Privacy policy, October 2, 2026

Last updated: October 2, 2026

Contents

Who we are

harperOS is the operating name of harperOS LLC, a Delaware limited liability company. We build the AI operating system businesses run on — the knowledge architecture, the expert AI agents, and the automated workflows — all running inside your own environment.

• Website: harperos.ai
• Contact: privacy@harperos.ai
• Registered office: 131 Continental Drive, Suite 305, Newark, DE 19713

This policy is governed by the laws of the State of Delaware.

What this policy covers

This policy covers the harperos.ai website — the data we collect when you visit or get in touch. It does not cover the harperOS system we build for a client: that runs in the client’s own environment, and we hold none of its operational data.

In privacy terms: for the data this website collects, harperOS is the controller; for the operational data in the system we build, you are — it stays in your environment, and we do not host or copy it.

For how we secure the systems we build, see our Security page.

What we collect

When you visit harperos.ai or get in touch, we collect:

• Contact details you give us — your name, email, company, and anything you write in a message or form.
• Technical data from your visit — IP address, device and browser type, and how you move through the site, collected through cookies and analytics.

We do not collect payment details on this website. Billing runs under a signed agreement.

How we use it

We use the data we collect to:

• Reply to you and send the information you ask for.
• Keep you up to date about harperOS, if you have opted in.
• Understand how the site is used, so we can improve it.
• Meet our legal and security obligations.

Cookies and analytics

We use a small set of cookies. Essential cookies make the site work. With your consent, we use Google Analytics (GA4) to see how the site is used, and Vercel analytics for performance.

The private documents we share with a client, under harperos.ai/clients, record how they are read: which sections were on screen and for how long, how far down the page, and which links were clicked, tied to the organization the link was issued to. Each link we send carries a short code that tells us which recipient’s link was opened, and the visitor’s network address is kept only as a salted one-way hash. These pages also send Google Analytics a count of visits, with the private part of the link removed; unless you accepted cookies on our public site, that count sets no cookie and stores nothing on your device. If your browser sends a Global Privacy Control signal, nothing is sent to Google.

You can accept or refuse non-essential cookies through the consent banner, and change your choice any time. We honor Global Privacy Control (GPC) browser signals. Google Fonts loads our typefaces and receives your IP address as part of that request.

Who we share it with

We share personal data only with the service providers that run our website, and only so they can do that work for us:

• Vercel — website hosting and performance analytics.
• Google — website analytics (consent-gated and IP-anonymized) and fonts.
• Supabase — stores the details you submit through a form.
• Notion — scheduling when you book a meeting with us.

Each processes data on our behalf under its own terms. We may disclose data if the law requires it. Otherwise, we do not hand your data to anyone for their own use.

AI, and what we never do

harperOS does not use your personal data — or any client’s data — to train AI models. Usage data about how our product is used is anonymized and aggregated, and we use it only to improve our own product. The reading records on documents we share with a client (section 5) are kept per organization, for our work with that organization.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

How long we keep it

We keep personal data only as long as we need it for the purpose we collected it, then delete it.

• Inquiry and contact data — while we are in contact and for a period after our last exchange, unless you ask us to delete it sooner.
• Marketing data — until you unsubscribe or ask us to stop.
• Website analytics — according to our analytics tools' retention settings.

You can ask us to delete your data at any time — see your rights below.

Your privacy rights

If you are a California resident — or live in another US state with a privacy law — you have the right to know what personal data we hold, get a copy, correct it, delete it, and opt out of any sale or sharing (though we do neither). We will not treat you differently for exercising these rights.

To exercise any right, email privacy@harperos.ai. We will respond within the time the law requires — for access or deletion, within 45 days, extendable once if we need more time.

Visitors outside the US

harperOS is a US-based company. If you are in the EU or UK, you also have rights under the GDPR — access, correction, deletion, restriction, objection, and portability — and the right to complain to your data-protection authority. Where we transfer EU or UK data to the US, we rely on standard contractual clauses.

Children

harperOS is a business product. This site is not directed to children, and we do not knowingly collect data from anyone under 16.

Changes to this policy

We review this policy every June and December, and update it whenever our practices change. When we make a meaningful change, we refresh the date at the top of the page and add the new version to Version history, where every past version is listed.

Questions about your privacy? Email privacy@harperos.ai.

Version history

October 3, 2026

Current version

October 2, 2026

This version

June 1, 2026

Previous version

We keep every version on record. Earlier versions appear here as the policy is updated.