Google sign-in data and purposes
Clerk handles Google sign-in. With your authorization, Clerk receives your Google account identifier, name, email and profile image to verify identity, create an account and display your profile. Harbor stores the Clerk identifier, name and verified primary email to associate your workspace.
This connection requests only openid, basic profile and email access—not Gmail, Google Drive, contacts or calendar access. Harbor does not use Google sign-in data to train AI models, target advertising or sell data.
Account and subscription records
We record account status, plans, order amounts and status, payment references, connection assignments, expiry, cumulative upload and download counts, referrals, and submitted support tickets and replies. These records provide subscriptions, usage reconciliation, order processing and troubleshooting.
We also keep sessions, rate-limit records and administrative audit records for authentication, security checks and service recovery. Usage records in Harbor's business database are traffic counters; this is not a zero-logs guarantee for the entire network or infrastructure.
Payments and service providers
Stripe's hosted checkout handles card payments. Harbor does not collect full card numbers or security codes in its own payment form. Harbor sends Stripe order and account references, amounts and plan details, and receives payment status.
Google and Clerk provide sign-in, Vercel hosts the website, Cloudflare provides DNS and human verification, and Vultr provides server infrastructure. These providers may process request, network and account data and manage their service records under their own policies.
Website and account services use overseas infrastructure. Data may be processed outside Hong Kong; we do not describe overseas servers as Hong Kong-only storage.
Sessions, retention and access
Sign-in requires necessary session cookies or identity tokens. Do not share passwords, verification codes, subscription URLs or node credentials. We use authentication, permission checks, HTTPS and private configuration, but these are not absolute security guarantees.
Account, order, usage, support and audit records are kept in the platform database and recovery backups. There is currently no uniform automatic deletion period. Stopping Google sign-in does not automatically delete Harbor orders or subscriptions.
To request access, correction or deletion, contact the operator through a workspace ticket or the email below. Requests require identity verification and manual handling. Outstanding orders, security investigations, applicable retention requirements and backups may require a separate review of the scope.
Revoking Google access and contact
You can revoke Harbor's Google authorization in your Google account's third-party connections settings. That sign-in may then stop working; first ensure you have another usable sign-in method.
For privacy and account data requests, email randyxian08@gmail.com or submit a Harbor workspace ticket.