Privacy Policy

Customers may submit project answers, descriptions, timing, addresses, contact details, consent choices, and photos. Professionals may submit authentication information, owner and business details, services, ZIP-code coverage, public-profile content, quotes, messages, review responses, and private verification evidence. ProHarbor also records operational events such as request submission, matching, quote status, message delivery state, review eligibility, and access-control decisions.

Information is used to operate secure request recovery, match projects by service and service area, display limited opportunity previews, authorize paid lead access, deliver quotes and messages, publish professional profiles and verified-project reviews, review verification submissions, prevent abuse, support users, and maintain platform reliability.

Private customer details are shared only with businesses that have an active authorized lead unlock for that request. A customer may receive quotes from several professionals. Published professional-profile fields, approved evidence-scoped badges, published reviews, and published professional responses are public. Pending verification never creates a public badge.

Customer project photos and professional verification documents are stored privately and accessed with short-lived links after authorization. Verification documents are not public profile content. Messages and quotes are available only to the relevant secure customer session and authorized professional business, plus authorized administrators for support and safety review.

Sensitive customer request data is encrypted by the application before database storage. ProHarbor also uses access checks, private storage, restricted database roles, secure cookies, and limited-duration links. No internet service can promise absolute security; users should avoid submitting information not needed for their project.

Supabase provides authentication, database, and storage services; Vercel hosts the web application; Resend may deliver transactional email when configured; and Stripe processes professional lead-access payments. Payment-card details are handled by Stripe rather than stored in ProHarbor's application database.

ProHarbor currently uses essential cookies for professional authentication, secure anonymous customer-request access, and private photo-upload sessions. These cookies are required for security and core functionality. ProHarbor currently has no marketing pixels, advertising cookies, or non-essential analytics cookies, so an accept-or-reject banner is not shown. If non-essential tracking is added later, consent controls must be implemented before it loads.

Records are retained for as long as reasonably needed to operate the marketplace, provide support, address disputes and abuse, meet legal obligations, and maintain audit integrity. Retention periods may vary by record type. To request access, correction, or deletion where applicable, use the contact page. Some information may be retained when required for security, fraud prevention, legal compliance, or legitimate audit history.

Privacy questions may be sent to admin@getproharbor.com.