Privacy Policy

1. Who We Are

2. Information We Collect

We collect only the information necessary to provide the Harv.ant service. We do not sell your personal information to third parties.

2.1 Account information

• Full name and email address
• Password (stored as a secure hash — we never store your plain-text password)
• Practice or company name (optional)
• ABN (optional, used for invoicing only)

2.2 Scan and project data

• Floor plan data generated by your device (room dimensions, wall positions, door and window locations)
• Photos you upload for photogrammetry processing
• 3D model files generated from your scans (OBJ, GLB, IFC, USDZ)
• Project metadata: name, address, scan date, scan method, notes and annotations

2.3 Payment information

Harv.ant uses RevenueCat to process in-app purchases. We do not collect or store your credit card details. RevenueCat provides us with purchase transaction IDs, subscription status and purchase dates only.

2.4 Client sharing data

• Client name and email address you provide when generating a share link
• Comments your client submits on the shared project
• Date and time the share link was accessed

2.5 Device and usage data

• Device type, operating system version and app version
• Anonymised crash reports and error logs
• Anonymised feature usage statistics
• IP address (used for security only — not stored long term)

3. How We Use Your Information

4. How We Store Your Data

4.1 Storage provider

Your data is stored using Supabase (Supabase Inc.), which provides PostgreSQL database hosting, file storage and authentication services. Data is stored in Australia (ap-southeast-2 — Sydney) by default.

4.2 Security measures

• All data in transit is encrypted using TLS 1.2 or higher
• All data at rest is encrypted using AES-256
• Passwords are hashed using bcrypt
• Row-level security enforced at the database level — your projects are accessible only to your account
• File storage uses signed URLs with expiry — shared links cannot be used after expiry

4.3 Retention periods

5. Sharing Your Information

We do not sell, rent or trade your personal information. We share data only in the following limited circumstances:

5.1 Service providers

5.2 Client share portal

When you generate a share link for a client, the floor plan, room details and notes you choose to include are accessible to anyone with that link. You control what is shared. Links expire on the date you set.

5.3 Legal requirements

We may disclose your information if required by law, court order or a regulatory authority, or if we believe disclosure is necessary to protect the safety of any person or to prevent fraud.

5.4 Business transfers

If Ten Labs is acquired or merges with another company, your personal information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. Your Rights

6.1 All users (Australian Privacy Act)

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Complaint — lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

6.2 EU / UK users (GDPR)

• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Right to object to processing based on legitimate interests
• Withdraw consent at any time where processing is consent-based

6.3 California users (CCPA)

• Know what personal information is collected, used, shared or sold
• Delete personal information we have collected (subject to exceptions)
• Opt out of the sale of personal information — note: we do not sell personal information
• Non-discrimination for exercising your CCPA rights

6.4 Account deletion

You can delete your Harv.ant account at any time from Settings → Account → Delete Account. All your projects, scan data, 3D models and personal information are permanently deleted within 30 days, except payment transaction records which are retained for 7 years as required by Australian law.

7. Cookies and Tracking

The Harv.ant mobile app does not use advertising cookies or tracking pixels. The client share portal (web) uses strictly necessary cookies only — session tokens and display preferences. We do not use Google Analytics, Facebook Pixel or any advertising or behavioural tracking technology. We do not serve advertisements in Harv.ant.

8. Children’s Privacy

Harv.ant is intended for professional use by adults aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact privacy@harvant.app and we will delete it promptly.

9. International Data Transfers

Ten Labs is based in Australia and your data is primarily stored in Australia (AWS Sydney / Supabase ap-southeast-2). Some service providers may process data in the United States (RevenueCat, AWS us-east-1 for photogrammetry processing).

Where data is transferred outside Australia, we ensure appropriate safeguards are in place including contractual clauses that require the recipient to protect your data to the same standard required under Australian law. For EU users, transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Third-Party Links

Harv.ant may contain links to third-party websites or services (for example, links to AutoCAD or SketchUp for viewing exported files). This Privacy Policy does not apply to those third-party services. We encourage you to read the privacy policies of any third-party services you use.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email and with a prominent notice within the Harv.ant app at least 14 days before changes take effect. Continued use of Harv.ant after the effective date constitutes acceptance of the updated policy.

All versions of this policy are available at harvant.app/privacy.

12. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or our handling of your personal information, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001