Privacy Policy
Effective: June 15, 2026 · Last updated: June 15, 2026
The short version
We built HarborPay to make financing insurance premiums simple — so we keep our privacy practices simple too. Here's the deal:
What we collect: your contact info, your policy and payment details, and the bank account or card you pay with.
Your account numbers stay locked down. We never store your full bank account or card number. Our payment processor tokenizes them; we keep only the last four digits and a token.
We don't sell your data. Not to advertisers, not to anyone. We share it only to actually run your financing — moving your payments, running the platform, and staying on the right side of the law.
You're in control. You can ask to see, correct, or delete your information. Just email us at privacy@harborpay.app.
The rest of this page is the full detail. We kept it readable on purpose.
Who we are
HarborPay is operated by BLP.is LLC, doing business as HarborPay ("HarborPay," "we," "us"). We run a premium finance platform that lets you finance insurance premiums and pay them over time.
You probably came to us through your insurance finance company or agency — we call them your Lender — and you may see their brand rather than ours when you sign up. But the platform itself, including where you manage and pay your premiums at my.harborpay.app, is operated by HarborPay. This policy covers what happens on that platform.
This policy applies to everyone who uses HarborPay:
Policyholders financing premiums and making payments
Lender and agency teams using the lender console
Visitors to our websites
A quick note on roles: when we handle your information for a Lender (setting up and servicing your financing), we're acting on their behalf — they have their own privacy notice too. When we handle it to keep the platform secure, prevent fraud, and follow the law, that's on us. If you want to exercise a right over something your Lender holds, you may need to reach out to them directly.
What we collect
Who you are Your name, email, mailing address, and phone number, plus the login you use to sign in.
Your insurance and financing Your policy details (number, carrier, coverage type and period), premium amounts and fees, your financing terms (down payment, schedule, APR, balance), and your payment history — including any late or missed payments.
How you pay For ACH: your bank name, account type, routing number, and the last four digits of your account. For cards: the brand, expiration, and last four digits. Plus the payment-method token our processor gives us and the record of each transaction.
We do not store your full bank account number or full card number. Those live with our payment processor, tokenized. We keep only what we need to charge you and show you which account you're using.
Your payment authorization When you authorize an ACH debit, we record the consent you agreed to (stored as a hash), plus the date, time, and IP address — because the rules that govern ACH require us to keep proof.
Your signature Your e-signature, initials, and the agreement and documents you sign or upload.
The technical stuff Your IP address, device and browser info, log data, and an audit trail of actions taken in the platform — for security, troubleshooting, and resolving disputes.
Our conversations The emails, notifications, and support messages we exchange (payment reminders, verification codes, that kind of thing).
We don't go looking for Social Security numbers, government IDs, precise location, or biometrics in the payment flow. If a Lender's process needs more, that's governed by their notice and our agreement with them.
Where it comes from
From you — when you sign up, sign an agreement, add a payment method, or pay.
From your Lender — who sets up your financing with your policy and contact details.
Automatically — through essential cookies and logs when you use HarborPay.
From our partners — our payment processor and login provider send back transaction results and account status.
What we do with it
We use your information to:
Set up and run your account, and verify it's really you
Create, service, and enforce your financing agreement
Process payments, autopay, down payments, refunds, and disbursements
Keep the authorization and e-signature records the law requires
Send you the messages that keep your financing on track — verification codes, reminders, receipts, and notices
Spot and stop fraud and unauthorized payments
Keep the platform secure and our books accurate
Help you (and Lenders) when something goes wrong
Meet our legal, tax, licensing, and recordkeeping obligations
Make the product better
We do not use your financial information to market other products to you.
Who we share it with
We don't sell your personal information, and we don't share it for ad targeting. We share it only to run your financing:
Your Lender — so they can service your agreement.
Moov Financial, Inc. — our payment processor, to set up payment methods and move money over ACH.
Amazon Web Services (AWS) — our infrastructure: hosting, login (Cognito), document storage (S3), and email (SES). They work for us under strict contracts.
