Harbor Migration Assistant Privacy Policy

What the extension is

The Harbor Migration Assistant is a browser extension operated by MainCharacter, Inc. with a single purpose: helping you move your own practice data from SimplePractice into Harbor. This policy describes exactly what the extension accesses, what it transmits, what it stores, and what it never does.

This policy covers only the extension. Once your export reaches the Harbor app, the Harbor Privacy Policy governs from there.

What the extension accesses

• SimplePractice pages you are already logged into. When you start a migration from the Harbor import page, the extension opens SimplePractice's Data Export page in a background tab and interacts with it the same way you would by hand: it requests a fresh export, watches for it to finish, and downloads the resulting zip file using your existing browser session.
• The Harbor import page. A small script runs on the Harbor app so the import page can detect the extension and receive the export file.

The extension only acts when you explicitly start a migration (or click its toolbar icon, which simply opens the Harbor import page). It does not read, monitor, or modify any other browsing.

What the extension transmits

• The export zip file, and nothing else, delivered inside your browser. The file travels from SimplePractice directly to the Harbor import page that is open in your own browser. The extension does not upload it anywhere: there is no extension backend, no proxy, and no intermediary server.
• Progress and error messages (for example, "Waiting for SimplePractice to build the export...") are posted to the Harbor page in your browser so you can follow along. They never contain patient or practice data.

Once the Harbor import page receives the file, the Harbor app uploads it to Harbor's servers to parse it and show you a preview, and imports it into your Harbor account only after you confirm. That processing is part of the Harbor product, not the extension, and is exactly what would happen if you uploaded the same export by hand. It is governed by the Harbor Privacy Policy, including its HIPAA commitments.

What the extension stores

• A single transient number: the id of the most recent SimplePractice export, kept in the browser's session storage while a migration is in progress. This exists only so that retrying a migration resumes the export you already requested instead of creating duplicates. It is deleted when the migration completes and is cleared automatically when you close the browser.
• If direct hand-off to the Harbor page is not possible, the export zip is saved to your Downloads folder through Chrome's normal download mechanism, under your control like any other downloaded file.

What the extension never does

• Never sees, asks for, stores, or transmits your SimplePractice credentials. It relies entirely on the session you already have; if you are logged out, it asks you to log in yourself.
• Never sends your data to anyone other than Harbor. There is no extension backend, no proxy, no intermediary, and no third party. Your data goes only where you are sending it: from SimplePractice into your own Harbor account.
• No analytics, telemetry, or tracking of any kind.
• No advertising and no sale or sharing of data with anyone, for any purpose.
• No activity outside a migration you started. The extension is idle until you start a migration from the Harbor import page.

Changes to this policy

Material changes to this policy will be reflected in the extension's store listing before they take effect. The effective date at the top of this page reflects the most recent update.

Contact us

Questions about this policy or the extension's data handling can be directed to:

MainCharacter, Inc.
contact@mainchar.ai

Trademark notice

SimplePractice is a trademark of SimplePractice, LLC. Harbor and the Harbor Migration Assistant are products of MainCharacter, Inc. and are not affiliated with, endorsed by, or sponsored by SimplePractice. The extension interoperates with SimplePractice solely to move your own data at your request.