Privacy
What we keep, who else receives it, and how to delete it. Plain language. No tracking.
Last updated 1 October 2026
What we store
The portal keeps this in a Postgres database hosted on Neon, operated by 7 Days to Air:
- Invite details: your name, business name and email address.
- Sign-in sessions.
- Your conversation transcript and your brief.
- Files you attach to a request (images, PDFs, spreadsheets, documents, text). The files themselves are kept in our Google Cloud Storage bucket in the United States, not in the database, and only you and our team can open them.
- The options, scores and offers we write about your request.
Named team members (Jonathan, Chris and Jeremy) can read your request. Other clients cannot.
What leaves our database
Two services, and nothing else goes to anyone.
| Service | What it receives | Why |
|---|---|---|
| Anthropic | The text of your conversation and your brief, and the files you attach. Never your email address or invite details, and your business name is replaced by a pseudonym in text (it is not removed from inside images or PDFs). | To run the intake agent, and to draft and score options. |
| Resend | Your name, your email address and the content of the emails we send you. | To deliver your invite, sign-in links and offers. |
Anthropic processes your text through its API, under its API terms. It is not shown to other clients.
Files you attach are sent to Anthropic with your brief, to run the interview and to draft options. Images and PDFs are sent as they are; spreadsheets and text files are sent as text.
No tracking
There is no analytics, no advertising, no tracking pixels and no third-party scripts on this site. Fonts are served from this site. One strictly necessary cookie keeps you signed in (HttpOnly, Secure, SameSite=Lax, 30 days). Your light or dark choice is stored in your browser and goes nowhere.
Personal links
The team may give you a personal link that signs you straight in, so you do not have to enter your email each time. It works like a key: anyone who has it can open your request, so keep it to yourself and do not forward it. We store only a one-way fingerprint of the link, never the link itself. If you lose it or share it by mistake, ask the team to reset it; the old link stops working at once. Arriving by a personal link sets a ten-minute cookie that only decides whether to show a tip.
Where your data is processed
Your data is stored and processed in the United States: Google Cloud (us-east1) and a Neon database in us-east. If you are in Australia, the Australian Privacy Principles apply. For APP 8 (disclosure of personal information overseas), our basis is that we take reasonable steps to protect it, and that you give informed consent to the overseas processing at the Welcome screen, before you write your first answer.
Deleting your data
From the Status page you can delete your request yourself, until an offer on it is accepted. Deleting a request deletes the files attached to it from storage. A file you remove from a request is no longer sent to Anthropic; its stored copy is kept for a while so Undo works, then deleted, and it always goes when the request is deleted. To have everything deleted, email support@harfredlabs.com and we will remove it.
Who this is for
The service is for adults running a business (18 and over).
Questions
Email support@harfredlabs.com. See also Terms and Support.