Privacy Policy

The short version

Pool Harbor stores your pool’s records so you and the pros you choose can use them. We don’t sell your data, we don’t show ads, and your street address is never shown to anyone unless you explicitly request service or share your pool.

What we collect

Your account details (name, email, password — stored hashed, never readable), your pool records (property details, equipment, water tests, chemical additions), and for businesses: company contact details and service information. Service visits are recorded with the technician’s name and become part of the homeowner’s permanent pool record. If you use the test-strip scanner, the photos you scan are kept — along with the values you confirm — to improve the scanner’s accuracy. Scan photos are never shown to other users and are deleted with your account. If you join the beta waitlist, we store the email address you provide so we can send your invitation; ask us anytime to remove it.

Who can see what

Your pool data is visible only to you, enforced at the database level. If you connect a pool business, that business sees the pool’s record — including the service address, since you’ve hired them to come to it. Businesses you have NOT connected — directory browsing, service requests, quotes — never see your street address. You can revoke a connection at any time; the business immediately loses visibility, though visit records they created remain part of your pool’s history. Business directory listings show company contact details and services on purpose — that’s what a directory is for.

Payments

If a connected pool business sends you an invoice you can pay online, the payment is processed by Stripe. Card and bank details go directly to Stripe — Pool Harbor never sees or stores them. Stripe’s own privacy policy applies to the payment itself.

Where your data lives

In the United States, on Supabase (database) and Vercel (application hosting) infrastructure. Emails are delivered via Resend, payments are processed by Stripe, and signup is protected from bots by Cloudflare Turnstile. Each provider receives only what it needs to do its job.

Retention and deletion

You can download your data anytime from your account page, and request account deletion by contacting us. One planned exception, disclosed now: when Pool Harbor begins making chemical dosing recommendations, records of those recommendations will be retained for at least five years for safety and legal reasons, even after account deletion.

Email

Every notification email carries an unsubscribe link. Unsubscribing stops all notifications permanently; security emails you request (like password resets) still work.

Contact

Questions: support@poolharbor.com.

This is a beta policy written in plain language. It will be reviewed by an attorney before Pool Harbor’s public launch, and any changes will be dated at the top of this page.