Home How It Works About Contact Login
Legal Documentation

Privacy Policy

How Harmonia collects, uses, and protects your personal data on our B2B AI workforce and data annotation platform.

Last updated: July 30, 2026

Table of Contents

  1. 1. Introduction
  2. 2. Information We Collect
  3. 3. How We Collect Information
  4. 4. Why We Collect Your Information
  5. 5. Legal Basis for Processing (GDPR)
  6. 6. Cookies & Tracking Technologies
  7. 7. Google Analytics
  8. 8. Google AdSense
  9. 9. Third-Party Service Providers
  10. 10. Sharing Your Information
  11. 11. International Data Transfers
  12. 12. Data Security
  13. 13. Data Retention
  14. 14. Your Privacy Rights
  15. 15. California Privacy Rights (CCPA / CPRA)
  16. 16. European Privacy Rights (GDPR)
  17. 17. Children's Privacy
  18. 18. Marketing Communications
  19. 19. Account Security Responsibilities
  20. 20. Automated Decision Making
  21. 21. Business Transfers
  22. 22. External Links
  23. 23. Changes to This Privacy Policy
  24. 24. Contact Information

1. Introduction

Harmonia ("Harmonia," "we," "us," or "our") operates a Business-to-Business (B2B) AI workforce platform that connects businesses, enterprises, and researchers (Clients) with independent contributors (Workers) to facilitate the completion of digital tasks such as data annotation, image labeling, surveys, and AI model evaluation.

This Privacy Policy explains the purpose of our data collection, who "Harmonia", "we", "our", and "you" refer to, and the scope of this policy. It details what information we collect when you use our website and services (the "Platform"), how we use it, who we share it with, and the choices you have regarding your data.

By creating an account or otherwise using the Platform, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Platform. This policy applies to all users, including Clients, Workers, and administrators.

2. Information We Collect

We collect various types of information to operate, secure, and improve our Platform.

Personal Information

When you sign up, we collect your full name, email address, username, and the role you register under (Client, Worker, or Admin). We also collect your country to ensure compliance and match you with geographically relevant tasks.

Payment Information

For Clients, we collect details about the payment method you select and any proof of payment you upload. For Workers, we collect the payout details you provide (such as a PayPal email address or a USDT ERC-20 crypto wallet address) so we can pay you for completed work. We do not collect or store full credit card numbers or banking credentials directly.

Technical Information

We automatically collect limited technical information when you use the Platform, including:

  • IP address (used for fraud prevention and geographic matching).
  • Browser type and version.
  • Device information (e.g., desktop or mobile).
  • Operating system.
  • Time zone and language settings.
  • Cookies and Local Storage data (for authentication).

Usage Information

We collect information about how you interact with the Platform, including:

  • Pages visited and time spent on the Platform.
  • Clicks and navigation paths.
  • Login history and session duration.
  • Dashboard activity and project participation.
  • Micro-Task completion rates and Challenge Code submissions.

3. How We Collect Information

We collect information through various methods:

  • Registration forms: When you create an account.
  • Login process: Verifying your identity via One-Time Passwords (OTPs).
  • Contact forms: When you reach out to our support team.
  • Cookies & Local Storage: Automatically when you browse the site.
  • Analytics: Via Google Analytics to understand traffic patterns.
  • Communications: When you communicate with us or other users via the platform.
  • Third-party integrations: Such as Discord API for role synchronization.

4. Why We Collect Your Information

We use the information we collect for the following purposes:

  • Account creation & Authentication: To register your account and verify your identity via OTP codes.
  • Project Management: To assign Micro-Tasks, track annotation progress, and manage Challenge Codes.
  • Client Communication: To allow businesses to communicate task requirements and provide feedback.
  • Worker Management: To track quality scores, manage payouts, and enforce anti-fraud rules.
  • Security & Fraud Prevention: To detect VPNs, bots, and unauthorized account access.
  • Analytics: To understand how the Platform is used so we can improve it.
  • Advertising: To display relevant ads via Google AdSense where applicable.
  • Customer Support: To respond to your inquiries and resolve disputes.
  • Legal Compliance: To meet our obligations under international law.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on the following legal bases:

  • Consent: When you explicitly agree to certain processing, such as non-essential cookies.
  • Contract: To fulfill our obligations under the Terms of Service and process your tasks/payouts.
  • Legitimate Interests: To ensure platform security, prevent fraud, and improve our services.
  • Legal Obligations: To comply with tax, anti-fraud, and regulatory requirements.
  • Protection of Vital Interests: To protect the rights and safety of our users and the public.

