01
Overview
HARLEY.OS collects and uses personal information only for legitimate business and service purposes. This policy describes those practices and the privacy rights that may apply depending on where you live.
We do not describe this policy as guaranteeing compliance with every privacy law worldwide. Privacy obligations depend on where users are located, which services they use, and how those services operate. We update this notice as HARLEY.OS evolves.
02
What we collect
Account and identity information
- Name, display name, email address, account identifiers, authentication information handled by our authentication provider, profile images and account preferences.
- HARLEY.OS may associate multiple email addresses with one account when you use a different email for a purchase, invoice, membership, or other service. We use a canonical account ID to keep access and purchases connected to the same user where we can reliably verify the relationship.
- Membership, Studio Phone, Collective, Studio, OEA, purchaser and other access permissions associated with your account.
Purchases and transactions
- Order information, transaction amount, product or membership purchased, shipping details where required, and purchase history.
- Payment card information is processed by payment providers such as Stripe. HARLEY.OS does not store full payment card numbers.
Communications and Studio Phone
- Messages, attachments, sender and recipient identifiers, timestamps, read status, reactions, notification status and related communications metadata.
- Call and telephony metadata such as call status, timestamps, routing information and phone-related account information where applicable. Communications providers may process full phone numbers even when HARLEY.OS displays only limited phone information in some interfaces.
- Invoices, payment requests and receipts sent through Studio Phone.
Studio, Collective and uploaded content
- Posts, comments, reactions, direct messages, profile information and other user-generated content.
- Project files, images, audio, video, documents, creative references, feedback, bookings, milestones, decisions and client communications used in Studio or related workspaces.
- Content you intentionally publish to member-visible or public areas may be visible to other users.
Technical and usage information
- IP address, browser, device and operating-system information, referral and page activity, feature usage and application logs.
- Cookies, local storage and similar technologies used for authentication, preferences, security, diagnostics and analytics where implemented.
- Runtime and error logs used to diagnose failures, protect the service and improve reliability.
We do not intentionally request special-category information such as health, biometric, racial or religious data unless a specific feature clearly requires it and applicable law permits the processing. Do not submit sensitive information unless it is necessary for the service you are using.
03
How we use personal information
| Purpose | Typical legal basis where GDPR-style law applies |
|---|---|
| Account authentication and service access | Contract / legitimate interests |
| Purchases, memberships and fulfillment | Contract / legal obligation |
| Studio, Collective and communications features | Contract / legitimate interests |
| Security, fraud prevention and diagnostics | Legitimate interests / legal obligation |
| Required transactional notices | Contract / legal obligation |
| Marketing communications | Consent where required; legitimate interests where lawful |
| Non-essential analytics or advertising technologies | Consent where required |
Where we rely on legitimate interests, we consider the impact on your rights and interests. Where processing requires consent, you may withdraw that consent, subject to legal and technical limitations.
04
Service providers and disclosures
HARLEY.OS may disclose personal information to service providers that help operate the Services. Categories may include:
- Application infrastructure, authentication, databases, file storage, application functions and operational tooling, including Base44 and related infrastructure providers.
- Payment processing and transaction services, including Stripe.
- Communications and telephony providers, including Twilio where enabled.
- Email, notifications, file delivery, analytics, security, hosting and content-processing services used by HARLEY.OS.
- Professional advisers, regulators, courts or law-enforcement authorities where disclosure is legally required or reasonably necessary to protect rights, safety or security.
- A successor or acquiring party in a merger, acquisition, financing, reorganization or sale of assets, subject to appropriate safeguards.
We do not sell personal information for money. If HARLEY.OS ever engages in activity that qualifies as a “sale” or “sharing” under an applicable state privacy law, we will provide any required notice and opt-out mechanism before or at the time required by law.
05
International transfers
HARLEY.OS is operated from the United States and service providers may process information in the United States and other countries. This means your information may be transferred outside the country where you live.
Where applicable law requires a transfer mechanism, we rely on mechanisms made available by our providers and applicable law, such as adequacy decisions, contractual safeguards including standard contractual clauses, or other recognized transfer mechanisms. You may contact us for additional information about transfer safeguards that apply to your data.
