Raven is operated by Harbor Labs LLC ("we", "us"). This policy covers Raven's website (tryraven.io), the Raven web app (app.tryraven.io) and Raven's apps. The short version: we keep what's needed to run your account and sync your workspace, your AI provider keys never reach us, we don't sell your data, and there are no ads or tracking.
What we collect
- Your account: your email address and a securely hashed password, or the identifier Apple gives us if you use Sign in with Apple.
- Your profile: the name and photo you add in Settings → Profile, if you add them. They appear on boards you share, and to people who share a board with your email address. Your photo is stored at an unlisted web address so those pages can show it.
- Your workspace: the spaces, projects, documents, chats, boards and settings you create, so they're the same on every device you sign in to.
- Boards you share: when you share a board, a copy of it (its name, slots, products and picks) is kept so its page can open, along with the email addresses you invite. Your chat is never part of it.
- What you search for: when a board looks for products or for pages on the web, that section's search (its description and any limits, like a budget, plus the names of things you've kept) goes to Raven's service. When you use People search, your question does too.
- Usage counts: how many searches your account made in each hour, to keep the service fair, kept for seven days; and how many free turns you've used this month.
- Error reports: when something in Raven breaks, what broke (the error message and where in Raven's code it happened) and the app version, so we can fix it. Emails, keys and links are stripped before it's stored, and it never includes your chats, boards or anything you typed. Kept for 90 days after the error last happens.
- Technical logs: our hosting provider records requests (such as IP address, time and browser) to run and secure the service. We don't use them to profile you.
We don't use analytics, advertising or tracking tools on the website or in Raven.
What we don't collect
- Your AI provider keys. Keys for OpenAI, Anthropic or Google stay on your device (in your Mac's or iPhone's Keychain, or in your browser on the web) and are sent only to that provider.
- Your chats with your own key. When Raven answers with your key, your messages and the context you choose go straight from your device to that provider.
When Raven answers with its free monthly turns instead, your messages and the context you choose go through Raven's service to Anthropic, which answers on our behalf. We count the turn and what it cost; we don't keep the messages.
Who else is involved
We use a few companies to run Raven. They handle your data only to provide their service to us.
- Supabase stores accounts and synced workspaces (in the United States).
- Vercel hosts the website, the web app and Raven's service.
- Resend sends account emails, like sign-up codes, and invitations to boards people share with you.
- Shopify answers product searches from its catalog of stores. It receives the search, not your account details.
- Anthropic and OpenAI process People searches on Raven's behalf: your question and the public experiences Raven found. Anthropic also answers Raven's free monthly turns and searches the web for boards' web sections. To show a page's photo, Raven's service loads the start of that page, as a visitor would, without anything about you.
When you use your own key, your chosen AI provider handles your messages under its own terms and privacy policy.
When you open a product, you go to the store's own site, which has its own policies. If a link carries an affiliate tag, the store or affiliate network may know the visit came from Raven; we don't share your account details with them.
How long we keep it
- Your workspace stays until you delete it or your account. Deleting an item removes its contents; a small marker remains so your other devices learn it's gone.
- Your account stays until you delete it. Deleting your account removes your workspace, profile, photo, shared boards and usage counts. Copies can remain in our providers' backups for a short time before they expire.
- Shared boards stay shared until you stop sharing them or delete your account. Stopping sharing removes the copy and the list of people invited, and the link stops working.
- People answers are cached by question, not linked to anyone, and expire on their own.
Your choices
- Who sees a board: a board is only yours until you share it. In its Share dialog you choose who can open it (only people you invite, or anyone with the link), remove anyone, or stop sharing at any time.
- Download your data: Settings → Account → Download your data.
- Delete your account: Settings → Account → Delete account. It's permanent.
- Correct or ask about your data: email hello@useharbor.io.
Depending on where you live, you may have rights to access, correct, delete or move your data, and to object to how it's used. We honor these requests for everyone, wherever they live.
Children
Raven isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child has an account, email us and we'll delete it.
Security
Your data travels encrypted, and each account can only read its own workspace. No system is perfectly secure, so we keep what we collect to what Raven needs.
Changes
If we change this policy, we'll update the date at the top, and tell you in Raven or by email if the change is significant.
Contact
Harbor Labs LLC, Illinois, United States. hello@useharbor.io