Privacy Policy

Last Updated: February 2, 2026

At Harvesto.io, operated by AfterActions, LLC, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Name and email address
  • Authentication credentials (password hash or OAuth tokens)
  • Account preferences and settings

1.2 Zoom Integration Data

When you connect your Zoom account, we collect and store:

  • OAuth access and refresh tokens (encrypted at rest)
  • Zoom user ID and account ID
  • Meeting transcripts and metadata (topic, duration, date)

1.3 Content You Create

  • Persona configurations (name, description, example posts)
  • Generated and edited content drafts
  • Usage preferences and schedule settings

1.4 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number. Stripe provides us with a token, card type, last four digits, and billing address for transaction records.

1.5 Automatically Collected Information

  • IP address and browser type
  • Device information and operating system
  • Pages visited and features used
  • Timestamps and session duration

2. How We Use Your Information

2.1 Service Delivery

  • Authenticate your account and maintain your session
  • Connect to Zoom and retrieve your meeting transcripts
  • Sanitize transcripts to remove sensitive information
  • Generate LinkedIn content using AI based on your personas
  • Deliver generated drafts via email and web interface

2.2 Service Improvement

  • Analyze usage patterns to improve features
  • Debug issues and maintain service reliability
  • Develop new features based on user needs

2.3 Communication

  • Send generated content drafts and notifications
  • Respond to support requests
  • Send service updates and important announcements

3. Information Sharing

We share your information only in the following circumstances:

3.1 Service Providers

We use trusted third-party services to operate Harvesto:

Provider Purpose
Digital Ocean Cloud hosting and database
OpenAI AI content generation
Stripe Payment processing
Mailgun Email delivery
Google OAuth authentication
Zoom Meeting transcript API

3.2 Legal Requirements

We may disclose your information if required by law, subpoena, or court order, or to protect our rights, property, or safety.

3.3 Business Transfers

If AfterActions, LLC is acquired or merges with another company, your information may be transferred as part of that transaction.

4. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of sensitive data at rest and in transit (TLS/SSL)
  • OAuth tokens stored with Fernet encryption
  • Regular security audits and updates
  • Access controls limiting employee access to user data
  • Secure cloud infrastructure with Digital Ocean

5. Data Retention

We retain your data as follows:

  • Account data: Until you delete your account
  • Transcripts: Until you delete them or your account
  • Generated drafts: Until you delete them or your account
  • Zoom tokens: Until you disconnect Zoom or delete your account
  • Usage logs: 90 days
  • Billing records: As required by law (typically 7 years)

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate information
  • Deletion: Delete your account and associated data
  • Portability: Export your data in a machine-readable format
  • Objection: Opt out of certain data processing
  • Withdrawal: Revoke consent for optional processing

To exercise these rights, contact us at [email protected].

7. Children's Privacy

Harvesto is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

8. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

9. California Privacy Rights

California residents have additional rights under the CCPA, including the right to know what personal information we collect and how it's used, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or concerns, please contact us at:

AfterActions, LLC (operating as Harvesto.io)
1820 Avenue M #780
Brooklyn, NY 11230
Email: [email protected]