Privacy Policy
Last updated [date] · Effective [date]
Template for review. This policy describes what the Harborline app as built actually collects and which outside services it uses. Items in [brackets] need your details, and a lawyer should review the final text before launch. Financial companies in the US must also give customers a privacy notice under the Gramm-Leach-Bliley Act, and state laws such as the CCPA may apply.
We collect the information we need to open and run your account, keep it secure and meet our legal duties. We don't sell your personal information.
The short version
- We collect your identity details, contact details, financial information and how you use the app.
- We use it to run your account, protect it from fraud, support you and follow the law.
- We share it only with companies that help us provide the service, and with authorities when the law requires it.
- We don't sell your personal information or share it for cross-context advertising.
- You can see, correct and download your information, and choose which messages you get.
What we collect
Information you give us
- Identity: legal name, date of birth, Social Security or tax ID number, and a photo ID. The law requires us to verify who you are before we open an account.
- Contact: email address, mobile number and mailing address.
- Financial: linked bank accounts, crypto wallet addresses you save, employment, income and investment experience.
- Messages: what you write to us in live chat or email, and call recordings if you phone us.
Information created when you use Harborline
- Account activity: deposits, withdrawals, trades, balances, statements, price alerts and your watchlist.
- Security: sign-in times, devices and browsers, approximate location from IP address, two-step verification and passkey records.
- Usage: which pages and features you use, so we can fix problems and improve the app.
Information from others
- Identity verification and fraud-prevention services.
- Your bank, when you link an account.
- Blockchain networks, for crypto deposits and withdrawals, which are public by design.
How we use it
- Open, run and service your account, including deposits, withdrawals and statements.
- Verify your identity and protect you and us from fraud and unauthorized access.
- Meet legal obligations, including anti-money-laundering rules, tax reporting (such as Form 1099) and record-keeping.
- Answer your questions in live chat and email.
- Send the notifications you choose, such as price alerts and news, plus required security and transfer notices.
- Improve the app, find bugs and understand which features are useful.
Who we share it with
We share information only as described here.
| Who | Why | What they receive |
|---|---|---|
| Harborline Clearing Corp | Holds your securities and cash | Identity, account and transaction details |
| [Crypto custodian] | Holds crypto and creates your deposit addresses | Account ID, crypto transactions and wallet addresses |
| [Identity verification provider] | Confirms your identity when you sign up | Name, date of birth, ID document and SSN |
| [Bank linking provider] | Links and verifies your bank account | Bank account and routing details |
| Supabase | Stores your sign-in details and saved app data, and sends email confirmation codes | Name, email, a scrambled (hashed) version of your password, sign-in times, and your watchlist, price alerts, settings and practice transfers |
| Tawk.to | Runs our live chat | Your name, email and chat messages |
| TradingView | Shows live charts, prices and news in the app | Standard browser data such as IP address when the widgets load. We don't send them your account details. |
| [Email and SMS provider] | Sends codes, alerts and statements | Email address, phone number and message content |
| Regulators and law enforcement | When the law requires it, such as a subpoena or regulatory exam | What the request lawfully covers |
If Harborline is involved in a merger or sale, your information may transfer to the new owner under this policy.
Cookies and storage
We use a small amount of storage in your browser to make the app work:
| Name | What it does | How long |
|---|---|---|
harborline-state | Keeps your recent activity and watchlist while you move between pages | Until you close the tab |
harborline-user | Remembers your name and email while you're signed in | Until you close the tab |
harborline-chat | Keeps your support chat open between pages | Until you close the tab |
harborline-masked | Remembers whether you chose to hide balances | Until you clear it |
| [Sign-in session cookie] | Keeps you signed in securely | [Session length] |
Tawk.to and TradingView may set their own cookies when their features load. See their privacy policies for details. We don't use advertising cookies.
How we protect it
- Encryption in transit (HTTPS) and at rest.
- Two-step verification for sign-in and withdrawals, with passkeys available.
- Alerts for new-device sign-ins, deposits and withdrawals, which you can't turn off.
- Access to customer data limited to staff who need it, with activity logged.
We will never ask for your password, verification codes or recovery phrases, and we will never ask you to send money or crypto to anyone. If someone does, it isn't us. Report it to [security@yourdomain.com].
How long we keep it
We keep account records for as long as your account is open and then for the period the law requires, which for brokerage records is generally at least [six] years. You can still get statements and tax forms during that time. When we no longer need information, we delete it or remove anything that identifies you.
Your choices and rights
Depending on where you live, you may have the right to:
- Know what personal information we hold and get a copy of it.
- Correct information that's wrong.
- Ask us to delete information. We may need to keep some records because the law requires it, and we'll tell you if so.
- Limit how we share information with affiliates for marketing, where the law gives you that choice.
- Not be treated differently for using these rights.
To make a request, use the button above or contact us below. We'll verify your identity first and respond within [45] days.
Children
Harborline accounts are only for adults aged 18 and over. We don't knowingly collect information from children.
Changes to this policy
If we make important changes, we'll tell you by email or in the app before they take effect. The date at the top shows when this policy last changed.
Contact us
[Legal entity name]
[Street address, City, State ZIP]
Email: [privacy@yourdomain.com]
Phone: [1-800-000-0000]
You can also message us through live chat in the app.