Privacy

Minimal information, defined purposes and private client work.

The public cover uses no advertising trackers and offers no public registration. The approved identity provider manages sign-in, multifactor authentication, recovery and lockout; Harbour Line does not receive or store passwords.

The portal records the invited organization, primary contact, preferred language, approved services and the security, access, report and message events needed to deliver and audit the engagement. Billing is a timestamped, client-scoped, read-only projection. Xero remains the accounting system of record and no payment can be initiated in the portal.

Controlled-pilot records are retained until engagement closure plus six years, subject to final legal and accounting confirmation. An active legal hold overrides deletion. Privacy questions may be sent to [email protected] without attaching confidential records.