Privacy Policy
Last updated October 29, 2026
Version 2026-10-29
Who we are
HaulHarbor is operated by Zphere Media LLC (“HaulHarbor,” “we,” “us”). We provide inventory, sales, and profit tracking for resellers.
What we collect
Depending on how you use the service, we may process:
Account data — email, password (hashed by our auth provider), store/account name, and settings you enter.
Google sign-in — if you choose Google, we receive your Google name and email through our auth provider.
Marketplace data from eBay — when you connect eBay, we import data needed to run the product (including listings/inventory, orders/fulfillment, and finances/fee-related data within the scopes you authorize). Disconnecting eBay stops further sync; imported data already in your account stays until you delete it.
Inventory and sales you enter — items, costs, lots, sales you record, and related notes.
Uploads — photos and files you upload (including Photobooth images) and spreadsheet imports.
Billing status — plan, subscription status, and renewal dates via Stripe. We never receive or store your full card number; Stripe processes payments.
Support communications — messages you send to support@haulharbor.com.
Signup attribution — a first-touch record of marketing parameters (such as UTM tags), landing path, and referrer, stored in the browser as hh_signup_attr (cookie and localStorage, about 30 days) and, after signup, associated with your account.
Product analytics (app host) — see Analytics below.
Security and operational logs — limited technical logs needed to operate and secure the service.
How we use data
We use this data to provide and secure HaulHarbor, sync connected marketplaces you request, process subscriptions, support you, improve the product, and meet legal obligations.
Disclosures required by law. We may disclose information when we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or is reasonably necessary to protect the rights, property, or safety of HaulHarbor, our users, or the public.
We do not sell personal information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
Processors
We use service providers who process data on our behalf:
Supabase — authentication and database
Vercel — application hosting
Stripe — payments and subscription billing
Wasabi — object storage for photos and account-export archives
PostHog — product analytics and error signals on the app host
Resend — transactional email delivery (Supabase Auth custom SMTP)
OpenAI — AI text features (category suggestions, Description Helper, title suggestions, and related prompts/responses), under OpenAI’s API terms
Google (Gemini API) — AI vision features that analyze item photos you choose to process, under Google’s Gemini API terms for Paid Services
AI features
Some HaulHarbor features use artificial intelligence providers to suggest text or product details. When you use those features, we send the minimum item context needed for the task to the provider acting as our processor:
Text features (OpenAI): item titles and related fields you already store (for example category, condition, description, brand/model, and answers you give in Description Helper). We do not send photos to OpenAI for these features.
Photo features (Google Gemini): selected item photos plus limited accompanying fields (for example title and category) so the model can suggest details.
We use these outputs only to show you suggestions inside HaulHarbor. Description Helper, Title Normalizer, and Image Detail Extractor store suggestions until you accept or apply them. Inventory Gaps category Suggest stages categories in the workspace until you save. When you prepare items in To List and OpenAI ranks an eBay category with high confidence, HaulHarbor may write that category onto your listing draft automatically; you can still review and change any category before exporting.
Under OpenAI’s current API terms, OpenAI does not use API inputs or outputs to train its models unless an organization opts in; we do not opt in. Under Google’s Gemini API terms for Paid Services, Google does not use prompts (including images) or responses to improve its products; we use Gemini as a Paid Service and do not opt into programs that share logs for model training. Providers may retain content for a limited time for abuse monitoring, security, or legal compliance as described in their terms.
Category suggestions run when you choose Suggest. When you prepare items in To List and HaulHarbor can't confidently match an eBay category, it may ask OpenAI to rank likely categories automatically; you can review and change any category before exporting.
Description Helper, Title Normalizer, and Image Detail Extractor are optional and controlled in Settings → Inventory (default off). If AI is globally disabled by us, those features will not call providers.
How long we keep data
While your account is active, we keep the account data needed to provide HaulHarbor.
If you disconnect eBay, imported eBay data already in your account stays until you delete it (or delete the account).
Database backups may retain copies of deleted data for up to 7 days (our Supabase Pro plan’s daily backup window).
If you schedule account deletion, there is a 14-day grace period before irreversible purge. After deletion we may keep a minimal hashed compliance record that does not restore your account.
Export archives are available for 7 days.
Unconfirmed empty signups may be removed after about 7 days.
AI request metadata (task type, timing, status) is kept in ai_runs as long as the account exists; raw prompts and outputs are not stored by default.
Your choices and rights
From Account settings you can:
Export a copy of your account data and photo archive (export archives are available for 7 days).
Delete your account (14-day grace period before irreversible purge).
Correct information by editing it in the product where available.
You may also email support@haulharbor.com to request access, correction, deletion, or other privacy help. Put “Privacy request” in the subject line.
U.S. state privacy rights. Depending on where you live, U.S. state law may give you rights to access, correct, or delete personal information, to obtain a copy in a portable format, to opt out of certain processing (including sale, sharing for targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects, where those concepts apply), and to use an authorized agent to make a request on your behalf. We do not sell personal information or share it for cross-context behavioral advertising. To exercise these rights, email support@haulharbor.com with “Privacy request” in the subject line, or use Account settings for export and deletion where available. We will verify requests as required. If we deny a request, you may appeal by replying to our decision email or writing again to support@haulharbor.com with “Privacy appeal” in the subject line. We will respond within the time required by applicable law. We will not discriminate against you for exercising privacy rights.
Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will continue to protect it as described in this policy (or a successor policy) and will provide notice where required.
Security
We use encrypted connections (HTTPS). Passwords are handled by our auth provider and checked against known leaked passwords. Access to account data is controlled at the account level (membership and role checks).
No method of transmission over the Internet or method of electronic storage is completely secure. We work to protect your information, but we cannot guarantee absolute security.
Where we process data
HaulHarbor is operated in the United States. Your data may be processed in the U.S. by us and our processors.
Children
HaulHarbor is not for anyone under 18. Do not create an account if you are under 18.
Changes
We may update this Privacy Policy. We will change the “Last updated” date and version. For material changes, we will provide additional notice where appropriate (for example in-product or by email).