Harbor Privacy Policy
This policy explains what iworkzinc LLC ("iworkzinc", "we") collects when you use Harbor at app.iworkzinc.com and the site www.iworkzinc.com, why, and what you can do about it.
1. What we collect
| Data | Examples | Where it comes from |
|---|---|---|
| Account | Email address, password (stored only as a one-way hash), business name, your team members' emails and roles | You |
| Sign-in records | Time, success or failure, IP address, browser, time zone | Your browser when you sign in |
| Store connections | Seller IDs, marketplaces, and the access tokens or API keys for each store, encrypted | You and the marketplace when you connect a store |
| Marketplace data | Orders, order items, prices and fees, listings, stock levels, and for each order the buyer's name, shipping address, buyer email as given by the marketplace, and gift messages for orders you print | Amazon and Walmart, through their APIs |
| Data you enter | Products, stock receipts and supplier emails you forward, batches, packing scans, settings | You and your team |
We do not use advertising or analytics trackers on Harbor or on www.iworkzinc.com. Both sites keep a few values in your browser's local storage: the app keeps your sign-in session and display preferences, and the site keeps your language choice.
2. How we use it
- To run the Service: sync your stores, show your orders and stock, print packing slips, and calculate profit.
- To secure it: verify sign-ins, rate-limit sign-up and password-reset requests, and investigate misuse.
- To contact you about your account: email verification, password resets, and important changes to the Service. We do not send marketing email without your consent.
We use your customers' personal information only to fulfil your orders, such as packing slips and shipping. We never use it for marketing, never share it with other Harbor accounts, and never sell it.
3. Who we share it with
We share data only with the service providers we need to run Harbor, under contracts that limit their use of it:
| Provider | What for |
|---|---|
| Amazon Web Services (United States, Oregon region) | Hosting, database, email delivery (Amazon SES), marketplace notifications |
| Amazon and Walmart | Their APIs, which Harbor calls on your behalf with your authorization |
We may also disclose data when the law requires it, or to protect the rights and safety of our users or the public. If iworkzinc is involved in a merger or sale, data may transfer to the new owner under this policy.
4. How long we keep it
- Account and business data: while your account is open, then deleted within 30 days of closing it, apart from records we must keep by law.
- Your customers' personal information: kept while your account is open, so you and your team can look up past orders, reprint packing slips and handle returns; deleted within 30 days after you close your account or ask us to delete it, apart from what tax or legal rules require us to keep.
- Sign-in records: while your account is open, to protect it against misuse.
- Backups: kept up to 14 days, then deleted.
5. How we protect it
All traffic uses HTTPS. Marketplace tokens and API keys are encrypted at rest, and passwords are stored only as bcrypt hashes. Each account sees only its own data, team access depends on role, and only authorized iworkzinc staff can reach production systems.
6. Your choices and rights
- See, correct or export your data: most of it is visible in the app; email us for an export.
- Delete: disconnect a store in Admin › Stores at any time, or ask us to close your account and delete its data.
- Withdraw marketplace access: remove Harbor in Amazon Seller Central (Manage Your Apps) or revoke your Walmart API keys.
- Depending on where you live (for example California), you may have further rights under local law. We will not treat you differently for using them.
If you are a buyer whose order was handled by a seller using Harbor, the seller is responsible for your information; contact them first, and we will help them answer you.
7. Children
Harbor is a business service and is not meant for anyone under 18.
8. Changes
If we change this policy in a way that matters, we will tell you by email or in the app before the change applies.
9. Contact
iworkzinc LLC, 485 Birch St, Suite N1, Lake Elsinore, CA 92530, United States, privacy@iworkzinc.com.