Privacy Policy

Effective Date: June 13, 2025

1. Introduction

Harvest AI Inc. (“Harvest,” “we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy outlines how we collect, use, disclose, and safeguard client, customer and personal information (collectively, “Personal Data”) when you (“User” or “you”) use our website (https://www.useharvest.ca) and the Harvest accounts receivable software platform (collectively, our “Services”). It also explains your rights regarding your Personal Data. By accessing or using our Services, you consent to the data practices described in this Policy.

2. Scope and Updates

This Policy applies to all Personal Data collected through the Services. We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. If we make material changes, we will post the updated Policy on our site with a new effective date. We encourage you to review this Policy periodically. Your continued use of the Services after any changes indicates acceptance of the revised Privacy Policy.

3. Information We Collect

We collect various types of information in order to provide and improve our Services:

• Information You Provide Directly: When you register or use Harvest, we collect information such as your name, business name, email address, phone number, and other contact details required to create an account. We also collect any information you choose to provide to us through correspondence (for example, when you contact support). If you subscribe to paid Services, we (or our payment processor) may collect billing and client information such as payment card details and billing address for payment or processing purposes.
• Accounts Receivable Data: Our platform allows you to upload or sync financial data related to your accounts receivable, including information about your customers or debtors (e.g. names, business/personal contact details, invoice amounts, payment history, and related financial information). You represent that if you provide Personal Data about third parties (such as your customers or debtors), you have obtained any necessary consent or have the legal right to share that information with us.
• Information Collected Automatically: When you use our website or platform, we automatically collect certain technical information. This includes device and browser information (such as IP address, browser type, operating system, device identifiers), usage data (dates/times of access, pages or features used, clicks, and other activity on the Services), and if applicable, log-in/log-out times. We use this data to monitor the performance of the Services, maintain security, and analyze usage patterns.
• Cookies and Similar Technologies: We use cookies, scripts, and similar tracking technologies to personalize your experience and gather information about how you navigate our Services. Cookies are small data files stored on your device that help websites remember your preferences and activity. For example, we use cookies to keep you logged in, to understand which features are most used, and to assist in our marketing efforts. You can adjust your browser settings to refuse cookies or alert you when cookies are being used. Note that if you disable or delete cookies, some features of our Services may not function properly. We also use third-party analytics tools (such as Google Analytics) that set their own cookies to collect aggregate information about user traffic and interactions on our site. These analytics providers may process some Personal Data (e.g. IP address and usage info) to provide us reports and insights; however, they are not permitted to use this information for their own purposes beyond providing the analytics services.

4. How We Use Your Information

Harvest collects and uses Personal Data for the following purposes:

• Providing the Services: We use the information to operate the platform and deliver the features you expect, such as managing your accounts receivable data, generating reports, facilitating invoice collections, and enabling payment processing.
• Account Management and Communication: We use contact information (like email and phone number) to register your account, communicate with you about your account, send necessary service or support messages, and respond to your inquiries. We may also send product updates, newsletters or promotional communications about new features or offers with your consent or as otherwise permitted by law. You can opt out of marketing emails at any time by using the unsubscribe link or contacting us.
• AI-Powered Analysis and Automation: Harvest’s Services include artificial intelligence and machine learning features. We use your accounts receivable and financial data to run automated analyses and algorithms that provide insights, forecasts, risk scores, collection recommendations, and other automated functionalities to help you manage and collect receivables. These AI-driven processes assist in decision-making but do not involve solely automated decisions that have legal or significant effects on individuals without human intervention. We implement AI to augment your workflow; you retain control over how to use the insights provided. (See Section 6 below for more on our AI usage and related user responsibilities.)
• Improvement and Development: Personal Data (especially aggregated or de-identified data) is used to understand usage trends and to improve our Services. For example, we analyze how users interact with features to refine our user interface and we may use feedback or usage patterns to develop new accounts receivable tools or AI models.
• Compliance and Protection: We may use Personal Data as necessary to enforce our Terms & Conditions, to detect or prevent fraud and technical issues, and to protect the rights, property, or safety of Harvest, our users, and others. We also use data to comply with applicable legal obligations – for example, maintaining records for tax or accounting purposes, or responding to lawful requests by governmental authorities.

We will not use Personal Data for purposes other than those described above without obtaining your consent or unless authorized by law.

5. AI and Automated Decision-Making

Because our platform leverages AI technology, we want to be transparent about how it uses your information:

Harvest uses machine learning algorithms on the data you provide (such as your receivables portfolio and customer payment histories) to generate predictive insights and automations. For instance, our AI tools may predict the likelihood of invoice payments, prioritize collection efforts, or recommend personalized messaging for overdue accounts. These AI features are intended to enhance your experience by identifying patterns and streamlining accounts receivable management.

While the AI tools can provide valuable guidance, no final decisions with legal or significant personal impact are made by the AI alone. We do not engage in automated decision-making that would deny services or produce legal effects without human review. If you have any questions about how an AI-driven result was generated, you may contact us for more information. Your data is not used to train AI models unrelated to the Services; any machine learning training is either done on your data in a way that stays within your account’s environment or on anonymized, aggregated data to improve overall system performance.

