Privacy Policy
HarborLaw is a civic legal information service operated by Digital Waterhouse LLC ("we," "us"). This policy describes what we collect when you use HarborLaw at civics.digitalwaterhouse.com, why we collect it, and the choices you have. We try to keep this short and honest.
1. Information we collect
Account information
When you create an account we store your email address and a salted hash of your password (bcrypt). We never store your password in plain text.
Documents and intake content
When you upload a document or fill out an intake form, we store the file and the text we extract from it (including OCR for scanned pages), along with any answers you provide. This content is associated with your account and your active session.
Analysis output and chat history
We store the analysis briefs, generated letters, and follow-up questions and answers produced during your session so you can return to them later.
Operational logs
Like any web application, we record basic technical information needed to operate and secure the service: IP address, request timestamps, user-agent strings, and error traces. These logs are kept for a limited period and are not used for advertising profiling.
Cookies
We use a session cookie to keep you logged in. We do not use third-party advertising cookies or cross-site tracking cookies.
2. How we use your information
- To provide the analysis, letter generation, and follow-up Q&A you requested.
- To authenticate you, send email-verification messages, and recover access to your account.
- To monitor and protect the service against abuse and security incidents.
- To improve the accuracy of HarborLaw — for example, by reviewing aggregated patterns of which findings prove useful. We don't train any third-party AI models on your individual files.
3. Who we share information with
AI analysis providers
To produce an analysis, we send the relevant text from your documents and your intake answers to a third-party AI service that runs the language-model analysis. That provider processes the content under its own commercial-API terms and does not retain or train on your content as a normal user. We can identify the current provider on request.
Digital Waterhouse single sign-on
HarborLaw uses the Digital Waterhouse SSO. When you create a HarborLaw account, your email address (and a salted password hash) are mirrored into the DW user store so that the same login works across other DW applications.
Email delivery
Verification and account-related emails are sent from noreply@digitalwaterhouse.com over our own mail server.
Legal process
We may disclose information if required to do so by law, or to protect the safety, rights, or property of users or the public.
We do not sell your personal information, and we do not share it with advertisers.
4. How long we keep it
We keep your account, documents, and analysis history for as long as your account is active. If you ask us to delete your account, we will remove your uploaded documents, extracted text, intake answers, and analysis output within a reasonable period, except where retention is required by law or for a narrow set of security logs.
5. Security
The site is served over HTTPS. Passwords are stored as bcrypt hashes. Uploaded documents are stored on our server and access-controlled to your account. No system is perfectly secure — please don't upload documents you would not be willing to share with a paralegal.
6. Your choices
- Access and deletion. Email hello@digitalwaterhouse.com to request a copy of your data or to delete your account.
- Email. Account-related email (verification, password reset) is required while your account exists. We do not send marketing email by default.
7. Children
HarborLaw is not directed at children under 13, and we do not knowingly collect information from them.
8. Changes
If we make material changes to this policy, we will update the "last updated" date above and, where appropriate, notify users by email or in-app notice.
9. Contact
Questions about this policy or your data: hello@digitalwaterhouse.com.