Privacy Policy

This Privacy Policy explains how AltHarbor ("AltHarbor," "we," "us," or "our") collects, uses, discloses, and retains personal information when you visit altharbor.io, request a founder walkthrough, create an account, save funds, set preferences, subscribe to alerts or briefings, or contact us (together, the "Service").

AltHarbor is a research and data platform covering publicly filed information about semi-liquid alternative investment funds. It is not a fund, fund manager, broker-dealer, investment adviser, or transaction platform, and nothing in the Service is investment advice. This policy does not govern third-party fund websites, SEC filing systems, or other external services we link to.

This policy covers personal information processed through the Service as it exists today. AltHarbor is deliberately narrow in what it collects: the Service has no payment processing, no advertising technology, and no user-facing AI chat. When the Service changes in a way that affects personal information — a new feature, vendor, or data practice — this policy is updated with a new version and effective date before the change takes effect, and prior versions remain available from this page.

• Founder walkthrough requests. Research beyond the public marketing homepage is not open for self-serve entry. If you request a founder walkthrough, you submit your work email through the on-site form. We store that information only so we can respond about the walkthrough. A request does not create an account, grant research access, or subscribe you to a briefing.
• Account and authentication information. If you create an account, we collect your email address and authentication credentials. Authentication (email/password and magic-link sign-in) is operated through Supabase; passwords are stored by the authentication provider in protected (hashed) form, not readable by AltHarbor personnel in the ordinary course.
• Profile information. Your profile can include your email address, full name, firm name, and adviser type. All profile fields beyond your email are optional.
• Saved funds and research preferences. Funds you save or watch, email digest cadence (default: weekly), marketing opt-in status (default: off), and interface preferences. Saved funds and watchlists can reveal professional research interests; we treat them as confidential account data.
• Alert and briefing subscriptions. Per-fund alert selections, compare-set alerts, and briefing subscriptions are keyed to your email address and may exist before you create an account (for example, if you subscribe to a briefing without signing up). Creating an account later associates them with it.
• Lead and interest information. If you express interest in a plan or feature, we store your email address, the source of your request, and the plan you were interested in.
• Correspondence. Messages you send to us — support questions, correction reports, privacy requests — and our records of the response.

• Device and network information. IP address, browser and device type, operating system, referring page, and request metadata, as part of ordinary web hosting and security logging.
• Usage and performance information. Page views and performance measurements collected by Vercel Analytics and Speed Insights, loaded only in production and configured without advertising cookies. We do not describe this data as anonymous; it is technical and pseudonymous measurement data.
• Diagnostic information. When something breaks, Sentry error monitoring captures the error, the affected page, and browser and device context. AltHarbor configures Sentry with default personal-information collection disabled and session replay off, and events are scrubbed before storage — but diagnostic reports can still include technical context about your request, such as URLs and device information.
• Cookies. A signed site-access cookie when authorized research access is granted (30 days), a short-lived walkthrough confirmation flash cookie after you submit a request, authentication session cookies if you sign in, and a theme cookie (1 year). The full inventory is in the Cookie Notice.

We use personal information to:

• operate the founder walkthrough request form and research gate, accounts, saved funds, watchlists, comparisons, alerts, briefings, and preferences you request;
• authenticate you, maintain your session, and protect the Service against fraud and abuse;
• send the research alerts and briefings you subscribed to, plus account, security, and administrative messages;
• respond to founder walkthrough requests and expressed plan interest;
• personalize the interface based on your explicit settings and saved items — never as an assessment that any investment is suitable for you;
• diagnose errors, measure performance, and improve the Service;
• respond to support, correction, and privacy requests, and maintain consent, unsubscribe, and suppression records;
• comply with law, enforce our Terms, and establish or defend legal claims.

We do not use a saved fund, watchlist, adviser type, or alert setting to make investment recommendations, and we do not use these fields for advertising.

AltHarbor uses AI-assisted tools in its research-production process to extract, classify, and normalize information from public regulatory filings. That process operates on public documents, not on your account data.

AltHarbor does not offer a user-facing AI chat feature, does not use personal information to make decisions that produce legal or similarly significant effects about you, and does not use your personal data to train AI models.

We disclose personal information only to the following recipients, for the purposes described above:

• Supabase — database and authentication infrastructure that stores account, profile, saved-fund, preference, subscription, and lead records.
• Vercel — hosting, analytics, and performance measurement.
• Sentry — error monitoring, receiving the diagnostic data described above.
• Resend — email delivery for walkthrough-request confirmations, research alerts, and account messages.
• Slack — when you submit your email through a lead or interest form, a notification that includes your email address is posted to a private, internal AltHarbor Slack channel so we can follow up. This is an internal operations notification, not a disclosure to the public or to marketers.
• Authorities or other parties for legal reasons — when we reasonably believe disclosure is necessary to comply with law or valid legal process, protect the rights, security, or integrity of the Service or others, or establish or defend legal claims.
• A successor in a business transaction — subject to confidentiality and any notice required by law.

