Privacy Policy

Harness Calendar LLC ("Harness", "we", "us", "our") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

1. Information We Collect

We collect several types of information from and about users of our platform, including:

Personal Information: Name, email address, phone number, and other contact details.
Student Information: Data related to your students that you, the instructor, enter into the platform. This may include student names, email addresses, phone numbers, lesson scheduling and attendance history, lesson notes written by the instructor, and payment or invoice records.
Payment Information: Payment processing is handled by Stripe. When you make a payment, your payment method details (such as credit card number) are collected and stored directly by Stripe — Harness does not store your full payment card information on our servers. We may receive limited information from Stripe such as the last four digits of your card, card brand, and billing address for record-keeping purposes.
Usage Data: Information about how you use our platform, including log data and analytics.

2. How We Use Your Information

We use the information we collect for various purposes, including:

Providing, operating, and maintaining our platform
Improving and personalizing your experience
Understanding how you use our services
Communicating with you about updates, features, and support
Processing payments and managing your account
Detecting, preventing, and addressing technical issues

3. Legal Basis for Processing

We process your personal information on the following bases:

Contract Performance: Processing necessary to provide you with the Harness platform and fulfill our obligations under our Terms of Service.
Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and ensuring security.
Legal Obligation: Processing necessary to comply with applicable laws and regulations.
Consent: Where required by law, we process your data based on your consent, which you may withdraw at any time.

4. Data Security

The security of your data is important to us. We implement appropriate security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active. Upon account deletion, all associated data — including student records, lesson history, and invoices — will be permanently deleted within 30 days. Backup copies may be retained for up to an additional 30 days before being purged. We may retain certain information beyond these periods where required by law (such as financial records for tax compliance).

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

Service Providers: Third-party vendors who provide services on our behalf, including Stripe (payment processing), Resend (email delivery), Supabase (database hosting), and Vercel (application hosting). These providers only receive the data necessary to perform their services and are contractually obligated to protect your information.
Legal Requirements: If required by law or in response to valid requests by public authorities.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

7. Your Privacy Rights

Regardless of your location, all Harness users may:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data and account

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with additional data protection laws, you may also have the right to:

Restrict or object to processing of your data
Request portability of your data in a structured format
Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided at the end of this policy.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about how you interact with our platform. You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of our platform.

9. Children's Privacy and COPPA Compliance

Harness is designed for use by instructors (adults), not by children. Children do not create accounts on or interact directly with the Harness platform. However, we recognize that many private instruction students are minors, including children under 13.

When an instructor enters student information into Harness, the instructor acts as the data controller for that information. Instructors are responsible for obtaining any required parental or guardian consent before entering personal information about minors into the platform.

Harness does not knowingly collect personal information directly from children under 13. All student data — including data about minors — is entered by the instructor or their parent/guardian on behalf of the student.

If we become aware that student data pertaining to a child under 13 has been entered without verifiable parental consent, we will take steps to delete that information promptly.

Parents or guardians who wish to review, correct, or request deletion of their child's information may do so by contacting the instructor directly, or by reaching out to Harness at the contact information provided at the end of this policy. We will respond to verified deletion requests promptly.

Please note that when an instructor sends lesson notes to a student or parent via email, that email is delivered through our third-party email provider (Resend). The email content passes through this service in order to be delivered.

10. Data Roles and Responsibilities

Harness acts as a data processor — we store and process student data on behalf of the instructor. The instructor is the data controller and decides what student information to enter into the platform. Harness processes this data solely to provide the services described in this policy and does not use student data for any independent purpose such as advertising or analytics.

11. Data Isolation and Security Architecture

Each instructor's data is fully isolated. This means your student records, lesson data, and account information are only accessible to you and cannot be viewed by other users of the platform. We enforce this isolation at the database level to ensure that even in the event of an application-level vulnerability, cross-account data access is prevented.

12. Third-Party Authentication (Google Sign-In)

Harness offers the option to sign in using your Google account. When you choose to authenticate with Google, we receive the following information from your Google account:

Email Address: Used to create and identify your Harness account.
Name: Used to personalize your experience within the platform.
Profile Picture: Displayed in your account profile.

How We Use Google Data: We use this information solely for account creation, authentication, and displaying your identity within the Harness platform. We do not use your Google data for advertising or marketing purposes.

How We Store Google Data: Your Google account information is stored securely in our database alongside your other account information. It is retained for as long as your account remains active.

Sharing of Google Data: We do not sell, trade, or share your Google user data with third parties, except for our service providers who help operate our platform (such as our database hosting provider).

Harness's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.