retained for applicable tax and accounting periods, and organization audit events may remain with personal references removed.

8. Security

We use administrative, technical, and organizational measures designed to protect information. These include organization-scoped access, encrypted connections, password hashing, session revocation, role-based permissions, and additional authentication options. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your credentials, devices, exports, and shared links and for promptly reporting suspected unauthorized access.

9. Your choices

• Profile. Update your name and work email in account settings.
• Export. Download your profile, organization details, pipelines, stored rows, and—when applicable—billing records.
• Delete. Delete your account and owned pipelines in account settings. An organization owner may need to transfer ownership or remove other members first.
• Integrations. Disconnect linked Google services in account settings and revoke access from the connected provider.
• Notifications. Manage available assignment-email preferences in account settings. Service and security notices may still be sent where necessary.
• Sharing. Organization members with permission can change access roles or disable public links.

10. Privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection concerning your personal information, and to appeal a denied request. You may also have a right to withdraw consent where processing relies on consent.

Use the self-service controls described above or contact us to make a request. We may verify your identity and authority before acting. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.

If your information is controlled by a Harvest customer organization, direct your request to that organization first. We will support the organization in responding as required.

11. International use and children

Harvest operates in the United States. If you access the Service from another country, information may be transferred to and processed in the United States and other locations where our providers operate, subject to applicable safeguards.

The Service is intended for business users and not for children. We do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this policy as the Service or applicable requirements change. We will post the updated policy here and revise the effective date. If a change materially affects how we use personal information, we will provide additional notice through the Service or using contact information associated with your account.

13. Contact

Privacy questions and requests may be sent using the support contact listed in your Harvest workspace or through the Harvest Search Partners website.