We collect what we need to do the work — and nothing else.

Our approach

HarvestEngine is software for self-directed investors. We collect the data we need to run the service and secure your account, we encrypt sensitive data, and we do not sell your personal information. We do not use third-party advertising trackers, Google Analytics, or the Meta pixel.

What we collect

• Account identity. Your email, name, sign-in method (Google / Microsoft / Apple / SMS / password), and — if you enable SMS — your phone number and SMS opt-in consent record.
• Financial & portfolio data. Holdings, individual tax lots, cost basis, transactions, balances, and order fills from the broker account(s) you connect, plus the tax settings and preferences you enter (filing status, state, rates, restrictions).
• Brokerage access tokens. OAuth tokens for your connected broker, stored encrypted at rest (see below). We never see or store your brokerage password.
• Payment information. If you subscribe, your email, name, and an internal account identifier are shared with our payment processor (Stripe); your card details are entered directly into Stripe's hosted checkout and held by Stripe, not by HarvestEngine — we never see or store your full card number.
• Product analytics (first-party). Usage events such as sign-up completed, onboarding step reached, feature used, and anonymous A/B-test assignment, recorded under your account to understand and improve the product. These are never sold or shared with advertising networks.
• Operational telemetry. Audit logs of every algorithm decision the engine makes — composite scores, replacement picks, filter hits, AI confidence — so you can review what was done and why.
• Device & security data. IP address, device/browser info, and session and trusted-device identifiers used to sign you in and detect suspicious activity.

What we don't collect

• Your broker password. HarvestEngine uses OAuth tokens scoped by you at the broker. We never see or store the password to your brokerage account.
• Bank account or routing numbers. The product doesn't move money between banks; it routes trades through your existing broker.
• Government IDs (SSN, driver's license, etc.). Your broker handles KYC; we don't duplicate it.
• Tracking pixels or third-party ad networks. No Google Analytics, no Meta pixel, no behavioral retargeting.

How broker credentials are protected

OAuth tokens issued by your broker are encrypted at rest using envelope encryption with Google Cloud KMS. The encryption key never leaves Google's hardware security modules. The encrypted token is stored with your account's UUID as additional authenticated data, so a token can only be decrypted in the context of the user it was issued for.

Tokens have hard expiry windows (typically 14 days for E*TRADE) and 2-hour inactivity timers. If you stop using HarvestEngine, the token expires automatically. You can also revoke access at any time from your broker's app-permissions panel.

AI features (Harvey)

When you use Harvey, our AI assistant, or AI-generated rankings, briefings, and rationales, the relevant portion of your portfolio context is sent to our AI provider, currently OpenAI, to generate the response. Depending on the feature, this can include security symbols and sectors, position sizes and dollar values, realized and unrealized gains and losses, estimated tax figures, and the questions you type into Harvey. It does not include your name, email, phone number, government IDs, or broker credentials.

Our OpenAI organization is configured so that API inputs and outputs are not shared with OpenAI for model improvement or training. We also disable API call logging where supported and configure production API requests not to store request/response data where supported. OpenAI may still process API data transiently to provide the service and may retain limited operational, security, abuse-monitoring, or legally required records.

If you prefer not to use AI features, you can leave Harvey and AI rankings unused. The core harvesting engine runs on deterministic logic without them.

Mobile messages (SMS)

HarvestEngine sends only transactional SMS — sign-in codes, security alerts, trade-approval links, and harvest summaries. No marketing or promotional texts.

• Opt-in: consent is collected at the moment you enter your phone number during passwordless sign-in or post-SSO phone enrollment. The disclosure language and screenshots of both opt-in pages are documented at harvestengine.ai/sms-terms.
• Opt-out: reply STOP at any time to stop all SMS. Reply HELP for help.
• Carrier: messages are delivered by Twilio. Standard message and data rates may apply per your carrier.
• Frequency: roughly five messages per month for an active account, fewer for dormant accounts. We do not share phone numbers with third parties for advertising.

Who we share data with

We share data only with service providers that process it on our behalf under contract:

• Your broker — read positions, place orders. That's the whole product.
• Google Cloud (GCP) — hosting, Postgres, Redis, KMS, and Secret Manager (all service data, encrypted at rest).
• OpenAI — AI features; receives the portfolio context described under AI features (Harvey), and no name, email, phone, IDs, or broker credentials.
• Twilio — SMS delivery (phone number and message content).
• Stripe — subscription payments (email, name, an internal identifier, and card data entered directly into Stripe).
• Government on legal compulsion — subpoenas, court orders. We'll notify you unless legally barred.

We do not sell your personal information, and we do not "share" it (as defined by California law) for cross-context behavioral advertising — ever. We may disclose information if required by law, to protect rights or safety, or in a merger or acquisition (with notice where required).

How long we keep your data

• Active accounts: as long as you're using the product.
• Account identity (email, name): when you close your account, we delete or de-identify it within a reasonable period, and we honor deletion requests you make at any time (see Your privacy rights). Some records are kept longer where the law requires or where a legal hold applies.
• Transaction and tax records: retained for up to 7 years to support tax-record requests for the years HarvestEngine was active, then deleted.
• Broker tokens: expire automatically and are removed when you disconnect a broker or close your account.

You can request deletion at any time by emailing privacy@harvestengine.ai or using the in-app data-portability and deletion tools.

Your privacy rights

Depending on your state (including California under the CCPA/CPRA, and Virginia, Colorado, Connecticut, Utah, and others), you may have the right to know/access the personal information we hold, delete it, correct inaccuracies, opt out of any sale or "sharing" (we do neither), and not be discriminated against for exercising these rights. To exercise them, export your data in JSON via the in-app tool or email privacy@harvestengine.ai; we'll verify your identity, respond within the time the law requires, and you can appeal a denial by replying to our response. We currently serve users in the United States and Canada; if you are elsewhere, contact us about the rights available in your jurisdiction.

Security

We protect data with envelope encryption for broker tokens (per-user keys via cloud KMS), encryption in transit, access controls, and tenant isolation at the database layer. No system is perfectly secure. If a breach affects your personal information, we will notify you as required by applicable law.

Cookies

We use only essential/functional cookies — for your session, your trusted-device preference, and sign-in-flow state. We do not use advertising or cross-site tracking cookies, Google Analytics, or the Meta pixel.

Children

The service is intended for adults (18+). If you connect a custodial or minor's account, you do so as the authorized adult custodian. We do not knowingly collect personal information from children under 13.

Changes and contact

We may update this policy; for material changes we will email registered users and update the "Last updated" date. This Privacy Policy is the operative statement of how HarvestEngine handles your data. Enterprise customers who require a separate Data Processing Addendum may execute one with us; where signed, it supplements this policy for that customer. Questions: privacy@harvestengine.ai.

HarvestEngine.ai is a product of Aubrey Holdings, LLC, a California limited liability company (DBA registered in Santa Clara County, California).