Privacy Policy
Last updated: April 18, 2026
This Privacy Policy describes how Notice Harbor (“we,” “us”) collects, uses, and shares information when you use our service. If you have questions, email hello@noticeharbor.com.
Information we collect
Account information
When you create an account, we collect your email address, name, phone number, company name, and authentication credentials.
Project information
To prepare each preliminary notice, you provide information about the construction project, including: property address and assessor’s parcel number; property owner name and mailing address; general contractor name and address; lender name and address (if applicable); description of work; project dates; and claim amount.
Information about third parties
A preliminary notice is a legal document sent about a construction project, so you necessarily provide information about people and companies other than yourself — typically the property owner, the general contractor, and any lender. We collect this information from you, not from those parties directly. You are responsible for confirming you are entitled to submit it.
Payment information
Payments are processed by Stripe. We receive only the last four digits of the card, card brand, and transaction metadata. Full payment details are stored by Stripe under its own privacy policy.
Usage information
We retain basic server logs (IP address, user agent, pages visited, timestamps) for a short period for security and debugging. We do not use advertising cookies, tracking pixels, or third-party analytics that build profiles about users.
How we use information
- To prepare, print, and mail preliminary notices and Proofs of Service
- To verify property ownership and recipient deliverability using third-party APIs
- To send transactional email about your notices (order confirmation, deadline reminders, mailing confirmation with tracking number)
- To process payments and maintain purchase records
- To provide customer support
- To detect and prevent fraud or misuse of the Service
- To comply with law
How we share information
We share information only with the service providers we need to deliver the product:
- Stripe — payment processing
- Supabase — database, authentication, and file storage
- Vercel — application hosting
- Resend — transactional email delivery
- ATTOM Data — property owner and parcel lookup (we send the property address; we receive tax-assessor records)
- Smarty — USPS address verification (we send recipient addresses; we receive CASS/DPV deliverability results)
- Google — address autocomplete (we send the partial address you type; Google returns suggestions)
- USPS — physical delivery of the notice by Certified Mail with return receipt
Each of the providers above acts as our service provider and is contractually restricted to using the data for our purposes. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
We may also disclose information when legally required (subpoena, court order, lawful government request) or when necessary to protect our rights, property, or safety or that of others.
Public nature of preliminary notices
Once we mail a preliminary notice, the physical copy is delivered to the recipient you identified, and we have no control over what the recipient does with it. If you later pursue a mechanics lien, the lien itself is recorded with the county and becomes a public record.
Retention
We retain project data, notices, and Proofs of Service for as long as your account is active, so you can access your filing history. If you delete your account, we will delete or anonymize your project data within 30 days, except records we are legally required to keep (for example, payment and tax records, which are retained for seven years).
Security
Data is stored in Supabase (US region) and transmitted over TLS. Row-level security policies in the database restrict account data to the owning user. Administrative access is limited and logged. No system is perfectly secure, and we do not guarantee absolute security.
Your rights
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:
- Know what personal information we have collected about you
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information — note that we do not sell personal information and do not share it for cross-context behavioral advertising
- Not be discriminated against for exercising any of these rights
To exercise any of these rights, email hello@noticeharbor.com from the address on your account. We will respond within 45 days.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal information from minors.
International users
The Service is hosted in the United States and intended for users pursuing construction projects located in California. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law.
Changes to this policy
We may update this Policy from time to time. Material changes will be communicated by email and reflected in the “Last updated” date above.
Contact
Privacy questions? hello@noticeharbor.com.