6. Data Sharing and Disclosure

We understand the importance of keeping your information private. We only share your information in the following circumstances:

• Service Providers: We may share Personal Data with third-party service providers who help us operate and support our business and Services. This includes services such as payment processing (e.g., Stripe for handling payments), cloud hosting and data storage, email delivery and customer support systems, analytics tools, and other IT or business service providers. These partners will access and process Personal Data only on our behalf and under our instructions, for the purposes of providing their services to us. They are contractually obligated to safeguard your information and use it solely for the services they provide to Harvest. For example, our payment processor will receive billing information to process payments, but cannot use it for any other purpose.
• Business Transfers: If Harvest is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, your information may be transferred to the successor or affiliate as part of that transaction. In such cases, we will ensure that your Personal Data remains subject to protections consistent with this Privacy Policy and applicable law, and we will notify you (for example, via email or a notice on our site) of any change in data handling.
• Legal Compliance: We may disclose Personal Data when required to do so by law or valid legal process, or when we believe in good faith that disclosure is necessary to comply with applicable laws, regulations, or legal obligations. This may include responding to subpoenas, court orders, or government requests. We may also disclose information if necessary to enforce our agreements or policies, or to protect the rights, property, or safety of Harvest, our customers, or others (for example, to prevent or investigate fraud or security issues).
• Your Instructions: We will share your information with other third parties if you specifically request or direct us to do so. For instance, if our platform enables integrations or exports with other financial software and you choose to link your Harvest account with a third-party service, we will transfer data as needed with your consent.

In all cases, we limit the Personal Data shared to what is necessary for the third party to carry out its duties. Whenever Personal Data is transferred to service providers or other third parties, we ensure by contract or other means that your information is protected in accordance with applicable privacy laws.

7. Data Storage and Security

Harvest is dedicated to protecting your Personal Data and we implement commercially reasonable security measures to do so. Personal Data we collect is stored on secure servers. Data Residency: Wherever feasible, we use data centers located in Canada to store Personal Data in order to keep your information under Canadian privacy jurisdiction. If we use cloud or service providers located outside of Canada for certain functionality, your data might be transferred to those jurisdictions. In such cases, we remain responsible for ensuring the information has a comparable level of protection and that any service providers are bound by confidentiality and data protection obligations.

We employ a range of safeguards appropriate to the sensitivity of the information, including physical, organizational, and technological measures. These include firewalls and restricted access to Personal Data by our employees and contractors (access is limited to those who need it to operate or develop the Services, and who are subject to strict confidentiality obligations).

While we strive to protect your information, please note that no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security of your data. You are responsible for keeping your account login credentials confidential to prevent unauthorized access to your account. If you believe your account has been compromised or there has been any unauthorized access, please contact us immediately.

8. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes described in this Policy or as required or permitted by law. This means that we will keep your Personal Data for as long as you maintain an account with us or as needed to provide you with Services. If you close your account or if we no longer need the data to provide Services, we will either securely delete your information or de-identify/anonymize it so it can no longer be associated with you.

However, we may retain certain information for longer periods if necessary to comply with our legal obligations (for example, maintaining transaction records for financial reporting or audits), to resolve disputes or enforce our agreements, or as otherwise required by law. When Personal Data is no longer required for these purposes, we will securely destroy it or render it anonymous.

9. Your Rights and Choices

As a user of Harvest in Canada, you have certain rights regarding your Personal Data under applicable privacy laws, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We are committed to upholding these rights:

• Access and Correction: You have the right to request access to the Personal Data we hold about you and to obtain information about how that data is being used. You also have the right to request corrections or updates to any of your Personal Data that is inaccurate or incomplete. Most of your basic account information can be reviewed and updated by logging into your Harvest account settings. For any additional access or correction requests, you may contact us using the contact information below. We will respond to your request within a reasonable timeframe and as required by law.
• Withdrawal of Consent: In situations where we rely on your consent to process Personal Data (for example, if you opted in to receive marketing emails), you have the right to withdraw that consent at any time. You can opt out of marketing communications by clicking the “unsubscribe” link in emails or adjusting your account preferences. For other consent withdrawals, please contact us. Note that if you withdraw consent for certain essential data uses (such as use of your data to provide the core Services), we may need to limit or deactivate your account, as we cannot provide the Service without processing that information. We will explain any such implications to you at the time of your request.
• Account Deletion: You have the option to request deletion of your account or Personal Data. If you wish to close your account and have us delete (or anonymize) your Personal Data, please contact us. We will take reasonable steps to comply with your request, provided we do not need to retain certain information for legal or legitimate business purposes as described in Section 8 (Data Retention) above.
• Complaints: We take your privacy rights seriously. If you have a concern or complaint about how we handle your Personal Data, you can contact us at any time (see Contact Information below) and we will do our best to address it. Additionally, under PIPEDA you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe your privacy rights have been violated. We ask that you please allow us the chance to resolve any issues directly before contacting the OPC, but you are free to reach out to the regulator at any time.

Your Choices: In addition to your formal rights, you have choices in how your information is used:

• You may choose not to provide certain optional information (though this may limit some features of the Service).
• You may disable cookies through your browser settings (as noted in the Cookies section above).
• You may opt out of Google Analytics data collection by using the Google Analytics opt-out browser add-on, or similar tools provided by other analytics services we might use.

We will not discriminate or deny you any service for exercising your rights and choices regarding your Personal Data. Some features and services may be limited if you choose to withhold or delete necessary data, but we will inform you of such implications.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how Harvest handles your Personal Data, please contact our Privacy Officer:

Harvest AI Inc.
Attn: Privacy Officer
Email: hello@useharvest.ca
‍Mailing Address: 1 Wingate Place, Toronto, Ontario, M5N 2P9

We will respond to inquiries as promptly as possible. For additional information about our Services or for customer support inquiries, you may also contact us through the support channels provided on our website.

‍