Privacy Policy

Last updated: March 29, 2026

This Privacy Policy describes how Olivas Venture Capital LLC d/b/a Harvv ("Harvv," "we," "us," or "our") collects, uses, and protects information in connection with the Harvv behavioral analytics platform ("Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, company name (optional), and a password (stored as a bcrypt hash — we never store plaintext passwords).

1.2 Professional Profile Data

We enrich signup data with publicly available professional profile information from sources such as Apollo.io to improve your experience. This may include your job title, company name, industry, company size, and LinkedIn profile URL. This data is publicly available and is used solely for product personalization and segmentation. You may view and request correction of this data at any time.

1.3 Behavioral Telemetry (End-User Data)

The Harvv pixel collects structured behavioral signals from visitors to websites where it is installed. By design, the pixel does NOT collect:

Keystroke content or form field values
Clipboard content or selected text content
DOM content, page text, or screenshots
Session replay or video recordings
IP addresses (not stored in our database)
Names, email addresses, or any PII of end users

The pixel DOES collect:

Click targets and coordinates (which element was clicked)
Scroll position and velocity
Hover duration on interactive elements
Time spent on page (visible tab time only)
Page URL pathname (not query parameters)
Device type and connection speed (from browser APIs)
JavaScript error messages and file/line references
HTTP response status codes from network requests
Performance timing (page load speed metrics)

All behavioral data is captured as abstract, structured telemetry. It describes how users interact with elements, not what those elements contain.

1.4 Cookies and Identifiers

The Harvv pixel uses a randomly generated session identifier stored in the browser's memory (not a cookie). This identifier expires when the browser session ends. Harvv does not use third-party cookies and supports a fully cookieless mode for strict GDPR compliance.

1.5 Payment Information

Payment processing is handled by Stripe, Inc. We do not store credit card numbers or bank account information. See Stripe's Privacy Policy.

2. How We Use Information

To provide the Service: Detect UX issues, generate fix recommendations, produce reports
To improve the Service: Anonymized, aggregated data is used to improve detection accuracy and build the fix pattern library
To communicate with you: Onboarding emails, issue alerts, weekly digests, product updates (with your consent where required)
To personalize your experience: Professional profile data is used to tailor onboarding and fix recommendations to your role
To process payments: Billing and subscription management via Stripe

3. Marketing Communications

We send marketing communications only with your explicit consent. You may opt out at any time by:

Clicking the "Unsubscribe" link in any marketing email
Updating your communication preferences in your account settings
Emailing hello@harvv.com

Transactional emails (password resets, billing confirmations, critical security notices) are not considered marketing and may be sent without separate consent.

4. Data Sharing

We do not sell your data. We share data only with:

Stripe — for payment processing
Resend — for transactional and marketing email delivery
Anthropic — for AI-powered analysis (behavioral data only, no PII)
Apollo.io — for professional profile enrichment (your email only)
Railway — for hosting infrastructure

We may disclose data if required by law, court order, or to protect our legal rights.

5. Data Retention

Behavioral telemetry data is retained for the duration of your account. Account data is retained for 30 days after account deletion to allow recovery, then permanently deleted. You may request immediate deletion by contacting legal@harvv.com.

6. Your Rights

6.1 All Users

Access your data at any time through your dashboard
Export your data via the API
Delete your account and all associated data
Opt out of marketing communications

6.2 California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact legal@harvv.com.

6.3 European Economic Area Residents (GDPR)

If you are in the EEA, you have additional rights including the right to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal basis for processing is legitimate interest (providing the Service) and consent (marketing communications). Contact our Data Protection contact at legal@harvv.com.

6.4 End Users of Websites Using Harvv

If you are an end user (visitor) of a website that uses Harvv, the website operator is the data controller. Harvv acts as a data processor. Contact the website operator for data access or deletion requests. The Harvv pixel does not collect PII and supports cookieless mode.

7. Security

We implement industry-standard security measures including:

Encryption in transit (HTTPS/TLS for all connections)
Encryption at rest (Railway-managed database encryption)
Password hashing (bcrypt with cost factor 12)
JWT-based authentication with expiring tokens
Rate limiting on all endpoints
No PII in behavioral data by architectural design

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Olivas Venture Capital LLC d/b/a Harvv
Denton County, Texas
Privacy inquiries: legal@harvv.com
General: hello@harvv.com