Insurance carriers — when it's needed to fund or cancel the financed policy.
When the law requires it — to comply with legal process, protect people and property, enforce our terms, or cooperate with regulators.
If our business changes hands — in a merger, acquisition, or sale, your info may transfer, still protected by this policy.
When you tell us to.
Want the current list of the vendors we use? Email privacy@harborpay.app.
The legal stuff that still matters
We kept the voice friendly, but these next parts are doing real legal work. Read them like you'd read the fine print — because they are the fine print.
Financial privacy (GLBA)
Because we provide premium finance, we're a "financial institution" under the federal Gramm-Leach-Bliley Act, and the information we collect about you is "nonpublic personal information." This policy is also our GLBA privacy notice — we give it to you when you sign up and whenever it materially changes. Here's what it means in practice: we only share your information the ways described above — to run and service your transactions, with our processor and service providers, with your Lender, and when the law requires it.
We don't share your nonpublic personal information with unrelated third parties except as the law permits. Because our sharing falls inside those legal exceptions, the GLBA "opt-out" right often won't apply — but where it does, you can use it by emailing privacy@harborpay.app. We protect this information with the safeguards in How we keep it safe.
Your privacy rights
Depending on where you live, you can ask us to:
Show you what we have about you
Fix anything that's wrong
Delete your information
Send you a copy (portability)
Opt out of any "sale" or "sharing" for ads — though we don't do either
We will never treat you worse for asking.
One important catch: most state privacy laws — California's CPRA, the Texas Data Privacy and Security Act, and others — exempt financial data covered by GLBA. So a lot of what's on this page may not be subject to those state rights. For anything that isn't GLBA-exempt, we'll honor your rights in full.
California (CPRA): rights above apply to non-exempt data. We don't sell or share your data and don't use sensitive info beyond what's allowed.
Texas (TDPSA): Texas residents get the rights above for non-exempt data, with a right to appeal (below).
Other states (Virginia, Colorado, Connecticut, Utah, and more): the equivalent rights apply to non-exempt data.
To exercise a right, email us at privacy@harborpay.app. We'll verify it's you and respond within the time the law allows. An authorized agent can ask on your behalf. If your Lender holds the data, you may need to ask them too.
Appeals: if we say no, reply with "Privacy Appeal" in the subject line. We'll take another look and explain. Still unhappy? You can contact the Texas Attorney General or the attorney general in your state.
How long we keep it
We keep your information as long as we need it to run your financing and to meet our legal obligations — through the life of your account and agreement, plus the periods the law requires after. Specifically, we keep signed agreements, ACH authorizations, and ledger records for at least 7 years after your agreement closes, in line with financial, insurance, and tax recordkeeping rules. When we don't need something anymore, we delete or de-identify it.
How we keep it safe
We protect your information with:
Encryption — in transit, and field-level encryption at rest for sensitive details like your email, phone, and address
Tokenization — so full bank and card numbers never live on our systems
Access controls — your Lender's data is isolated, and access is limited to people who need it
Audit logging and ongoing fraud and ACH monitoring
No system is perfectly secure, and we can't promise the impossible — but if a breach ever affects you, we'll tell you and the regulators as the law requires.
Children
HarborPay isn't for anyone under 16, and we don't knowingly collect their info. If we find that we did, we'll delete it.
Where your data lives
We run HarborPay in the United States for U.S. users, and your data is stored and processed here. If you use HarborPay from outside the U.S., that's on you, and you're responsible for your local laws.
Cookies
We use only the cookies we need to keep you signed in and secure — no ad tracking, no cross-site tracking. We honor Global Privacy Control (GPC) signals where the law requires.
Reaching us
Privacy questions, or want to exercise a right?
Company: BLP.is LLC dba HarborPay
Email: privacy@harborpay.app
Changes
We'll update this page as HarborPay grows. When something material changes, we'll update the date up top and, when it matters, give you a heads-up by email or in the app. Keep using HarborPay and you're acknowledging the latest version.