Harny Developer Agreement

1. Service Description

Harny provides an infrastructure service that processes data from your application's end users' connected accounts to extract structured context, enabling AI-powered features within your application. The sources, extraction methods, and output formats available through the platform are as described in this Agreement and may be updated from time to time with notice per Section 12.

2. Data Processing

2.1 What We Process

When your end users authorize a data source connection through your application, Harny receives content from that source (such as email messages) and extracts structured context facts. Specifically:

• Extraction:Content is processed using third-party large language model providers solely for the purpose of extracting structured facts relevant to your application's use case.
• No raw storage: Raw source content (message bodies, HTML, subject lines, attachment contents) is not retained at rest. Only extracted structured facts, episode summaries, vector embeddings, metadata anchors, and process audit trails are stored.
• Provider data handling: Our LLM providers process content under enterprise API agreements that prohibit training their models on submitted content. Processing is ephemeral — content is not retained by the provider beyond the duration of the API call.

2.2 Storage Tiers

Harny stores the following derivative forms only:

1. Structured facts (extracted entities and relationships)
2. Episode summaries (short paraphrases)
3. Vector embeddings (non-reversible representations for semantic search)
4. Metadata anchors (message ID, timestamp, sender domain, byte size, category tier)
5. Audit trail (extraction process logs)

2.3 User Isolation

All end-user data is isolated by user identifier at every processing layer. No end-user content is accessible to other end users or to other developers' applications.

3. Developer Obligations

3.1 End-User Disclosure

You must include a clear disclosure in your application's terms of service or privacy policy informing your end users that:

• Their connected account data is processed by a third-party infrastructure service
• Structured information is extracted and stored to provide personalized features
• Raw message content is not retained by the infrastructure service
• They may disconnect their account at any time to remove stored information

A template disclosure clause is provided alongside this Agreement — view it in your console on the app settings page after signing in. You are responsible for ensuring your disclosure complies with applicable law in the jurisdictions where your users are located.

3.2 End-User Consent

You are responsible for obtaining any necessary consent from your end users for the processing described in this Agreement. Harny relies on your contractual relationship with your end users as the basis for processing their data.

3.3 Lawful Use

You must not use Harny to:

• Conduct surveillance or monitoring of individuals without their knowledge
• Intentionally ingest data falling within GDPR Article 9 special categories (health data, religious beliefs, sexual orientation, political opinions, biometric data) except where your end users have provided explicit consent for that specific processing
• Process data of individuals under 13 years of age, or under the applicable age of digital consent in your end users' jurisdictions
• Violate the terms of service of any connected data source
• Transfer or disclose extracted context to advertising networks, data brokers, or any third party for marketing or advertising purposes

4. Pricing and Billing

Pricing for the Harny platform is as communicated through the developer console. During beta, a free tier is available subject to usage limits communicated at provisioning. Harny reserves the right to revise pricing, usage caps, and tier definitions with 30 days' prior written notice. Continued use of the platform after the notice period constitutes acceptance of revised pricing.

5. Data Deletion and End-User Erasure

5.1 Source Disconnection

When you or your end user disconnects a data source through your application, Harny ceases further data retrieval from that source immediately. Extracted data associated with that connection is marked for deletion.

5.2 Erasure Completion

Deletion of extracted data (structured facts, summaries, embeddings, metadata) completes within 30 days of a disconnection or erasure request. Aggregate anonymized analytics derived from the data may be retained longer.

5.3 End-User Erasure Path

Your end users may request erasure of their data by contacting you. You are responsible for initiating the erasure by disconnecting the user's data source through your integration or by contacting support@harny.ai. Alternatively, end users may contact Harny directly at support@harny.ai with their request, and Harny will execute the deletion within 30 days.

6. Service-Improvement License

You grant Harny a non-exclusive, royalty-free, worldwide license to use aggregated or anonymized data derived from content processed through the platform for the purposes of: improving extraction quality, training rule-based parsers, evaluating model performance, and producing platform-level analytics. Harny will not re-identify such data or combine it with personal identifiers after aggregation.

This license survives termination of this Agreement with respect to data that has already been aggregated or anonymized prior to termination.

7. Indemnification

You agree to indemnify, defend, and hold harmless Harny and its officers, directors, and employees from any claims, damages, losses, or expenses (including reasonable legal fees) arising from:

• Your end users' content processed through the platform
• Your failure to obtain necessary consent or provide required disclosures to your end users
• Your violation of applicable law or this Agreement
• Any misuse of the platform by you or your end users

8. Limitation of Liability

8.1 Cap

Harny's total aggregate liability under this Agreement shall not exceed the fees paid by you to Harny in the twelve (12) months preceding the event giving rise to the claim.

8.2 Exclusions

In no event shall Harny be liable for indirect, incidental, special, consequential, or punitive damages, or loss of profits, revenue, data, or business opportunity, regardless of the theory of liability.

8.3 Exceptions

The limitations in this section do not apply to liability arising from Harny's gross negligence or willful misconduct, or to the extent prohibited by applicable law.

9. Suspension and Termination

9.1 Suspension

Harny may suspend your access to the Service or disable your API keys with immediate effect if: (a) you breach Section 3 (Developer Obligations) or Section 4 (Data Protection); (b) your usage threatens the stability, security, or availability of the platform; (c) required by law, regulation, or a binding order; or (d) your account enters a billing grace period that expires without resolution. Harny will notify you promptly after suspension and state the grounds. Access will be restored once the grounds are resolved to Harny's reasonable satisfaction. If suspension continues for more than 60 days without resolution, either party may terminate this Agreement under Sections 9.2 or 9.3.

9.2 Termination by Harny

Harny may terminate this Agreement for convenience upon 30 days' written notice to you. In the event of termination for convenience, Harny will provide access to data export tools during the notice period.

9.3 Termination by Developer

You may terminate this Agreement immediately if Harny commits a material breach of this Agreement that remains uncured for 30 days after you provide written notice specifying the breach.

9.4 Effect of Termination

Upon termination, Harny will cease processing your end users' data and delete extracted data in accordance with Section 5.2. Provisions that by their nature should survive termination (including Sections 6, 7, 8, and this Section 9.4) will survive.

10. Data Processing Addendum

A formal Data Processing Addendum (DPA) establishing controller/processor roles and obligations will be available upon request at a future phase of the platform. Currently, Harny acts as an independent data controller for the context extraction and storage activities described in this Agreement, and as a data processor on behalf of the developer for the OAuth connection mediation activity.

11. Governing Law and Dispute Resolution

This Agreement is governed by the laws of the Province of British Columbia, Canada, without regard to conflict of law principles. Any disputes arising from this Agreement shall be resolved in the courts located in British Columbia, Canada.

12. General

12.1 Amendments

Harny may update this Agreement with 30 days' prior written notice. Material changes will be communicated via the email address associated with your developer account. Continued use of the platform after the notice period constitutes acceptance.

12.2 Assignment

You may not assign this Agreement without Harny's prior written consent. Harny may assign this Agreement in connection with a merger, acquisition, or sale of all or substantially all of its assets.

12.3 Entire Agreement

This Agreement constitutes the entire agreement between you and Harny regarding the subject matter hereof, and supersedes all prior agreements and understandings.