Legal
Privacy Policy
Last updated 11 August 2026. This policy explains what we collect when you use Harmonize, why we collect it, and the control you have over it.
1. Data we collect
Account data — your email, username, display name, and optionally your country, preferred currency and language. Passwords are stored only as salted hashes by our authentication provider; we never see them.
Purchase data — the products you order, the amount, the payment method you chose, order status and the entitlements granted to your account. Card and mobile money credentials are handled by the payment provider and are not stored on our servers.
Learning data — which lessons you open and mark complete, cohort registrations and session messages you post.
Usage data — pageviews, product views, add-to-cart and checkout events, an anonymous visitor identifier, referral clicks, device type and approximate channel. This powers the conversion funnel and creator analytics.
Connected social data — if you link TikTok, Instagram, Facebook, YouTube, LinkedIn or X, we store your public profile details and recent public posts so they can be shown on your pages. Access tokens are stored encrypted and are never displayed.
2. Why we use it
- to create your account and keep you signed in;
- to process orders and unlock the courses and files you paid for;
- to show your progress, library and dashboards;
- to send transactional email such as receipts, download links and cohort reminders;
- to send abandoned-cart reminders and in-app notifications where you left checkout unfinished;
- to measure what works, prevent fraud and abuse, and improve the platform.
3. Legal bases
We process data to perform our contract with you (account, enrollment, delivery), on the basis of legitimate interests (security, analytics, service improvement, cart reminders), with your consent where required (for example connecting a social account), and to comply with legal obligations such as accounting records.
4. Cookies and local storage
We use a small number of essential cookies and browser storage entries: your session token so you stay signed in, your cart contents, your language choice, and an anonymous visitor identifier used for funnel analytics. We do not run third-party advertising trackers. Clearing your browser storage removes these, and you may lose your cart and be signed out.
5. Who we share data with
We do not sell your personal data. We share only what is necessary with service providers acting on our instructions: our cloud database and authentication host, payment processors, email delivery, and the social platforms you choose to connect. Creators can see aggregate performance for their own products, plus the details needed to deliver a service you bought from them.
We may disclose data where legally required, or to protect our rights and the safety of our members.
6. Security
Access to your records is enforced at the database level with row-level security, so your orders, entitlements, notifications and progress are readable only by you and by authorised administrators. Paid files are stored in a private bucket and delivered through short-lived signed links issued only after we verify your entitlement. Social tokens are encrypted at rest.
7. How long we keep data
Account, order and entitlement records are kept while your account exists and afterwards for as long as needed for accounting and dispute resolution. Analytics events are retained in aggregate form. Cart sessions and reminder records are cleared periodically. Disconnecting a social account removes its stored posts and tokens.
8. Your rights
You can access and correct your profile from your dashboard, change your country, currency and language at any time, disconnect social accounts, and unsubscribe from non-essential email. You may also request a copy of your data, correction, deletion of your account, or object to analytics processing — contact us and we will respond within 30 days.
9. Children
Harmonize is not intended for children under 16. If you believe a child has created an account, contact us and we will remove it.
10. International transfers
Our providers may process data outside your country, including in the EU and the United States. Where that happens we rely on the safeguards offered by those providers, such as standard contractual clauses.
11. Changes and contact
We will post any update to this policy on this page and change the date above. For privacy questions or requests, reach us through the contact page. See also our Terms of Service.