Privacy policy

Learn how Bot Harbour collects, uses, stores, protects, and shares personal information, and how to exercise your privacy and data rights.

Overview

Bot Harbour ("we", "us", "our") operates the Bot Harbour platform at botharbour.com. This Privacy Policy describes how we collect, use, and protect personal information when you use our platform. We collect only what we need to operate the service. We never sell your personal data to third parties. We apply data minimisation principles throughout our infrastructure.

Account information

When you create an account, we collect your email address, username, and optionally your first and last name. If you sign in via Google OAuth, we receive your name and email from Google.

Purchase information

When you purchase a dataset, we record the transaction details (amount, date, items purchased) in association with your account. Full payment card details are handled exclusively by our payment processor and are never stored on our servers.

Usage data

We collect standard server logs including IP address, browser type, referring page, and pages visited. This data is used for security monitoring and aggregate analytics only.

Communications

If you contact us via the contact form or email, we retain the content of that communication to respond and to maintain a record of our interactions.

How we use data

We use your information solely to: Create and maintain your account; Process and fulfil dataset purchases; Send transactional emails (purchase confirmations, download links, password resets); Respond to support requests and contact form submissions; Detect and prevent fraudulent or abusive activity; Improve platform performance using anonymised aggregate data. We do not use your data for behavioural advertising, profiling, or AI model training. We do not send marketing emails unless you have explicitly opted in.

Information sharing

We pass your billing details to our payment provider (Stripe/PayPal) to process transactions. Their privacy policies govern that handling. Our hosting, database, and storage providers may process your data on our behalf under data processing agreements. We may disclose information when required by law, court order, or to protect the rights, property, or safety of our users or the public. We never sell, rent, or trade your personal data to third parties for commercial purposes.

Data retention

We retain your account data for as long as your account is active. Purchase records are retained for seven years to comply with financial record-keeping obligations. Server logs are retained for 90 days then deleted. Contact form submissions are retained for two years then archived. If you delete your account, we anonymise your personal details within 30 days. Purchase records are retained in anonymised form for our financial records.

Your rights

Depending on your location, you may have rights including: Request a copy of the personal data we hold about you; Request that inaccurate or incomplete data be corrected; Request that we delete your personal data (subject to legal retention obligations); Request your data in a machine-readable format; Object to certain types of processing; Request that we restrict how we process your data.

Exercise your rights

To exercise any of these rights, email [email protected]. We will respond within 30 days. If you are based in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority.

Cookies

We use the following types of cookies: Essential cookies: Required for the platform to function: session authentication, CSRF protection, and cart state. These cannot be disabled. Analytics cookies: Anonymous usage statistics (page views, session duration) using a privacy-first analytics tool. No cross-site tracking. You can opt out in your account settings. We do not use advertising, tracking, or social media cookies. We do not load third-party scripts from advertising networks.

Security

No system is completely secure. If you discover a security vulnerability, please report it responsibly to [email protected] before public disclosure.

Children's privacy

The platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has created an account, we will delete the account and associated data promptly.

Policy changes

We may update this policy as our practices evolve or when required by law. For material changes, we will notify registered users via email at least 14 days before the change takes effect. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the revised policy.

Contact

For privacy-related questions, data requests, or to report a concern, contact us at: Email: [email protected]. Contact form: botharbour.com/contact. We aim to respond to all privacy inquiries within 5 business days.