Legal

    Privacy Policy

    Last updated: May 2026

    Harco helps sales professionals rehearse real conversations. To do that well, we process some personal data. This policy explains what we collect, why we collect it, and the controls you have over it.

    Who we are

    Harco is operated by Harco SAS, registered in France. For any privacy question, write to privacy@harco.ai.

    What we collect

    • Account data: name, email, company, job title, language preference.
    • Practice data: voice audio of your rehearsals, transcripts, prosody signals (tone, pace, emotion), and the analyses generated by our coach.
    • Usage data: sessions completed, scenarios chosen, time on task, anonymous product analytics.
    • Technical data: browser, IP address, device type — used for security and reliability.

    Why we process it

    • To run the simulations and generate the reflective analysis you came for.
    • To improve the product (aggregated, never sold).
    • To send you transactional emails (account, invitations, recovery).
    • To meet legal obligations.

    Sub-processors

    We rely on a small set of vetted partners to host the product, deliver emails, and power the live Character and the analysis. We keep this list short and review it regularly. For the current list, write to privacy@harco.ai. None of your conversations are used to train public models.

    Retention

    • Audio recordings: deleted within 30 days of the session unless you keep them.
    • Transcripts and analyses: kept while your account is active so you can reflect on progress.
    • Account data: kept until you delete your account, then purged within 30 days.

    Your rights (GDPR)

    You can access, correct, export, restrict, or delete your data at any time. Email privacy@harco.ai and we will respond within 30 days. You can also lodge a complaint with the CNIL.

    Security

    Data is encrypted in transit (TLS) and at rest. Access is restricted by row-level security and role-based permissions. We follow the principle of least privilege internally.

    Cookies

    We use strictly necessary cookies for authentication and a single anonymous analytics cookie to understand which features matter. No advertising cookies, ever.

    Changes

    If we make material changes, we will notify you by email at least 14 days before they take effect.