HarvestyTerms of Service

Privacy Policy

Last updated: July 2, 2026

1. Who we are

Harvesty (“Harvesty,” “we,” “us”) provides a bilingual AI calling, texting, and scheduling assistant for businesses, with a focus on Quebec real estate. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to our web application at harvesty.ca and the services it provides.

2. Information we collect

We collect the following categories of information:

  • Account information — your name, email address, business name, phone number, and authentication identifiers when you sign up or sign in (including via Google, Microsoft, or Apple sign-in).
  • Business & configuration data — your business profile, AI persona settings, scripts, working hours, and scheduling rules.
  • Contacts — the names, phone numbers, email addresses, and notes for the people you choose to call or text through Harvesty, whether entered by you, imported, or captured on a call.
  • Call & message content — call audio recordings (when you enable recording), transcripts, AI-generated summaries and outcomes, and the content of SMS messages sent and received through the service.
  • Connected-account data — when you connect a Google or Microsoft account, the data made available by the specific permissions you grant (see Section 4).
  • Billing data — plan, usage, and payment status. Card details are handled by our payment processor and are not stored by Harvesty.
  • Usage & device data — log data, IP address, browser type, and product analytics used to operate, secure, and improve the service.

3. How we use your information

  • To provide, operate, and maintain the service.
  • To place and receive AI-assisted calls and texts on your behalf, and to check availability and book appointments when you enable those features.
  • To generate transcripts, summaries, and outcomes from your calls.
  • To process billing and prevent fraud and abuse.
  • To support you, communicate service notices, and improve product quality and reliability.
  • To comply with legal obligations.

We do not sell your personal information, and we do not use the content of your calls, messages, or connected-account data to build advertising profiles.

4. Connected Google and Microsoft accounts

Connecting a Google or Microsoft account is optional and is used only to power the features you turn on. You grant permissions through the provider’s own consent screen, and you can revoke them at any time from your provider account settings or by disconnecting the integration inside Harvesty.

  • Calendar — we read your free/busy availability so the AI can offer open times, and we create, update, or cancel events for the appointments you book through Harvesty. We do not read the private details of your existing events beyond what is needed to compute availability.
  • Send email — if you enable it, we send booking confirmations and follow-ups from your connected address. We do not read your inbox.

Scope of Google user data. Google user data (your Google Calendar events, calendar availability, and the ability to send email from your Gmail address) is used ONLY to provide the user-facing features you explicitly enable: showing your availability, booking and syncing appointments, and sending emails that you or your AI assistant compose. We never use Google user data for billing, fraud prevention, customer support, marketing, advertising, analytics, improving other products, or developing or training generalized AI/ML models. We do not sell Google user data and do not transfer it to third parties except as necessary to provide these features, for security, or to comply with applicable law.

Google API Services — Limited Use. Harvesty’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained from Google APIs (such as Google Calendar and Gmail send) is used only to provide and improve the user-facing features described above, is not transferred or sold for advertising or other unrelated purposes, is not used to train generalized AI/ML models, and is only accessed by humans where you have given consent, for security, to comply with law.

Microsoft Graph data (Outlook Calendar and mail-send) is handled on the same basis: used only to deliver the features you enable, never sold, and never used for unrelated profiling.

5. How we share information

We share information only with service providers who help us run the service, under contracts that limit their use of the data to providing services to us. These include:

  • Telephony & SMS providers (to place calls and send texts);
  • Real-time voice and AI providers (to power the AI agent);
  • Cloud hosting, database, and storage providers;
  • Our payment processor (for billing);
  • CRM and calendar/email providers you choose to connect.

We may also disclose information to comply with the law, enforce our agreements, or protect the rights, safety, and security of our users and the public. If Harvesty is involved in a merger or acquisition, information may be transferred as part of that transaction subject to this Policy.

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the service, then delete or de-identify it within a reasonable period, unless a longer retention period is required by law (for example, billing records) or to resolve disputes and enforce our agreements. You can ask us to delete your data as described in Section 8.

7. Security

We use technical and organizational safeguards to protect your information, including encryption in transit, access controls, and encryption of sensitive credentials at rest. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of incidents where required.

8. Your rights (PIPEDA & Quebec Law 25)

Depending on where you live, you have rights over your personal information. For users in Canada and Quebec, these include the right to access the personal information we hold about you, to request correction, to withdraw consent, and to request deletion, subject to legal limits. To exercise these rights, contact us at privacy@harvesty.ca. We will respond within the timeframes required by applicable law.

You are responsible for having a lawful basis to contact the people whose information you load into Harvesty, and for honoring opt-out and do-not-call requests; the service provides tools (such as STOP handling) to help you do so.

9. International transfers

We and our service providers may process and store information in Canada, the United States, and other countries. Where required, we use appropriate safeguards for cross-border transfers of personal information.

10. Children

Harvesty is a business tool and is not directed to children. We do not knowingly collect personal information from children under 13 (or the age defined by your local law).

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

12. Contact us

Questions about this Policy or your data? Email us at privacy@harvesty.ca.