Harmonix ("Harmonix", "we", "us", "our") provides an AI-assisted communication and governance platform for organizations. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our services.

1. Information We Collect

We may collect the following categories of information:

a. Account & Identity Information

• Name
• Email address
• Organization name
• User role and permissions
• Authentication identifiers (including SSO where enabled)

b. Usage & Technical Information

• Log data (timestamps, interactions, configuration actions)
• IP address, browser type, device information
• Cookies and similar technologies

c. Customer Content

• Policies, documents, messages, and configurations uploaded or connected by customers
• Metadata generated through use of the platform

2. How We Use Information

We process information to:

• Provide, operate, and maintain the Harmonix platform
• Authenticate users and enforce access controls
• Generate AI-assisted responses based on customer-provided content
• Improve platform performance, security, and reliability
• Comply with legal and contractual obligations

3. AI & Automated Processing

Harmonix uses automated systems and artificial intelligence to process customer-provided data and generate responses.

AI outputs:

• Are generated solely based on configured rules, permissions, and connected data
• Are informational only and do not constitute legal, financial, or professional advice
• Should be reviewed by customers before being relied upon for decision-making

4. Data Sharing & Sub-Processors

We may share data with trusted third-party service providers, including:

• Cloud hosting providers
• Authentication and identity providers
• Analytics and monitoring services
• Payment providers (including Stripe)

All sub-processors are bound by contractual data protection and confidentiality obligations.

5. Data Retention

We retain personal data only as long as necessary to:

• Provide the services
• Meet legal, accounting, or regulatory requirements

Customer data is deleted or anonymized after account termination, subject to legal obligations.

6. Security Measures

We implement reasonable technical and organizational measures including:

• Encryption in transit
• Role-based access control
• Logical tenant isolation
• Audit and activity logging

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data. Requests can be submitted to: