Privacy

Who we are

[COMPANY NAME] runs Harness Lab (https://harnesslab.co) and its app (https://app.harnesslab.co). Contact: [CONTACT EMAIL]. Country: [COUNTRY].

This website

The public pages need no account. They set no cookies and load no ads, trackers, analytics or third-party fonts or scripts. If you pick a light or dark theme, your choice is saved in your own browser and never sent to us. Like any web server, ours records the address, the page and the time of each request in an access log, to keep the site safe and working. [OWNER: confirm how long the web server keeps this log.]

Signing in to the app

The app uses “Continue with Google”. Google tells us your name, your email address and a stable Google account number. We ask for nothing else: not your contacts, calendar, files or password, and we do not store your profile picture. A new account waits for approval. The owner reviews each request and approves or rejects it. While you wait, you can see nothing but the waiting screen.

What the app stores

• Your account: name, email, the Google account number, your role and whether you are approved.
• A sign-in session, kept as a one-way hash, that ends after 7 days.
• What you do in the app: the questions you ask and the answers you get, your notes and picks, and documents you add.
• Check-ups: if you run a check-up of your own repository or documents, we keep what you upload and the report until you delete it.
• Challenges you send about a verdict, and the notes about them.

We use this only to run the service you asked for and to keep it safe. We do not sell it and we show no ads.

Cookies

The app sets one session cookie when you sign in. It is HttpOnly, SameSite=Strict and, over HTTPS, Secure, and it lasts up to 7 days. A second, short-lived cookie protects the Google sign-in step and is removed when it ends. There are no advertising, analytics or tracking cookies.

The AI provider

When you ask a question or run a check-up, the question, the research it needs and anything you attached are sent to an AI provider so it can write the answer: Anthropic, which makes the Claude models. [OWNER: confirm the provider, and whether requests pass through a gateway.] Please do not put passwords, secrets or other people’s personal data into questions or uploads. Answers can be wrong; check what matters.

Where your data lives

On a server in the European Union, run by [COMPANY NAME]. Google processes the sign-in on its own systems under its own privacy policy, and the AI provider processes requests under its own terms. [OWNER: confirm the server location and country.]

How long we keep it, and deleting it

We keep your account while it exists. Sessions expire after 7 days. Your questions, answers, notes, picks and uploads stay until you delete them: you can delete your notes and documents in the app. To delete your account and everything else, write to [CONTACT EMAIL]; we will do it within [30] days. [OWNER: confirm the period.] Backups are overwritten within [OWNER: backup period].

Your rights

You can ask us to show you, correct, export or delete the data we hold about you, and you can object to how we use it. Write to [CONTACT EMAIL]. If you are in the EU you can also complain to your data protection authority.

Changes

If this text changes in a way that matters, we will say so on this page and in the app. Last updated: [DATE].