Privacy policy
How Harven handles personal data on this website — the contact form, the demo booking, the anti-spam check and audience measurement.
This policy covers the website harven.ai. It does not cover the Harven product, which is governed by your contract with us.
Who is responsible
The controller of the personal data described here is HARVEN, a simplified joint-stock company registered in Lyon under number 100 976 653, whose registered office is at 31 rue Gorge de Loup, 69009 Lyon, France. For any question about this policy or your data, contact us.
What we collect, and why
When you write to us
The contact form asks for your name, your work email address, your company (optional) and your message. We use them to answer you and to follow up on your request. The legal basis is the steps you ask us to take before a possible contract and our legitimate interest in answering business enquiries.
Your message is sent by email to our team, and a copy is sent back to you as an acknowledgement. It may also be posted to our internal team messaging (Slack) and recorded in our customer-relationship tool (PostHog, EU region), where your email address identifies the record. We do not keep it in a database of our own.
To protect the form from abuse, your IP address is used to limit how many messages can be sent in a short period. It is held in memory only, and it is written to our technical logs when that limit is reached.
The anti-spam check
The contact page uses Cloudflare Turnstile to tell people from bots. Turnstile runs in your browser and receives technical information about it, and we send Cloudflare your IP address when we verify the check. The legal basis is our legitimate interest in keeping the form free of spam.
When you book a demo
The demo page embeds a scheduling tool, Cal.com, which loads when you open the page. If you book a slot, Cal.com collects the name, email address and any notes you enter, on our behalf. Cal.com’s service is hosted in the United States.
Audience measurement
To see how the website is used — which pages are visited, how visitors find them and from which country — we measure its audience with PostHog, hosted in the European Union. Each page you view sends PostHog the page’s address, the page you came from, your browser and device type, and your IP address. PostHog uses your IP address to estimate your country and, combined with your browser details and a random value that changes every day and is then deleted, to count visits without recognising you from one day to the next. It does not store your IP address. Nothing is stored in your browser. Beyond page views, we record a few steps of a visit, never their content: starting the contact form, sending it, clicking a button to book a demo, and booking one. We do not record what you type. The legal basis is our legitimate interest in measuring and improving the website.
What we do not do
This website sets no cookies of its own and runs no advertising trackers. Its audience measurement, described above, uses no cookies. Fonts are served from our own domain. The services above — Turnstile on the contact page, Cal.com on the demo page — may store information in your browser under their own policies.
Who receives your data
Only the Harven team and the service providers that run this website for us:
- Scaleway (France) — hosting, and the email that carries your message;
- bunny.net (Slovenia) — content delivery and security;
- Cloudflare — the anti-spam check;
- Slack — internal team messaging;
- PostHog (EU region) — our record of enquiries, and audience measurement;
- Cal.com (United States) — demo scheduling.
Some of these providers are established outside the European Union. Where your data leaves it, the transfer relies on the provider’s certification under the EU-US Data Privacy Framework (Cloudflare, Slack, Cal.com) or, where that does not apply, on the European Commission’s standard contractual clauses.
How long we keep it
- Enquiries: at most three years after your last contact with us, including in Slack and PostHog.
- Demo bookings: at most three years after your last contact with us.
- Audience measurement: at most 25 months after the page view.
- Technical logs: at most one year.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. To do so, contact us. You can also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.
Changes
We update this policy whenever we change how the website works.