Privacy Policy

HarmonyPro is business software for music licensing companies. This page explains what we collect, why, who we share it with, and how to get it deleted.

Who we are

HarmonyPro is operated by HarmonyPro LLC (“HarmonyPro”, “we”). You can reach us at hello@harmonypro.co.

Our customers are companies — music publishers, labels and licensing agencies. When a customer uses HarmonyPro they put information into it about their own business contacts and deals. For that information the customer is the controller and we are the processor: we hold it on their behalf and act on their instructions.

What we collect

• Account information — name, email address, and the workspace and role a user belongs to. Used to sign people in and decide what they can see.
• Business records our customers enter — licensing deals, songs and rights splits, contacts and companies, payments and payees, documents, and internal notes.
• Email our customers forward to us — where a customer uses the BCC feature, the messages they blind-copy to their workspace address, so the platform can file that correspondence against the right contact and deal.
• Connected account tokens — when a user links a third-party account such as Box or a social profile, we store the access and refresh tokens needed to act on that connection, and nothing else from that account beyond what the feature requires.
• Billing information — subscription status, plan and seat count. Card details go directly to Stripe; we never see or store a card number.
• Operational logs — requests, errors and usage counters, used to keep the service running, enforce rate limits and investigate faults.

We do not sell personal information, and we do not serve advertising.

Social accounts you connect

If you connect an Instagram, Facebook or LinkedIn account, we request only the permissions needed to publish the posts you create in HarmonyPro and to show you which account is connected. We use that access to publish content at your direction. We do not read your private messages, we do not post without an action you have taken in the app, and we do not use your social data to build advertising or marketing profiles.

You can disconnect a social account at any time from the app, which deletes the stored tokens. Disconnecting stops all future access immediately; it does not retract posts already published.

Google Drive backup

If a workspace owner connects Google, HarmonyPro requests one permission: access to the files HarmonyPro itself creates in that Google Drive (Google's drive.file scope). We use it to create a “HarmonyPro Backups” folder and a single spreadsheet, and to rewrite that spreadsheet each night with a copy of the workspace's own HarmonyPro records — deals, payees, contacts and songs. We also read the connected account's name and email address so Settings can show which Google account receives the backup.

We cannot see, open or search any other file in your Google Drive. We do not read data back from the spreadsheet, we do not share Google user data with anyone, we do not use it for advertising, and we do not use it to train AI models. We store only the tokens needed to keep the backup running and the identifiers of the folder and spreadsheet we created.

HarmonyPro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time in Settings, which revokes our access and deletes the stored tokens. The spreadsheet stays in your Drive and remains yours. You can also remove HarmonyPro's access from your Google Account's security settings.

How we use artificial intelligence

Some features — drafting posts, suggesting follow-ups, reading documents, answering questions about your own records — send the relevant portion of your data to our AI provider to generate a result. That data is processed to produce your output. It is not used to train third-party models.

AI output is a suggestion, not a decision. Nothing in HarmonyPro sends a message, publishes a post or moves money without a person acting.

Who we share data with

We use the following service providers. Each receives only what its function requires:

• Supabase — database, authentication and file storage — this is where your records live.
• Vercel — application hosting and delivery.
• Anthropic — the AI features described above.
• Stripe — subscription billing and card processing.
• Resend — transactional and digest email we send on your behalf.
• Postmark — receiving the email our customers forward into their workspace.
• Box — document storage, for customers who connect a Box account.
• CloudConvert — converting uploaded documents to PDF.
• Meta and LinkedIn — publishing social posts, for users who connect those accounts.
• Google — writing the nightly backup spreadsheet into the customer's own Google Drive, for workspaces that connect it.

We also disclose information where the law requires it, and to professional advisers under confidentiality. If the business is ever sold or merged, customer data may transfer as part of that transaction; we would tell customers before it did.

Where data is held

HarmonyPro is operated from the United States and our providers process data there. If you use the service from elsewhere, your information is transferred to the United States.

How long we keep it

We keep a customer’s records for as long as their workspace is active. Records deleted inside the app go to a recoverable state first and are purged on a schedule — deleted songs, for example, are held for 30 days so an accident can be undone, then removed. When a workspace closes, we delete its data within 90 days, except where we must keep something longer to meet a legal or accounting obligation.

Your choices and rights

Depending on where you live you may have rights to access, correct, export or delete personal information, and to object to some processing. Most of this is available directly in the app; for anything else, email hello@harmonypro.co and we will respond.

If your information is in HarmonyPro because one of our customers put it there, ask that customer first — they control that record. Contact us and we will help route the request.

Deletion has its own page, with instructions: harmonypro.co/data-deletion. We never charge a fee to delete data.

Security

Access to a workspace’s data is enforced in the database itself, so one customer cannot read another’s records. Traffic is encrypted in transit. Tokens and credentials are stored encrypted. We review the platform for security issues and fix what we find. No system is perfect, and we will notify affected customers promptly if a breach ever affects their data.

Children

HarmonyPro is business software and is not directed to children. We do not knowingly collect information from anyone under 16.

Changes

If we change this policy we will update the date above, and for significant changes we will tell customers by email before the change takes effect.

Questions about this page? Email hello@harmonypro.co.