This page is maintained by Blue Harbor Property Services to answer common security and privacy questions about the Blue Harbor app and service. It is editable customer-facing content, not an independent certification or audit report.

Shared responsibility

Blue Harbor runs on a managed cloud platform. The platform provider operates the underlying hosting, database, and authentication infrastructure. Blue Harbor is responsible for the application built on top of it, including how accounts, roles, and resident data are configured. Customers are responsible for safeguarding their own login credentials and for keeping their account contact information current.

Access & authentication

Accounts are protected by email and password sign-in.
Sessions are managed by our authentication provider and use signed tokens.
Admin, property manager, and resident roles are stored server-side and enforced on every request — role information is never trusted from the browser.
Sensitive admin actions (approving properties, managing listings) are limited to users with the appropriate server-side role.

Platform & hosting

The application is hosted on a managed serverless platform with TLS in transit for all customer traffic. Database access is governed by row-level security policies so that residents see only their own data, and property managers see only data scoped to properties they manage.

Data we collect

Account info: name, email, phone, unit, and property association.
Service info: subscription status, pickup history, and support messages.
Billing info: handled by our payment processor; full card numbers are not stored on Blue Harbor servers.

We do not sell personal information. See the Terms of Service for additional details.

Subprocessors & integrations

Blue Harbor relies on a small number of vetted service providers to operate the platform, including a managed cloud backend, a payment processor, and transactional email delivery. We use these providers only for the purposes of running the service.

Cookies & analytics

We use only the cookies needed to keep you signed in and to maintain your session. We may use privacy-respecting product analytics to understand aggregate usage.

Retention & deletion

Account and service records are retained while your account is active and for a reasonable period afterward to support billing, dispute resolution, and legal obligations. To request deletion of your account data, contact us using the address below.

Privacy requests

Residents and property managers can request a copy of their data, corrections, or deletion by emailing the address below. We will respond within a reasonable timeframe consistent with applicable law.

Security & incident contact

To report a suspected security issue, vulnerability, or incident affecting Blue Harbor, please email admin@yourblueharbor.com with details and steps to reproduce. Please do not include real customer data in your report.

Compliance

Blue Harbor is a property services company and is not currently audited against SOC 2, ISO 27001, HIPAA, or PCI-DSS as an independent organization. Payment card processing is handled by a PCI-compliant payment processor. If your property management company requires specific compliance documentation, please reach out to discuss what we can share.

Contact

Questions about this page? Email admin@yourblueharbor.com or visit the Contact page.

Trust & Security