Privacy policy

1. What we store

Harbour stores your business profile, your team's accounts, encrypted provider keys and the transaction records your providers send us. We never collect, hold or move money.

2. Why we store it

To show you every payment in one place, forecast and match your settlements, send the notifications you choose, and keep a record your providers can reconcile against. Provider payloads are kept for reconciliation only.

3. Who can see it

People you invite to your business, with the role you give them. Nordaxiz support staff can open a read-only support session only to help you; every session is logged, time-boxed and your business owner is emailed when it starts.

4. How it is protected

Provider secret keys are encrypted before they are stored and are never shown again or written to logs. Each business's data is kept separate in every query. Connections use TLS. Backups are encrypted and tested by restore every month.

5. Your rights under the NDPA

You can export or delete your data at any time from Settings. Deletion removes your tenant, your team and your transaction history within thirty days, except records the law requires us to keep.

6. Messages we send

Emails, SMS and push notifications you turn on in Settings. We do not run a mailing list and we do not sell or share your data for marketing.

7. Contact

Nordaxiz Technology Limited, Lagos, Nigeria. Write to privacy@nordaxiz.com with any question about your data.