Privacy Policy (Harpy)

1) Information we collect

A. Information you provide

• Name (if provided)
• Email address
• Support requests and communications

B. Information collected automatically

• Device and browser metadata (e.g., device type, operating system, browser type)
• IP address and approximate location (e.g., city/country-level)
• Usage data (e.g., pages viewed, interactions, session durations)
• Cookies or similar technologies (see "Cookies" below)

C. Investment data you connect

If you connect investment accounts through our integrations, we may access and process:

• account identifiers (internal IDs)
• balances and positions/holdings
• transactions and activity history
• account types (e.g., Individual, Roth IRA, 401(k))

Important: Harpy does not have access to place trades or move funds. We do not initiate transactions on your brokerage accounts.

2) How we use your information

We use information to:

• provide and operate the Service (including account connectivity and dashboard features)
• show performance, dividend analysis, cashflow analysis, and daily metrics views
• maintain and improve reliability, security, and user experience
• provide customer support
• process subscriptions and payments
• prevent fraud, abuse, and unauthorized access
• comply with legal obligations

3) How we share your information

We do not sell your personal information.

We may share information with service providers that help us run Harpy, including:

• Payment / subscriptions: Paddle
• Account connectivity / investment data: SnapTrade
• Market data: Twelve Data
• Hosting and infrastructure: Microsoft Azure

We may also share information:

• to comply with law, court orders, or lawful requests
• to protect our rights, users, and the integrity/security of the Service
• in connection with a merger, acquisition, or sale of assets (you will be notified where required)

4) Data retention

We retain information only as long as needed to:

• provide the Service,
• meet legal/accounting/tax obligations,
• resolve disputes,
• enforce agreements, and
• protect against fraud and abuse.

Retention periods vary depending on the data type and purpose.

5) Account deletion and de-identification (anonymization)

You can request deletion of your account and associated personal information.

When you delete your account:

• we will delete or de-identify (anonymize) personal information so it can no longer be associated with you, and
• we may retain certain records as required or permitted by law (for example, for tax/accounting, fraud prevention, security, or dispute resolution). Any retained data will be kept in a way that is no longer reasonably linkable to you where feasible.

If you need help deleting your account, contact admin@harpyfinance.com.

6) Security

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7) Cookies

Harpy uses cookies and similar technologies to:

• keep you signed in,
• maintain security,
• remember preferences, and
• understand usage to improve the Service.

You can manage cookies through your browser settings. Disabling some cookies may affect functionality.

8) International data transfers

Your information may be processed in countries other than where you live, depending on where our service providers operate. We take reasonable steps to ensure appropriate safeguards are in place.

9) Your choices and rights

Depending on your location, you may have rights to:

• access your personal information,
• correct inaccuracies,
• request deletion or de-identification,
• object to or restrict certain processing.

You can exercise these rights by contacting admin@harpyfinance.com.

10) Changes to this Privacy Policy

We may update this policy from time to time. If changes are material, we will provide notice. Continued use of the Service after changes become effective means you accept the updated policy.

11) Contact