06
How long we keep information
Account data
Generally while your account is active and for a reasonable period afterward where necessary for security, disputes or legal obligations.
Purchases and tax records
For periods required by accounting, tax, fraud-prevention and transaction-record laws.
Messages and communications
For as long as reasonably necessary to provide communications features, maintain account history, resolve disputes or meet legal obligations.
Studio files and project data
While the relevant project or account relationship is active, or until deleted where deletion is available and no overriding retention obligation applies.
Security and runtime logs
For limited operational, fraud-prevention, debugging and security periods appropriate to the type of log.
Marketing records
Until you unsubscribe or object, plus minimal suppression information needed to honor that choice.
Privacy requests
As needed to document and administer the request and demonstrate compliance.
Specific periods may vary depending on the nature of the data, legal requirements, contractual needs, disputes, security concerns and whether you continue to use the relevant service.
08
Your privacy rights
Depending on your location and whether a particular privacy law applies to HARLEY.OS, you may have rights such as:
- Access or confirmation of whether we process personal information about you.
- Correction of inaccurate or incomplete information.
- Deletion or erasure, subject to legal exceptions and retention obligations.
- Restriction, objection or limitation of certain processing.
- Data portability where applicable.
- Withdrawal of consent where processing is based on consent.
- Opt-out of direct marketing and, where applicable, sale, sharing or targeted advertising.
- Information about recipients or categories of recipients with whom information is shared.
- Review or information regarding qualifying automated decisions where applicable.
- The right not to be discriminated against for exercising legally protected privacy rights.
Submit requests to help@jaseharley.com. We may need to verify your identity before completing a request. Response timing depends on the law that applies.
09
Regional disclosures
European Economic Area and United Kingdom
If GDPR or UK GDPR applies, you may have rights including access, rectification, erasure, restriction, portability, objection, withdrawal of consent and the right to complain to your local data protection authority. The legal bases we typically rely on are described above.
California and other U.S. states
If an applicable U.S. state privacy law covers HARLEY.OS, you may have rights to know/access, correct, delete, obtain portability and opt out of certain forms of sale, sharing or targeted advertising. HARLEY.OS does not currently sell personal information for money. Applicability thresholds differ by state, so not every state statute necessarily applies to HARLEY.OS.
At collection points where a law requires more specific notice, HARLEY.OS may provide an additional notice describing the categories collected, purposes and any legally defined sale or sharing practices.
Brazil
Where Brazil's LGPD applies, rights may include confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed data, portability, information about sharing, information about the consequences of refusing consent, withdrawal of consent and review of qualifying automated decisions.
Canada and other jurisdictions
Where Canadian or other privacy laws apply, HARLEY.OS will handle access, correction, consent, accountability and complaint rights as required by applicable law.
10
AI and automated processing
Certain HARLEY.OS features may use automated systems or artificial intelligence to generate, organize, summarize, classify, recommend or assist with content and responses.
HARLEY.OS does not currently use solely automated decision-making intended to produce legal or similarly significant effects on users. If that changes, we will provide additional disclosure where required by law.
11
Children's privacy
HARLEY.OS is not directed to children under 16, or the higher minimum age required by applicable law for a particular service. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided information improperly, contact us so we can review and take appropriate action.
12
Security
We use reasonable administrative, technical and organizational safeguards appropriate to the nature of the Services and information involved. These include access controls, authenticated service access, provider security controls and operational monitoring where available.
No internet service can guarantee absolute security. Protect your account credentials, use secure devices and contact us if you suspect unauthorized access.
13
Contact and complaints
Privacy contact:
Jase Harley / HARLEY.OS
help@jaseharley.com
If you are in a jurisdiction that gives you the right to complain to a privacy or data-protection regulator, you may contact the regulator responsible for your location.
Submit privacy request14
Changes to this notice
We may update this Privacy Center as HARLEY.OS changes. We will update the date above and provide additional notice where required by law. If a new processing activity requires consent, we will seek that consent where legally required rather than treating continued use alone as consent.

