Your data and your customers’ data are used only to run Connect for you.
Google user data is used only to check availability and manage appointments you enable. See Section 4.
For contacts and conversations, you decide how data is used. We process it on your behalf.
01Who we are
This Privacy Policy explains how Harnad AI Private Limited (“Harnad”, “we”, “us”) collects, uses, stores and shares personal information when you use Harnad Connect (connect.harnad.com) and related dashboards, APIs and support channels.
For privacy questions or requests, email hello@harnad.com.
02Scope
This policy covers account holders and workspace users of Harnad Connect. It also describes how WhatsApp conversation data (messages, contacts and metadata) may be processed when your customers interact with AI agents on numbers you operate. You are responsible for lawful notice and consent to your customers where required.
Information we receive from Google APIs is additionally governed by Section 4 (Google user data), which takes priority over any other section of this policy.
03Information we collect
We may collect:
- Account data: name, email, and Google account identifiers when you sign in with Google. Sign-in is handled by Google Firebase Authentication.
- Billing data: invoice name, address, GSTIN (if provided), plan selection, and payment references from our payment processor (Razorpay). We do not store full card numbers on our servers.
- WhatsApp Business account data: when you connect a number through Meta’s Embedded Signup, WhatsApp Business Account ID, phone number IDs, display phone numbers, verified names, access tokens needed to operate the account, and Meta-reported usage and cost figures.
- Workspace and agent configuration: agent prompts, languages, tools (for example, Google Calendar connection status), auto-reply settings, contacts, tags, templates and routing settings.
- Conversation data: inbound and outbound WhatsApp messages, templates, broadcasts, scheduled sends, reply-window information, outcomes and structured events written to your dashboard.
- Usage and technical logs: plan usage against limits, IP address, device/browser type, and diagnostic logs needed to operate and secure the service.
- Google user data: if you connect Google Calendar, the data described in Section 4.
04Google user data
If you choose to connect your Google Calendar, Harnad Connect requests access to your Google Calendar data through Google OAuth. You can use Harnad Connect without connecting Google Calendar.
Scopes we request
https://www.googleapis.com/auth/calendar.eventshttps://www.googleapis.com/auth/calendar.events.freebusyhttps://www.googleapis.com/auth/userinfo.email
Data we access
Your Google account email (to show which calendar is connected), calendar availability (free/busy times), and the event details needed to find open slots and to create, update or cancel appointments.
How we use it
We use Google user data only to provide the user-facing features you enable in Harnad Connect: checking availability and booking, rescheduling or cancelling appointments on your behalf when your AI agent handles WhatsApp conversations for your business.
What we do not do with Google user data
- We do not use it for advertising or marketing.
- We do not use it for product analytics.
- We do not use it to create, train, develop or improve generalized or foundational artificial intelligence or machine-learning models, including speech and language models.
- We do not sell it.
- We do not transfer or disclose it to third parties, except (a) as necessary to provide the features you have enabled, including the AI providers described below, (b) to comply with applicable law, or (c) as part of a merger, acquisition or sale of assets with notice to you.
- We do not allow humans to read it, except with your explicit consent for specific data, where necessary for security purposes such as investigating abuse, or to comply with applicable law.
AI/ML processing of Google user data
To let your WhatsApp AI agent check availability and book appointments, relevant Google Calendar data is sent to the large language model (LLM) providers that power the agent’s responses:
- Google Gemini using an API key you supply (bring-your-own-key), under Google’s Gemini API terms applicable to that key.
- Google Gemini on Vertex AI (Google Cloud), when you use Harnad-hosted agents, under Google Cloud’s Vertex AI terms, under which customer data is not used to train Google’s models.
These providers process Google user data solely to perform the requested function and for no other purpose. We do not use any free-tier or consumer AI service that trains on submitted data. We do not use any aggregator, gateway or model hub, and we do not use self-hosted or offline models for Google user data.
WhatsApp delivery
Raw Google Calendar data is never sent to Meta or WhatsApp as calendar contents. After the language model processes your calendar data, only the text of the agent’s reply (for example, an available appointment time or a booking confirmation) is sent as a WhatsApp message to your customer. Replies do not include event titles, attendee lists or other calendar contents beyond what is needed to complete the booking conversation.
Storage and retention
We store Google OAuth tokens server-side with access controls and encryption in transit and at rest via our cloud infrastructure. Calendar event content is processed to complete the requested action and is not retained afterward, except short-lived state needed to finish a multi-step booking, cancel or reschedule flow in an active conversation. We delete Google user data and OAuth tokens when you disconnect Google Calendar, when you delete the connected number or workspace, or when you ask us to.
Revoking access and deletion
You can disconnect Google Calendar at any time from the Harnad Connect dashboard (Integrations) or at https://myaccount.google.com/permissions. To request deletion of Google user data, email hello@harnad.com.
Limited Use compliance statement
Harnad Connect’s use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.
05How we use information
Except for Google user data, which is governed only by Section 4, we use personal information to:
- Provide and operate Harnad Connect (numbers, inbox, templates, agents, dashboard), and improve the service using non-Google data.
- Authenticate users and manage workspaces.
- Connect WhatsApp numbers, and send, receive and display messages and templates.
- Run auto-replies and AI agents you have switched on.
- Process payments, renewals, tax invoices and plan limits.
- Show Meta-reported usage and cost.
- Send important service and account notices (billing, security).
- Detect abuse, debug incidents and meet legal or regulatory obligations.
06Legal bases
Depending on applicable law (including India’s Digital Personal Data Protection Act, 2023), we process personal data with consent and/or for legitimate uses such as providing the contracted service, billing, security and compliance. Where consent is required, you may withdraw it subject to limits needed to keep the service running or meet legal duties.
07Your customers’ data
When you store contacts or exchange messages with your customers through Connect, you decide why and how that data is processed, and Harnad processes it on your behalf to provide the Service. You are responsible for having a lawful basis and the necessary opt-in consent to message your customers, and for answering their privacy requests. We will help you respond where we reasonably can.
09International transfers and residency
Infrastructure may process data in India and other countries where our providers operate, including where Meta and Google operate. Where we transfer data, we rely on the safeguards offered by those providers and on transfers permitted under applicable law.
10Retention
We retain account and billing records for as long as your account is active and as needed for tax, audit and dispute purposes. Conversation history and workspace content are retained according to product defaults, your plan (inbox history limits) and legal requirements. Google user data is retained as described in Section 4. When retention ends, we delete or anonymise data within a reasonable period, except where longer retention is required by law.
11Security
We use industry-standard measures such as encrypted transport, access controls and workspace-scoped permissions. Meta access tokens, Google OAuth tokens and AI API keys are stored server-side and never sent to your browser. No method of transmission or storage is completely secure; please protect your account credentials and limit dashboard access to trusted users.
12Your rights
Subject to applicable law, you may request access, correction or deletion of personal data we hold about you, or withdraw consent where processing is consent-based. Workspace owners can manage much of their conversation and agent data from the dashboard. For other requests, email hello@harnad.com. We may need to verify your identity and may decline requests that are unlawful, excessive, or that would break security or billing obligations.
13Children
Harnad Connect is a business service. It is not directed at children under 18. We do not knowingly create accounts for minors.
15Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. If we make material changes to how we handle Google user data, we will notify you before the change takes effect. Continued use of Harnad Connect after an update means you accept the revised policy, where permitted by law.
16Contact
For privacy questions, requests or grievances: