Privacy Policy
HarvestWave, LLC
Woodland Park, Colorado
Effective date: September 18, 2026
This Privacy Policy describes how HarvestWave, LLC (“HarvestWave,” “we,” “us,” or “our”) collects and uses information in connection with harvestwave.com and our business phone-number identification service (the marketing site, customer portal, and API).
Questions: jnaujok@harvestwave.com
Mail: HarvestWave, LLC, 1309 Snowshoe Court, Woodland Park, CO 80863
1. Who we are
HarvestWave operates a B2B service that identifies whether a phone number is associated with a business and which firm or firms are listed on that number. The primary buyers are call centers and related systems that need to know when a call involves a business acting on behalf of a customer rather than the customer’s direct line.
We do not sell visitor lists or customer contact lists.
2. Information we collect
2.1 Information you send us
- Email and support. If you email us, we receive your email address and the content of your message.
- Portal account. If you create a portal account, we process the credentials and account details needed to operate that account (such as name, email, authentication credentials, and role).
- Billing. For paid accounts we process payment and billing information through our payment processor (currently Stripe). We do not store full card numbers on HarvestWave systems; Stripe processes card and payment data under its own terms and privacy policy.
- API credentials. If you use the API, we process API keys, OAuth2 client credentials, and related authentication metadata.
2.2 Lookup requests
When you (or your application) submit a lookup, we receive the phone number you send and return an identification result (for example, whether the number is a business and which firm or firms are listed). We process lookup requests to provide the service, prevent abuse, bill prepaid credits, and operate and secure the platform.
For operational lookup logs, we store a hashed form of the phone number rather than retaining the raw number in those logs, to reduce privacy risk while still supporting billing, abuse prevention, and reliability.
We do not use lookup traffic to invent extra product claims on this site.
2.3 Technical and site data
When you visit the marketing site or use the portal or API, our systems may automatically process ordinary technical data such as IP address, timestamps, request paths, user-agent, and similar logs needed for security, reliability, and abuse prevention.
We do not run advertising pixels or sell browsing profiles. If we add optional analytics later, we will update this policy.
3. How we use information
We use the information above to:
- Provide, operate, secure, and improve the site and service
- Authenticate users and applications
- Process prepaid credits and billing
- Respond to support requests
- Detect fraud, abuse, and security incidents
- Comply with law and enforce our Terms
We do not sell personal information or visitor lists.
4. Who we share information with
We share information only as needed to run the service:
| Recipient | Purpose |
|---|---|
| Stripe | Payment processing for portal billing / credits |
| Service providers | Hosting, email delivery, and similar operators who process data only on our instructions |
| Your authorized users and apps | Portal users and API clients you configure |
| Legal process | When required by a search warrant or other binding legal process, limited to information responsive to the request’s scope. We do not do a blank whole-account dump |
We do not sell your data to data brokers.
5. Retention
We keep account, billing, and operational records for as long as your account is active and as needed afterward for billing disputes, security, and legal obligations.
Lookup logs are retained for a minimum of 90 days and a maximum of 180 days. In those logs, the phone number is stored in hashed form for privacy. After the retention window, lookup logs are deleted or anonymized in the ordinary course.
Other technical logs (for example, security and request metadata) are kept only as long as needed for security, reliability, and abuse prevention.
If you close an account, we will stop active processing for that account and delete or de-identify account data within a commercially reasonable period, except where we must retain records (for example, paid invoices or legal holds).
6. Security
We use commercially reasonable administrative, technical, and organizational measures designed to protect the service. No method of transmission or storage is perfectly secure.
7. Your choices
- You may update portal account details through the portal or by contacting us.
- You may stop using the API by disabling credentials or closing your account.
- You may email jnaujok@harvestwave.com to ask questions about this policy or your account data.
This is a B2B service. If you are an individual whose phone number was submitted by a HarvestWave customer for identification, contact that customer (the business that submitted the lookup) about their use of the result. We process lookups to provide the service to our customers.
8. Children
The service is for businesses. It is not directed to children under 13, and we do not knowingly collect personal information from children.
9. Changes
We may update this Privacy Policy from time to time. The effective date above will change when we do. Continued use of the site or service after an update means you accept the revised policy.
10. Contact
HarvestWave, LLC
jnaujok@harvestwave.com
1309 Snowshoe Court, Woodland Park, CO 80863