Terms of Service

1. Service Description

Harbor Light is an AI-powered email monitoring and protection service ("Service"). It monitors your connected email accounts for scam, phishing, and fraud indicators and delivers alerts and summaries via Telegram or SMS through a conversational AI companion. The Service includes:

• Threat detection — automated analysis of incoming emails for scam, phishing, and fraud indicators
• Account takeover monitoring — detection of potential account compromise by analyzing incoming security-related emails and, for Gmail and Outlook accounts, periodically checking your account settings (forwarding rules, filters, and send-as aliases) for unauthorized changes
• Link and phone safety checks — on-demand checks of URLs and phone numbers against threat databases when you ask your companion
• Safe Reader — a secure, browser-based interface for reading your email, with safety checks on links before you click them
• Protection reports — on-demand summaries of emails analyzed and threats detected
• Daily digests, calendar management, event reminders, and email reply drafting as described elsewhere in these Terms

The Service is designed to help identify potential threats — it does not guarantee complete protection against all email-based threats or account compromise attempts.

2. Eligibility & Access

The Service is invitation-only. Access is granted by an administrator, authorized staff member, or family member. By accepting an invitation and using the Service, you agree to these Terms.

You must be at least 13 years of age to use the Service. If you are under 18, a parent, guardian, or authorized caregiver must consent to your use.

3. Email Account Access & Authorized Actions

When you connect an email account, you authorize Harbor Light to access your email and calendar through OAuth 2.0 (for Gmail and Outlook) or IMAP/SMTP credentials (for other providers). Specifically, you authorize our automated systems to:

• Read your incoming emails to analyze them for threats
• Move or quarantine emails — emails the Service identifies as dangerous may be automatically moved to a quarantine folder or label. Quarantined emails are not deleted and can be reviewed and restored by you at any time.
• Read and create calendar events — the Service may extract appointments from emails and add them to your calendar, or accept calendar invitations on your behalf when you approve
• Send email replies only with your explicit approval — your companion will always draft a reply and present it for your confirmation before sending

Automated actions may not always produce intended results. For example, the Service may quarantine a legitimate email, or a reply you approve may not convey exactly what you intended. You are responsible for periodically reviewing your quarantine folder and verifying the content of any replies before confirming them.

Email content is processed by automated systems only. Harbor Light staff and administrators cannot view your email content. Staff may see limited metadata (sender and subject line) for flagged or quarantined emails solely for troubleshooting false positives. Only you can access your full emails through your personal, verified dashboard.

You may revoke this access at any time by:

• Asking your companion to disconnect the account
• Revoking access from your Google or Microsoft account settings
• Contacting us at [email protected]

4. AI Companion & Limitations

The AI companion provides best-effort analysis of email content, URLs, and phone numbers. AI-generated assessments, recommendations, and safety ratings are probabilistic and are not guaranteed to be accurate, complete, or current. You acknowledge that:

• The AI may miss threats — some scam or phishing emails may not be detected, including sophisticated or novel attack methods
• The AI may miss account compromise — account takeover detection is based on analyzing incoming emails for security signals and may not detect all forms of unauthorized access
• The AI may flag legitimate emails — some safe emails may be incorrectly identified as suspicious and quarantined, which could cause you to miss time-sensitive communications
• The AI may provide incorrect information — responses to general questions are generated by AI and may contain errors or outdated information
• Link and phone safety checks rely on third-party threat databases that may not be complete or current — a "safe" result does not guarantee that a URL or phone number is safe
• The Service is not a substitute for personal judgment, professional cybersecurity services, legal advice, or financial advice
• The Service does not guarantee the safety of any email, link, attachment, phone number, or sender — safety assessments may be incorrect in either direction

You should exercise your own judgment when acting on the AI companion's recommendations. Never proceed with financial transactions, share personal information (such as passwords, Social Security numbers, or bank details), or take irreversible actions based solely on the Service's assessment. When in doubt, contact the relevant institution directly using a phone number or website you already trust — not contact information from the email in question.

5. Your Responsibilities

By using the Service, you agree to:

• Review quarantined emails — Periodically check your quarantine folder to ensure no legitimate emails were incorrectly flagged. The Service makes quarantined emails accessible for your review.
• Verify before acting — Do not rely solely on the Service's threat assessment before taking action on financial matters, sharing personal information, or responding to urgent requests. Always verify through independent channels.
• Review replies before confirming — When the Service drafts an email reply on your behalf, carefully read the draft before approving it. Once you confirm, the reply is sent from your email account and cannot be recalled by Harbor Light.
• Maintain your own security practices — The Service supplements, but does not replace, your existing email security. Continue to use strong passwords, enable two-factor authentication where available, and exercise caution with unfamiliar emails.
• Keep your account secure — You are responsible for maintaining the security of your messaging account (Telegram or phone number) used to access the Service.
• Report issues — If you believe the Service took an incorrect action on your email (such as quarantining a legitimate message or missing a threat), please let your companion know so we can improve.