Service providers process this data to provide their contracted services. AltHarbor does not sell personal information, does not share it for cross-context behavioral advertising, and does not use it for targeted advertising, as those terms are defined under state privacy laws. We do not disclose your private watchlist or research activity to fund managers, sponsors, or advertisers.

The Cookie Notice is the complete, technology-by-technology inventory: the site-access cookie, walkthrough confirmation flash, authentication session storage, the theme cookie, Vercel Analytics and Speed Insights, and Sentry. AltHarbor does not use advertising cookies, cross-site tracking pixels, or social-media trackers, so there is currently no advertising opt-out to configure. If that ever changes, the Cookie Notice and this policy will change first.

• Research alerts and briefings. Every research email includes an unsubscribe link, and you can manage alert and digest settings in your account settings.
• Marketing. Marketing email is sent only if you opt in — the marketing preference defaults to off, and no marketing sends are live today.
• Operational messages. We may still send non-marketing messages necessary for account security, a request you initiated, or operation of the Service.

Unsubscribing from emails does not delete your account, and deleting your account is handled separately — see the section on your choices below.

We retain personal information for no longer than reasonably necessary for the purposes in this policy. Rather than quote periods we have not yet formalized, here are the criteria we apply:

• Account, profile, saved funds, and preferences — retained while your account is active; removed when you delete them or delete your account, except the minimal records described below.
• Alert, briefing, and walkthrough-request records — retained only as long as reasonably necessary for the requested communication and our operational records. You can ask us to delete a walkthrough-request record. We keep only a minimal suppression record when needed to honor an email opt-out.
• Correspondence and privacy-request records — retained as long as needed to resolve the matter and demonstrate that we handled the request.
• Diagnostic and security logs — retained for the short operational windows set by our providers, longer only if needed to investigate an incident.

A formal retention schedule is being finalized; when adopted, this policy will be updated with a new version.

• Access, correction, and deletion in-product. You can view and edit your profile and preferences in account settings, and you can delete your account there. Account deletion removes your account, profile, saved funds, and preferences, and also suppresses research emails to your address — retaining only the minimal suppression record needed to honor that choice.
• Requests by email. For anything you cannot do in settings — or if you do not have an account — send access, correction, or deletion requests to privacy@altharbor.io.
• Verification. We verify requests using information proportionate to the request — typically by confirming control of the email address the data is keyed to. An authorized agent may submit a request where the law permits; we may ask for proof of authorization.
• No discrimination. We will not discriminate against you for exercising a privacy right.

Rights can be subject to legal exceptions, such as records needed for security, to honor a suppression choice, or to defend a legal claim. Deleting your AltHarbor account does not remove information from public regulatory filings or other sources we do not control.

AltHarbor uses administrative and technical safeguards appropriate to the nature of the data and the Service, including hashed credentials via the authentication provider, access controls on the database, and scrubbing of diagnostic events. No system is completely secure, and we cannot guarantee absolute security.

Protect your credentials, use a unique password, and contact privacy@altharbor.io if you suspect unauthorized use of your account.

The Service is intended for people who are at least 18 years old and is not directed to children. AltHarbor does not knowingly collect personal information from a child under 13, consistent with the Children’s Online Privacy Protection Act. If you believe a child has provided personal information, contact privacy@altharbor.io and we will delete it.

AltHarbor is operated from the United States and is directed to a U.S. audience. Our service providers process data in the United States, which may have different data-protection laws than your jurisdiction. Access from another country does not mean AltHarbor offers the Service there; before intentionally offering the Service to people in the EEA, UK, or other non-U.S. jurisdictions, we would first implement the notices, rights, and contracts those regimes require.

Some U.S. states grant residents rights to access, correct, delete, or obtain a copy of personal information, and to opt out of sales, sharing, targeted advertising, or certain profiling. Whether a given statute applies to AltHarbor depends on thresholds that may not be met — but AltHarbor honors verifiable access, correction, and deletion requests regardless of the state you live in, where feasible.

For transparency: the categories collected in the prior 12 months are identifiers (email, name), professional information (firm, adviser type), internet activity (page views, diagnostics), account credentials, saved research preferences, and correspondence. AltHarbor does not sell or share personal information as those terms are defined by state privacy laws, including the personal information of anyone under 16.

We update this policy when the Service, our vendors, or the law changes. Each version carries its effective date, and prior versions remain available from this page. For a material change, we will provide notice through the Service or by email to account holders, and request consent where the law requires a new choice. A policy change does not retroactively authorize a materially different use of previously collected information.

Privacy questions and requests: privacy@altharbor.io.

AltHarbor is finalizing verification of its operating entity details; the full legal entity name and a mailing address for privacy correspondence will be published in this policy once that verification is complete. In the meantime, the email address above is monitored and is the effective channel for all privacy requests.