Privacy Policy

1. Information We Collect

• Account & contact information: name, email address, phone number, business name, and role when you register, submit a contact inquiry, or are invited to the client portal.
• Business profile: website URL, business category, service areas, brand assets, logos, and social media handles you provide to us or upload to your project workspace.
• Billing information: payment method details are processed securely through Stripe. We store limited card metadata (last four digits, brand) for display purposes — we never store full card numbers.
• Content & files: posts, captions, images, videos, approvals, and other materials you create or upload through HariOmm.
• Usage data: pages visited, features used, and device/browser information collected to operate, secure, and improve the platform.

2. How We Use Your Information

• To deliver and manage your consulting engagement, project deliverables, and subscription.
• To publish marketing content to the social platforms you connect, on your behalf and only with your approval.
• To process payments, generate invoices, and maintain billing records.
• To provide customer support and respond to your requests and inquiries.
• To send service notifications, performance reports, and product updates. You may opt out of marketing communications at any time.
• To operate, secure, monitor, and improve our services and develop new features.

3. Social Media Connections

• When you connect a social account (Facebook, Instagram, LinkedIn, Google Business Profile, or others), you authorize HariOmm through that platform’s official OAuth process.
• HariOmm never sees or stores your social platform passwords. We receive and store an access token, scoped to the permissions you approve, to publish content and read account information on your behalf.
• You can disconnect any platform at any time, which revokes our access token and stops all publishing to that account.
• Each connection is isolated to your business. Other HariOmm customers cannot see or access your connected accounts or content.

4. How We Share Information

• Service providers: We use trusted third parties to operate the platform — including Base44 (our application platform that hosts this website and may process pseudonymous analytics), Stripe (payments), Google (business profile and the email infrastructure used to route contact-form notifications to our business inbox), Meta/Facebook, LinkedIn, and Telnyx (SMS). Recipient phone numbers and SMS message content are processed by Telnyx as necessary for message delivery. Each provider processes data only as needed to provide the service and under their own privacy and security obligations.
• Social platforms: When you publish content, that content and any associated engagement data is governed by the platform where it was published.
• Legal compliance: We may disclose information when required by law, court order, or to protect our rights, your safety, or the safety of others.
• We do not sell your personal information to third parties.

5. Data Retention

• We retain your account and project data for as long as your engagement is active.
• If you cancel your subscription, we preserve your account data, files, and projects to facilitate future reactivation unless you request deletion.
• You may request permanent deletion of your account and associated data at any time by contacting us or using the account deletion option in your profile.

6. Data Security

• We protect your data with encryption in transit and at rest, scoped access controls, and infrastructure designed to meet enterprise security standards.
• OAuth tokens for connected social accounts are stored securely server-side and are never exposed to the browser or to other customers.
• No method of transmission or storage is fully secure, but we work to protect your information using industry-standard safeguards.

7. Your Privacy Rights

• Access and update: You can view and update your profile and business information within the client portal at any time.
• Delete: You can request deletion of your account and personal data, which we process in accordance with applicable law.
• Withdraw consent: You can disconnect social platforms or opt out of marketing communications at any time.
• Depending on your location (e.g., California, the EU/UK, or other regions with privacy laws), you may have additional rights to access, correct, port, or delete your personal data.

8. Cookies, Local Storage & Analytics

• Necessary storage: We use essential local storage and cookies to operate the site and keep you signed in. This includes authentication tokens and application configuration set by our platform (Base44) and stored in your browser. These are required for the website to function and cannot be disabled.
• Public site cache: A small amount of session storage may be used to cache publicly displayed site content so pages load quickly. This contains no personal data and is cleared when you close your browser.
• Analytics: We use our platform provider (Base44) to collect aggregate, pseudonymous analytics — such as pages visited and approximate device/browser type — to understand how the website is used and to improve it. Optional analytics runs only after you choose to enable it through the consent banner or your privacy choices, and you can withdraw that choice at any time. If your browser sends a Global Privacy Control (GPC) signal, optional analytics is kept off by default.
• Web fonts: This website uses self-hosted fonts. Font files are served from our own servers — no requests are made to Google Fonts or any third-party font service, and your IP address and referring page are not disclosed to any font provider.
• Consent & your choices: When you first visit, a banner lets you Accept All, Reject Optional tracking, or Manage Preferences. Your choice is stored locally on your device so the banner does not repeat. You can change your choice at any time using the "Privacy Choices" link in the footer.
• Global Privacy Control: If your browser sends a Global Privacy Control (GPC) signal, we honor it as an opt-out of optional analytics and marketing tracking. GPC does not disable necessary functionality and does not prevent you from submitting forms or signing in.
• Contact form: Information you submit through our public contact form (business name, contact name, email, phone, and the details you provide about your request) is stored in our system and routed to our team at info@hariomm.net through Google’s email infrastructure for notification purposes, so we can respond. This notification is delivered to our business inbox — not a personal Gmail inbox. We do not sell this information.
• We do not sell your personal information to third parties.

9. SMS Communications

• Types of messages: HariOmm may send SMS (text) messages to phone numbers you provide. These fall into two categories: (a) transactional/service messages — such as proposal delivery notifications, appointment-related reminders, and account/security messages — which are necessary to provide our service and are not affected by marketing preferences; and (b) marketing/promotional messages — such as campaign announcements, newsletters, and special offers.
• Marketing SMS consent is separate from email: Consent to receive marketing emails does not constitute consent to receive marketing SMS, and unsubscribing from marketing emails does not unsubscribe you from marketing SMS. Consent to receive marketing SMS is not a condition of purchasing any HariOmm service.
• Message frequency: Message frequency varies depending on your engagement and the types of messages you have consented to receive.
• Message and data rates may apply: Your mobile carrier may charge standard message and data rates for SMS messages we send.
• Opting out of marketing SMS: To stop receiving marketing SMS, reply STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any marketing message. Opting out of marketing SMS does not affect transactional/service messages (proposal delivery, appointment reminders, account messages).
• HELP: Reply HELP to any marketing SMS for assistance. You may also contact info@hariomm.net for help with your SMS preferences.
• Re-subscribing: To re-subscribe to marketing SMS after opting out, you must do so through an explicit affirmative consent mechanism (such as your account preferences or by contacting us). Ordinary inbound messages are not treated as consent.
• How preferences are handled: SMS marketing preferences are tracked independently from email preferences. Opting out of one channel does not affect the other. Transactional/service SMS is never suppressed by marketing opt-outs.

10. Children’s Privacy

• HariOmm is a business-to-business service and is not intended for individuals under 16. We do not knowingly collect personal information from children.

11. International Data Transfers

• Your information may be processed in the United States or other countries where we or our service providers operate. By using HariOmm, you consent to these transfers in accordance with this policy and applicable law.

12. Changes to This Policy

• We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes through the platform or by email. The “last updated” date below always reflects the current version.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us: