Privacy Policy

This Privacy Policy explains how Harpoonist (“we”, “us”, or “our”) — operated by an individual sole proprietor based in Ontario, Canada (Cameron Hanton) — collects, uses, and protects your personal information when you use the website at harpoonist.com and our related services. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law.

If you have any questions, contact us at support@harpoonist.com.

• Account information — your name and email address when you sign up, and authentication data used to keep you signed in.
• Payment information — when you subscribe, your payment is processed by Stripe. Stripe collects and stores your card details; we do not receive or store full card numbers. We retain limited billing records such as your subscription status, plan, billing period, and a payment-processor customer identifier.
• Usage and API data — if you create API keys, we record the keys (hashed), your request counts, and rate-limit and usage metrics needed to operate and meter the Service.
• Technical and log data — standard information such as IP address, request metadata, timestamps, and error logs, used for security, debugging, and abuse prevention.
• Cookies — an essential session cookie that keeps you logged in. See Section 4.

We use personal information to:

• provide, operate, and maintain the Service and your account;
• authenticate you and keep the Service secure;
• process payments, manage subscriptions, and enforce plan entitlements and limits;
• detect, prevent, and address fraud, abuse, and technical issues;
• send you transactional communications — such as receipts, alerts you configure, and important service notices. We do not send marketing emails at this time;
• comply with our legal obligations.

We use a single essential cookie to maintain your authenticated session. We do not use third-party advertising cookies, and we do not currently use analytics or tracking cookies. If we introduce analytics in the future, we will update this policy and, where required, ask for your consent.

We do not sell your personal information. We share it only with service providers who process it on our behalf and under confidentiality obligations, including:

• Stripe — payment processing and subscription billing;
• Hosting and infrastructure providers — to run our servers, database, and application.

We may also disclose information if required by law or valid legal process, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you of any change in ownership or use of your information).

We keep your personal information for as long as your account is active and as needed to provide the Service. After you close your account, we may retain certain information as required for legal, tax, accounting, security, or fraud-prevention purposes, after which we delete or anonymize it.

We use reasonable technical and organizational safeguards to protect your information, such as encryption in transit, hashed credentials and API keys, and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for protecting your password and API keys.

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct it, withdraw your consent, or request its deletion. You can also close your account. To exercise these rights, email us at support@harpoonist.com; we may need to verify your identity before acting. If you have an unresolved privacy concern, you may contact the Office of the Privacy Commissioner of Canada.

We and our service providers may store and process your information in Canada and the United States. Where information is processed outside your province or country, it may be subject to the laws of those jurisdictions, including lawful access requests by courts or authorities. By using the Service, you consent to this processing.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes we will take reasonable steps to notify you, such as posting the updated policy with a new date or emailing you. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

Questions or requests about your privacy? Contact us at support@harpoonist.com.