Privacy

Effective 2 October 2026. This policy explains how Harso handles information when you use our desktop application and services. Harso is operated by Straits Lab Ventures Pte Ltd, a company registered in Singapore ("Harso", "we", "us"). This page is the one official Harso privacy policy.

Information we handle

We process account information, such as your name, email address, and sign-in provider; content you choose to create or submit, including conversations, projects, and files; information from services you choose to connect, such as Google, as described below; and limited technical information needed to operate, secure, and improve the service.

How we use information

We use information to provide and secure Harso, maintain your account and work, respond to support requests, diagnose reliability issues, and meet legal obligations. We do not sell your personal information.

Sign-in providers

If you sign in with Google or Apple, Harso receives the basic identity information you authorize, such as your name and email address. Signing in does not give Harso access to your Gmail, Google Calendar, Google Contacts, Google Drive, or other provider content. Harso only gets that access if you separately choose to connect a service, as described in "Connected Google services" below.

Connected Google services

You can choose to connect your Google account so that Harso's assistant can work with your email, calendar, contacts, and files when you ask it to. Connecting is optional and separate from signing in. You can disconnect at any time.

What we access

When you connect Google, Google shows you the permissions Harso asks for, and you choose whether to allow them. Harso asks for read-only access to:

• Gmail: your email messages and settings (gmail.readonly).
• Google Calendar: your calendars and events (calendar.readonly).
• Google Contacts: your contacts (contacts.readonly).
• Google Drive: only the specific files you open with Harso or choose to share with it (drive.file).

How we use it

We use Google user data only to provide the features you see in Harso, such as finding an email, summarising a thread, checking your calendar, looking up a contact, or reading a file you choose. We use it when you ask, and for the background watcher if you turn it on.

With these permissions, Harso can read but cannot change, send, or delete anything in your Google account. If Harso later needs to make a change, such as sending an email or creating an event, it will ask you for that permission separately, and nothing is changed until you approve that specific action.

AI model providers

When you ask Harso to work with your Google content, the parts needed to answer you are sent to the AI model provider that runs Harso's assistant for that request: OpenAI, Anthropic, or Google. They process it only to produce the answer you asked for. On the accounts Harso uses with these providers, we have turned off the setting that lets the provider use your content to train its models. Each provider keeps request data under its own retention terms.

Background watcher (optional)

Harso can watch your connected Gmail and Calendar and tell you about important things, such as a message that needs your reply or a change to a meeting. The watcher is off by default. You turn it on for each connected service, and you can turn it off at any time.

The watcher sorts new items on our servers with fixed rules. If TypeSafe sorting is turned on for your account, the watcher shares only the sender, the subject, and a preview of up to 200 characters of each new item with TypeSafe, our sorting processor, to decide whether the item is important. Full emails and attachments are never shared with TypeSafe.

We keep watcher alerts for 30 days. After that we remove the sender and subject and keep only counts.

How we store and protect it

Your Google access tokens are encrypted at rest on Harso's servers with keys held in a managed key service, and data is encrypted in transit. The tokens never enter your Harso workspace, where the assistant runs. The assistant asks our servers to make each request to Google, so it never sees or holds your tokens.

Who we share it with

We share Google user data only:

• with the service providers that run the features you use, as described above, and only to provide those features;
• when needed for security, such as investigating abuse;
• when required by law; or
• as part of a merger, acquisition, or sale of assets, and only after we ask for your explicit consent.

We do not sell Google user data. We do not use it for advertising, and we do not share it with advertising platforms, data brokers, or information resellers. We do not use it to decide credit-worthiness or for lending.

We do not use Google user data to develop, improve, or train generalised AI or machine-learning models. Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.

Who can see it

People at Harso do not read your Google user data unless you ask us to (for example, when you ask for help with a specific message or file), it is needed for security (for example, investigating a bug or abuse), or it is required by law.

Keeping and deleting it

We keep your Google tokens only while Google is connected. When you disconnect Google in Harso, we delete your Google tokens, your watcher settings, and your watcher alerts, and we ask Google to cancel Harso's access. Content that Harso read for you and showed you in a conversation stays in that conversation, like the rest of your chat history, until you delete it. You can also remove Harso's access at any time from your Google Account settings.

To ask us to delete any of your data, email abhi@harso.ai.

Google API Services User Data Policy

Harso's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers and transfers

We use vetted infrastructure and service providers to host and operate Harso. They may process information only to provide services to us and under appropriate contractual and security safeguards. Processing may occur in countries other than your own.

Retention and security

We retain information for as long as needed to provide the service, meet legal obligations, and resolve disputes. Information from connected Google services is kept as described in "Connected Google services" above. We use technical and organisational safeguards designed to protect information, but no system is completely secure.

Your choices

You may request access, correction, export, or deletion of your personal information, subject to applicable law. You can also sign out of Harso, disconnect a connected service or turn off the background watcher in Harso, or revoke Harso's access from your sign-in provider or Google Account settings.

Changes to this policy

We post any change on this page with a new effective date. If we change how Harso uses Google user data, we will ask for your consent before we use your data in the new way.

Contact

For privacy questions or requests, email abhi@harso.ai. Harso is operated by Straits Lab Ventures Pte Ltd, Singapore.