6. Family Alerts

You may authorize designated family members to receive protection reports and threat alerts about your account. Family members receive:

• Weekly protection summaries
• Immediate alerts when serious threats are blocked
• Account status information (email connected/disconnected)

Family alerts include summary information about threats detected — not the content of your emails. You can modify or revoke family alert access at any time by asking your companion or through the dashboard.

7. SMS Messages

Program Name: Harbor Light

Consent: Harbor Light is an invitation-only service. You will only receive SMS messages after an administrator, authorized staff member, or family member registers your phone number and you confirm enrollment by responding to an initial opt-in message sent to your phone. By responding to the opt-in message, you consent to receive recurring automated text messages from Harbor Light at the phone number provided. Consent is not a condition of any purchase.

Message Types: Security alerts, morning email digests, calendar reminders, AI companion responses, and account notifications.

Message Frequency: Varies based on your email volume and settings. Typical users receive 3-10 messages per day.

Costs: Standard message and data rates from your mobile carrier may apply. Harbor Light does not charge for SMS messages.

Opt-Out: You may opt out at any time by replying STOP to any message. You will receive a single confirmation message and no further texts unless you re-enroll.

Help: Reply HELP to any message for assistance, or contact us at [email protected].

8. Acceptable Use

You agree not to:

• Use the Service for any unlawful purpose
• Attempt to manipulate, deceive, or exploit the AI companion
• Share your access credentials or invite tokens with unauthorized persons
• Use the Service to send spam, harassing, or abusive messages through the email reply feature
• Attempt to access other users' data or accounts
• Reverse-engineer, probe, or test the vulnerability of the Service

9. Privacy

Your use of the Service is also governed by our Privacy Policy, which describes what information we collect, how we use it, and your rights regarding your data.

10. Data Security

We implement commercially reasonable security measures to protect your email account credentials and data, including encryption of OAuth tokens and IMAP credentials at rest, HTTPS for all connections, CSRF protection, and session management controls. However, no security system is impenetrable. While we work to protect your information, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures.

In the event of a security breach that affects your email account credentials or personal data, we will notify affected users without unreasonable delay and in accordance with applicable law.

12. Termination

Either party may terminate use of the Service at any time:

• You may stop using the Service by asking your companion to disconnect your accounts, or by contacting us
• We may suspend or terminate your access if you violate these Terms, or if required by law

Upon termination, we will immediately cease all automated access to your connected email accounts. You may also revoke access directly from your Google or Microsoft account settings. You may request deletion of your data by contacting us at [email protected]. We will delete your account information, conversations, memories, and analysis logs within 30 days of your request.

14. Indemnification

You agree to indemnify, defend, and hold harmless Harbor Light, its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, and expenses (including reasonable attorneys' fees) arising from or related to:

• Your use of the Service
• Your violation of these Terms
• Automated actions taken by the Service on your email accounts that you authorized or that were enabled through your account settings
• Email replies sent through the Service after your confirmation
• Your failure to review quarantined emails, resulting in missed communications
• Any claim by a third party related to emails sent from your account through the Service

15. Assumption of Risk

By enabling automated email management features, you acknowledge that you are authorizing the Service to take actions on your email accounts on your behalf. You understand and accept the inherent risks of AI-powered automated systems, including the possibility of incorrect threat assessments, unintended email actions, and missed threats. You voluntarily assume these risks and agree that Harbor Light is not liable for outcomes resulting from the normal operation of the Service's automated features.

16. Changes to These Terms

We may update these Terms from time to time. If we make material changes, we will notify you through your messaging channel (Telegram or SMS) at least 14 days before the changes take effect. Continued use of the Service after the effective date of updated Terms constitutes your acceptance.

17. Dispute Resolution

Informal Resolution First. Before filing any legal claim, you agree to contact us at [email protected] and attempt to resolve the dispute informally for at least 30 days. Most concerns can be resolved quickly through direct communication.

Governing Law. These Terms shall be governed by and construed in accordance with the laws of the Commonwealth of Virginia, United States, without regard to its conflict of law provisions.

Jurisdiction. Any disputes not resolved informally shall be resolved in the state or federal courts located in the Commonwealth of Virginia. You consent to the personal jurisdiction of such courts.

Class Action Waiver. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, YOU AND HARBOR LIGHT AGREE THAT ANY CLAIMS ARISING FROM OR RELATED TO THE SERVICE WILL BE RESOLVED ON AN INDIVIDUAL BASIS ONLY. YOU WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION, COLLECTIVE ACTION, OR REPRESENTATIVE PROCEEDING, WHETHER AS A NAMED PLAINTIFF, CLASS MEMBER, OR OTHERWISE. This waiver applies to claims in court and, if applicable, in arbitration. If this waiver is found unenforceable as to a particular claim, that claim must be severed and proceed individually; all remaining claims are still subject to this waiver.

18. Contact Us

If you have questions about these Terms of Service, contact us at:

Email: [email protected]

Website: harborlight.io