Privacy Policy

This Privacy Policy explains how Harlow ("Harlow," "we," "us," or "our") collects, uses, shares, and protects information when you use our website and application (the "Service"). By using the Service, you agree to the practices described here.

1. Who we are

Harlow is an AI marketing assistant built for real estate agents. We are based in Orlando, Florida. You can reach us about privacy at team@harlowforagents.com.

2. Information we collect

Information you give us

• Account details such as your name, email address, and password (stored hashed).
• Your Voice Profile inputs: writing samples, answers to our voice interview, signature phrases, and tone preferences that you choose to provide.
• The ZIP codes and markets you ask us to watch, and content you generate or save.
• Billing details, which are processed by our payment provider and not stored by us.

Information from connected services

When you choose to connect a third party account, we access only what that connection needs:

• Google (Gmail and Google Calendar): with your explicit consent, we read your Gmail messages to triage what looks like real estate business, draft replies in your voice, and read your Google Calendar to prepare pre showing briefs. We request read access to Gmail and Calendar and the ability to create Gmail drafts. We never request permission to send email on your behalf, and we never send, delete, or modify your messages.
• Follow Up Boss: with your consent, we read your contacts, their activity, appointments, and deals so our assistants can prioritize outreach and draft messages. We write notes back to Follow Up Boss only when you approve an action.

Information we collect automatically

• Basic usage and device data (for example, log data, IP address, and browser type).
• Cookies and similar technologies used to keep you signed in and to understand how the Service is used.

3. Google API Limited Use disclosure

Harlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Gmail and Calendar data only to provide and improve the user facing features you enable (inbox triage, draft replies, and showing briefs).
• We do not transfer or sell this data to third parties except as needed to provide the Service, for security, or to comply with applicable law.
• We do not use Gmail or Calendar data for advertising, and we do not allow humans to read it unless we have your consent for specific messages, it is necessary for security or to comply with law, or the data has been aggregated and anonymized.
• We do not use your Gmail or Calendar data to train generalized AI or machine learning models.

4. How we use information

• To provide, operate, and maintain the Service.
• To generate drafts and briefs in your voice. Generation is performed using third party AI providers (see below) under contractual terms that prohibit using your content to train their models.
• To communicate with you about your account, updates, and support.
• To secure the Service, prevent abuse, and comply with legal obligations.

5. How we share information

We do not sell your personal information. We share it only with:

• Service providers who help us run Harlow, including hosting (Vercel), database and authentication (Supabase), AI generation (Anthropic), and transactional email (Resend). These providers process data on our behalf under agreements that limit their use of it.
• Connected services you authorize, such as Google and Follow Up Boss, only as needed to deliver the features you enabled.
• Authorities or others when required by law, to enforce our terms, or to protect rights and safety.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. You can disconnect Google or Follow Up Boss at any time, which revokes our access and stops further data collection from that source. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet legal obligations.

7. Security

Access and refresh tokens for connected accounts are encrypted at rest using AES 256 GCM and are only ever decrypted by server side code to make authorized requests on your behalf. We use industry standard safeguards, but no method of transmission or storage is completely secure.

8. Your choices and rights

• You can review and update your account information at any time.
• You can revoke Harlow's access to Google from your Google Account permissions page, and to Follow Up Boss from within the app.
• Depending on where you live, you may have rights to access, correct, delete, or port your data. To exercise them, contact us at team@harlowforagents.com.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version here and update the date above. Material changes will be communicated through the Service or by email.

11. Contact

Questions about this policy? Email team@harlowforagents.com.