Privacy Policy
Last updated: 25 June 2026 · Operated by Individual Entrepreneur Vladislav Kozhukhov (IIN 980317051130), Kazakhstan
This policy explains what data Harbourstone processes, why, and who we share it with — including how and when your content is sent to the Claude API.
1. Who we are
Harbourstone (“we”, “us”) is a platform for hosting, governing and iterating on AI-generated dashboards, operated by Individual Entrepreneur Vladislav Kozhukhov (IIN 980317051130) in Kazakhstan. We serve organisations in Kazakhstan and Central Asia. We are an independent product and are not affiliated with or endorsed by Anthropic.
2. What we collect
- Account & identity data — provided by your organisation’s single sign-on (e.g. your user identifier and email), and the role assigned to you.
- Dashboard content — the HTML reports and data files you or your organisation upload, and any edits, annotations, themes and versions you create.
- Operational data — audit logs (who did what and when), and basic technical logs needed to run and secure the service.
We do not sell personal data, and we do not use it for advertising.
3. How we use it
- To provide the service: host your dashboards, apply access controls, keep version history.
- To secure and operate the platform (authentication, audit, abuse prevention).
- To provide the optional AI regeneration feature — only when you explicitly trigger it (see §4).
4. AI features & subprocessors
Anthropic (Claude API) is a named subprocessor. When — and only when — a permitted user explicitly triggers an AI regeneration of a dashboard, Harbourstone sends the relevant dashboard source and that user’s feedback to Anthropic’s Claude API to produce a new version. The feature is opt-in per dashboard and access-gated to owners/administrators.
- What is sent: the dashboard’s HTML/source and the feedback/annotations you provide. Nothing is sent to Anthropic unless you start a regeneration.
- Training: Anthropic’s commercial/API terms provide that inputs and outputs submitted through the API are not used to train Anthropic’s models. Anthropic processes the data as our service provider under its terms.
- Self-hosted deployments: if you run Harbourstone on your own infrastructure, your data stays on your infrastructure except for the explicit Claude API calls described above.
- Other subprocessors: our cloud server hosting and infrastructure providers. A current list is available on request.
You are responsible for ensuring you have a lawful basis and the necessary permissions to upload content (including any personal data) and to send it to the Claude API when you use the AI feature.
5. Security & retention
Dashboards render in sandboxed iframes with no access to your session; access is controlled by SSO, roles and per-dashboard permissions; changes are versioned and audited. We retain data for as long as your organisation maintains its account, and delete or return it on request within 30 days.
6. Your rights
Subject to applicable Kazakhstan law, you may request access to, correction of, or deletion of your personal data by contacting us. If your data was provided by your organisation, we may direct your request to them as the controller.
7. Location & international use
The service is intended for organisations and users in Kazakhstan and Central Asia. AI features rely on Anthropic’s services and are not made available to users located in regions excluded by Anthropic’s terms (including Russia). Using the AI feature may involve processing outside your country by Anthropic as subprocessor.
8. Changes & contact
We may update this policy; material changes will be posted here with a new date. Questions: privacy@harbourstone.kz.