Legal

Privacy policy

Last updated: 7 November 2026. This is the launch policy for AreaHarbor. It will be reviewed with our payment provider and hosting providers before paid checkout opens, and any change will be dated here.

Who we are

AreaHarbor is a service that helps agencies generate service-area landing pages, review funnels, and review-request templates for local-service businesses. In this policy, “we” means the AreaHarbor operator. “Agency customer” means the agency or freelancer with a AreaHarbor account. “End customer” means a customer of a local-service business who uses a review funnel.

What we collect, and why

• Account details (agency customers): name, email address, and billing details handled by our payment provider. We use these to run the account, take payment, and send service messages. We never see or store full card numbers — payment is handled by our merchant of record.
• Client business details (entered by agency customers): business name, trade, services, service areas, phone number, booking link, and Google review link. Most of this is information the business already publishes publicly. We use it only to generate that client's pages, funnel, and templates.
• Private feedback (end customers): if an end customer chooses the private feedback route in a review funnel, we collect their name (if they give it) and their message, and pass it to the relevant business and its agency. We do not publish private feedback, and we do not use it for marketing.
• Basic usage counts: pages published and review-link clicks, so agency customers can see whether the service is being used. We use privacy-respecting analytics and do not build advertising profiles.
• Support messages: what you send us through the contact form or by email, kept so we can answer and follow up.

What we do not do

• We do not sell personal data.
• We do not use private feedback, support messages, or client details to train models for other customers.
• We do not post, alter, or suppress public reviews. The review funnel offers a private route first; it never blocks an end customer from reviewing publicly.
• This demo website collects nothing: the generator and contact form on this site run in your browser and transmit nothing.

Who processes data for us

We use a small set of providers to run the service: Cloudflare (hosting and infrastructure), our merchant of record — Lemon Squeezy, Paddle, or Polar — (payments and tax), and Resend (transactional email). Each processes only the data needed for its job, under its own privacy terms. This list will name the exact live providers before paid launch.

How long we keep it

Account and client details are kept while the account is active and for a short period afterwards for billing and legal records, then deleted or anonymised. Private feedback is kept for the business and agency to act on and is deleted on request by the business or the person who sent it.

Your rights

You can ask us what personal data we hold about you, ask for it to be corrected or deleted, or object to how we use it. End customers who sent private feedback have the same rights over that feedback. Contact us through the contact form and we will respond within 30 days.

Changes

If this policy changes in a way that affects how your data is used, we will update this page, change the date at the top, and notify agency customers by email before the change takes effect.