Privacy Policy

Harmon Digital, LLC is a United States company that builds custom software and AI systems for businesses. We decide how the personal information described in this policy is used, which makes us its “controller” or “business” under privacy laws.

This website runs on Unstack, a software platform that Harmon Digital, LLC also operates (as “Unstack”). Some of the tools described below are set up at the platform level, so the platform’s Cookie Policy applies to this site too.

To reach us about anything in this policy, use our contact form.

This policy covers this website, the forms and booking pages on it, the proposals, forms and agreements we send through it, and the emails and calls that follow from them.

It does not cover software we build or run for our clients. When we handle personal information inside a client’s systems, we do it on the client’s behalf and under our agreement with them, and the client’s own privacy notice applies. It also does not cover other companies’ websites that we link to.

• Enquiries: your name, work email, company, the budget range you pick, and your message.
• Booking a call: your name, email, anything you add about the call, and the time and time zone you choose.
• Referrals: your own name and contact details, and the details you give us about the business and person you are introducing. Please only refer people who would expect to hear from us.
• Proposals, forms and agreements: what you enter, your approval or signature, and when and where (IP address and device) you gave it.
• Emails, calls and meetings with us, and anything you choose to share in them.

Please don’t send sensitive information through our forms, such as health information, government ID numbers or financial account numbers. We don’t ask for it and don’t need it to reply.

• Device and usage information: IP address, approximate location worked out from it, browser, device and operating system, the pages you view, the site that sent you, the links you click, how long you stay, and errors you run into.
• Session replay: some tools record how pages are used (scrolling, clicks, mouse movement and what is on the screen) so we can see where the site works and where it doesn’t. Text typed into form fields is masked and not recorded.
• Visitor identification: some tools may match your visit to information they already hold about you or your company, such as your name, employer, work email or professional profile, so we can follow up about our services.
• Cookies and similar technologies, described in the next section.

Cookies are small files a website stores in your browser. Similar technologies include local storage and tracking pixels. This site uses these groups:

• Essential: remember your privacy choice, keep signed-in clients signed in, and keep the site secure. These are always on.
• Analytics: PostHog (product analytics and session replay) and Google Analytics 4 (traffic and usage).
• Error monitoring: Sentry, which records errors and a sample of sessions, with form inputs masked, so we can fix what breaks. It is part of keeping the site working and runs regardless of your choices.
• Advertising and visitor identification: the Meta Pixel (measuring and targeting our ads on Facebook and Instagram), RB2B by Retention.com and Apollo.io (identifying the people and businesses that visit, for sales and marketing).

In the European Economic Area, the United Kingdom and Switzerland, no analytics or advertising tool runs until you opt in. Elsewhere, including the United States, some of them run by default and you can turn them off at any time. The Cookie Policy sets out exactly which tools run when, and its Cookie settings button is where you change your choice.

• To reply to enquiries, schedule and hold calls, and prepare proposals and agreements.
• To provide and bill for our services when you or your company become a client.
• To send you information about our services. Every marketing email has an unsubscribe link.
• To understand how the site is used and improve it.
• To measure and target our advertising, and to identify businesses that visit the site so we can follow up.
• To keep the site and our systems secure, prevent spam and fraud, and fix errors.
• To meet legal, tax and accounting obligations, and to establish or defend legal claims.

We don’t use your information to make automated decisions that have legal or similarly significant effects on you.

• Service providers that run parts of the site and our business for us, under contracts that limit how they can use the information: hosting and database providers (such as Vercel and Supabase), Google (Calendar, Meet and email), analytics and monitoring tools (PostHog, Google Analytics, Sentry), and payment and email delivery providers (such as Stripe).
• Advertising and data partners: Meta, RB2B (Retention.com) and Apollo.io. These companies can also use what they receive for their own purposes, under their own privacy policies.
• Professional advisers, such as lawyers and accountants, where they need it to advise us.
• Authorities and others when the law requires it, or when it is needed to protect the rights, safety or property of our clients, our team, you or others.
• A buyer or successor if we are involved in a merger, acquisition, financing or sale of assets, subject to this policy.
• Anyone else you ask us to share it with.

We don’t sell personal information for money. But the Meta Pixel, RB2B and Apollo.io receive information about visits to this site and use it for advertising or to identify visitors. Under California and other state privacy laws that can count as “selling” personal information, “sharing” it for cross-context behavioral advertising, or using it for targeted advertising.

In the past 12 months, the categories involved were identifiers (such as IP address, cookie and device IDs and, for visitor identification, name and work email), internet activity on this site, and approximate location.

You can opt out at any time: open Your Privacy Choices, choose Cookie settings and turn advertising off, or use a browser that sends a Global Privacy Control signal. We don’t knowingly sell or share the personal information of anyone under 16.

We keep personal information only as long as we need it for the purpose we collected it for, and then delete or anonymize it. In practice:

• Enquiries, bookings and referrals: while we are in touch and for a reasonable time afterwards in case the conversation picks up again.
• Client, contract and billing records: for the relationship and then for as long as legal, tax and accounting rules require, typically up to seven years.
• Analytics, replay and error data: for the retention period set in each tool, after which it is deleted or kept only in aggregate.
• Your privacy choice: up to one year, or until you change it or clear your browser.

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and get a copy of it, including in a portable format.
• Have inaccurate information corrected.
• Have your information deleted.
• Opt out of the sale or sharing of your information and of targeted advertising.
• Object to or restrict how we use your information, including objecting to direct marketing at any time.
• Withdraw consent you have given, without affecting what was done before.
• Appeal a decision we make about your request.
• Complain to a data protection authority, if you are in the European Economic Area, the United Kingdom or Switzerland.

We won’t treat you differently for exercising any of these rights.

If you are in the European Economic Area, the United Kingdom or Switzerland, our legal bases are: taking steps you ask for before a contract and performing one (enquiries, bookings, proposals and client work); our legitimate interests in running and securing the site, replying to business enquiries and marketing our services to businesses; your consent (non-essential cookies and similar tools); and legal obligations.

Send us a message through our contact form. Start it with “Privacy request,” say what you would like us to do, and give the email address you used with us.

We will confirm the request comes from you, usually by checking that you control that email address, and may ask for a little more information if we need it. An authorized agent can make a request for you with your written permission, and we may confirm it with you directly. Opting out of sale and sharing doesn’t need any of this — use Your Privacy Choices.

We reply within the time the law gives us, which is usually 45 days under US state laws and one month in Europe and the UK, and tell you if we need longer. If we decline a request, we will explain why. To appeal, send another message through the form starting with “Privacy appeal.” If you are not satisfied with the outcome, you can contact your state Attorney General or your data protection authority.

There is no common standard for browsers’ “Do Not Track” setting, so the site doesn’t respond to it. We do honor Global Privacy Control: if your browser sends that signal, we treat it as an opt-out of sale and sharing for that browser, and the analytics and advertising tools above (other than Sentry) don’t load.

We are based in the United States, and the information described here is processed in the United States and wherever our service providers operate. Where the law requires it, our providers’ data processing terms include recognized safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

We use reasonable technical and organizational measures to protect personal information, including encrypted connections and limited access. No system is completely secure, so please use the contact form to tell us if you think something is wrong.

This site is for businesses and isn’t meant for children. We don’t knowingly collect personal information from anyone under 16. If you think a child has given us information, tell us and we will delete it.

When we change this policy we will update the effective date at the top. If a change is significant, we will say so on the site before it takes effect.

For questions about this policy or how we handle personal information, send a message through our contact form.