1. Who this Policy covers
This Policy explains how HarpessOps handles personal information for this website, account access, inquiries, billing and the services you use. It applies to visitors, prospective customers and authorized workspace users.
The HarpessOps provider identified in your order is responsible for information handled for these purposes. Processing on behalf of a business customer is also governed by its service agreement and any applicable data-processing agreement.
2. Information we collect
Inquiries and requests. Website forms collect your email address, team size, selected agent stack, workflow description or request details. We also record submission times and the contact permission supplied with a demo request.
Account access. Sign-in services provide an account identifier and may provide an email and display name. We use the authenticated identifier to associate billing records with your workspace.
Billing and usage. Records may include Paddle customer, subscription and transaction identifiers, purchase status, selected products, credit movements, refunds and period totals. Metering records can include project, run, model and rate-card identifiers, billing source and usage cost.
Technical information. Hosting, authentication and payment providers may process IP addresses, browser or device information, essential cookies and technical logs to operate and protect their services.
Connected workspace material. Authorized workflows may process instructions, repository material and model requests. Permitted data, providers, access and retention should be agreed before connections are enabled. Keep passwords, card details, identity documents and client secrets out of general website forms.
3. Why we use information
We use information to respond to inquiries, provide account access, deliver requested services, reconcile payments, maintain the credit ledger, attribute usage, investigate errors or misuse, and address support or privacy requests.
Where law requires a legal basis, the relevant basis may be performing a contract or requested pre-contract steps, complying with a legal obligation, legitimate interests in operating and securing the service, or consent where required. You can withdraw sales-follow-up permission through the form below.
We do not sell personal information or use submitted source code to train general-purpose models. Model-provider processing depends on the applicable terms and data settings; permitted routes and required privacy arrangements are addressed for the workspace.
4. Providers and sharing
Information is shared as needed to operate requested features, fulfill purchases, provide support, protect systems or comply with law. The website uses OpenAI Sites and Cloudflare infrastructure for hosting, authentication-related access and database services.
For purchases sold through Paddle, Paddle is merchant of record and handles checkout, purchase receipts and buyer support under its Privacy Policy. Payment details are entered in Paddle checkout. HarpessOps does not collect full card numbers in website forms.
Authorized agent, model, repository and infrastructure providers receive material needed for the connections you enable. Billing reconciliation does not require sending code or prompts to Paddle. Workspace administrators may access information needed to administer their organization’s service.
We may disclose information when legally required, to address fraud or security incidents, or in a business transfer subject to applicable confidentiality and data-protection obligations.
6. Payment and account records
We retain identifiers and payment status to link a verified purchase to the correct account, prevent duplicate credit grants, apply refunds and maintain the usage ledger. Credit purchases and consumed usage are separate records.
Financial records may be retained for accounting, tax, disputes or other legal obligations after a subscription is canceled. Cancellation does not automatically delete them. Our Refund Policy explains how refunds affect access and credits.
7. Retention and security
We keep information for the purposes described here, including open inquiries, service delivery, billing, security and legal obligations. When it is no longer needed, information should be deleted or de-identified, subject to applicable retention requirements and backup processes.
We use account-based access restrictions and keep server credentials out of public client code. Access to inquiry and billing records is limited to people and providers who need it for their work. No storage or transmission method eliminates every security risk.
Workspace-specific retention, export and deletion requirements may be described in the customer’s service agreement. Organization-related requests may also require the involvement of that organization’s administrator.
8. International processing
Service providers may process information in the United States and other locations where they operate, subject to their applicable arrangements and legal requirements.
If a transfer or workspace requires additional contractual safeguards or restrictions, those arrangements must be established before processing begins. Do not connect data subject to requirements that have not been agreed for your workspace.
9. Your rights and choices
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, or withdraw consent. You may also have a right to complain to a relevant data-protection authority.
Use the form below to make a request or stop sales follow-up. We may verify identity and authority before providing information or changing records. Requests will be addressed within applicable legal timeframes, with an explanation of any limitation such as required retention of a billing record.
The service is intended for adults and business users. We do not knowingly solicit personal information from children. Contact us if you believe a child has submitted personal information.
10. Contact and updates
For a privacy request or policy question, use the email associated with your account or original submission. Keep the message focused on the request and do not include identity documents, passwords or payment details.
We may update this Policy as the service or applicable requirements change. The effective date above identifies this version. Material changes will be communicated through the website or account contact details where required.