Privacy Policy

Last updated: 1 November 2026

HarbiLeads is a guest post outreach tool — a Windows desktop app with supporting web services at harbileads.com. This policy explains, in plain language, what data we handle and why. We collect as little as the product needs to work, and we never sell personal data.

Account data

When you create a HarbiLeads account we store your email address, username and a securely hashed password, together with your plan, credit balance and activation details. This is what lets the app sign you in, refill your daily credits and restore your setup.

Sending accounts you connect

HarbiLeads sends campaigns from your own Gmail or Google Workspace accounts. To save you from re-connecting accounts after a reinstall, the App Passwords of accounts you connect are stored on our server encrypted (AES-256-GCM) and are only decrypted to restore your own accounts back to you, in a process that is audit-logged. Removing a sending account in the app also removes its stored server copy. We never read your mailbox or your messages.

Prospect data you work with

Your prospect lists, found emails and campaign content live in the app on your computer. When you run email verification or Domain Rating lookups, the specific email addresses or domains being checked are processed by our servers (and, for Domain Rating, by Ahrefs' API) to return the result. Emails you find are addresses that websites publish publicly for contact purposes.

Campaign tracking

When you send a campaign with tracking enabled, opens and link clicks by recipients are recorded through our tracking service so the app can show you campaign statistics. This uses a small tracking image and tracked links, as is standard for outreach tools.

Payments

Plan purchases are handled through our payment channels; we keep records of the transaction (plan, amount, date, status) for accounting and support, and do not store full card details on our servers.

This website

• Analytics: we use Google Analytics to understand which pages are useful. It sets cookies and reports aggregated usage.
• Free DR Checker: domains you check are stored in a result cache for up to 30 days (this is what makes repeat checks instant), and your IP address is logged briefly to enforce the free daily fair-use limit.

What we never do

• We never sell your data or your prospect lists.
• We never send email from your accounts except the campaigns you create and send.
• We never ask for your Gmail login password — sending accounts use App Passwords only.

Your choices

You can remove sending accounts (which deletes their stored credentials), stop using the service at any time, and ask us to delete your account data. To reach us, use the support options inside the app panel at app.harbileads.com or the contact routes on the Contact page.

Changes

If this policy changes in a way that matters, we will update this page and the date above.