6. Cookies & Tracking Technologies

We use essential cookies and Local Storage to keep you logged in securely, remember your preferences, and analyze platform traffic. Harmonia uses modern Local Storage combined with encrypted session tokens rather than traditional tracking cookies for authentication.

We also use analytics cookies (Google Analytics) and advertising cookies (Google AdSense). For full detail on how these technologies work and how to manage or opt-out of them, please review our comprehensive Cookie Policy.

7. Google Analytics

Harmonia uses Google Analytics to understand how visitors use our website. Google Analytics collects information such as pages visited, time spent on the site, and the geographical region of the user.

We have configured Google Analytics to operate in a privacy-compliant manner where possible, including IP anonymization. You can opt out of Google Analytics tracking specifically by downloading the Google Analytics Opt-out Browser Add-on.

8. Google AdSense

Harmonia participates in the Google AdSense program to display advertising on designated sections of the Platform. Google AdSense may set or read cookies (including on behalf of its advertising partners) to personalize the ads you see and measure their performance.

This does not involve us selling your personal data to advertisers. You can view, adjust, or opt out of personalized advertising at any time through Google's Ad Settings.

9. Third-Party Service Providers

To operate efficiently, Harmonia integrates with trusted third-party providers. Each provider has its own Privacy Policy:

  • Cloudflare: For DNS management, DDoS mitigation, and bot protection.
  • Google Analytics: For website traffic analysis and performance reporting.
  • Google AdSense: For displaying advertisements and measuring ad effectiveness.
  • Google Tag Manager: For managing tracking pixels and scripts.
  • Resend & Brevo: For sending OTP codes, transactional notifications, and announcements.
  • Discord API: For community integration and role synchronization.
  • PayPal: For processing worker payouts.
  • Crypto Payment Providers: For processing USDT (ERC-20) blockchain payouts.
  • Offerwall Providers (CPX Research, Offerwall.me): For providing supplementary bonus tasks.

10. Sharing Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

  • Service Providers: With trusted third parties who host our infrastructure or process payments.
  • Payment Processors: To facilitate your PayPal or Crypto payouts.
  • Business Partners (Clients): When necessary to fulfill a task or order (e.g., a Client receiving annotated data).
  • Legal Authorities: If required by law, subpoena, or if we believe it is necessary to protect the rights, property, or safety of Harmonia, our users, or others.

11. International Data Transfers

Harmonia serves users worldwide. Because we use global cloud infrastructure (like Cloudflare), your personal information may be transferred to and processed in countries other than your country of residence. We ensure these cross-border transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs), to maintain the security of your data.

12. Data Security

We take reasonable technical and organizational measures to protect your information, including:

  • Encryption: Password hashing with per-user salts (PBKDF2-SHA256) and encrypted connections (HTTPS).
  • Secure Authentication: Encrypted session tokens stored in Local Storage instead of vulnerable cookies.
  • Cloudflare Protection: Web Application Firewall (WAF) and DDoS mitigation.
  • Access Controls: Administrative functions restricted to authorized staff only.
  • Monitoring: Continuous monitoring for fraudulent activity, VPN usage, and bot scripts.

No method of transmission or storage is 100% secure, but we strive to protect your data using industry best practices.

13. Data Retention

We retain your data only for as long as necessary:

  • Account Information: Retained for as long as your account is active.
  • Task & Project Data: Retained to resolve disputes and train our internal models.
  • Payment Records: Retained for 7 years to comply with tax and financial regulations.
  • Security Logs: Retained for 90 days to investigate potential threats.
  • Deleted Accounts: Personal data is removed from active databases within 30 days of deletion. Residual data in backups may be retained for up to 90 days.

14. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information:

  • Access: The right to request a copy of the personal data we hold about you.
  • Correction: The right to request that we correct inaccurate or incomplete data.
  • Deletion: The right to request the deletion of your personal data.
  • Data Portability: The right to receive your data in a structured, machine-readable format.
  • Restriction: The right to request that we limit the way we use your data.
  • Objection: The right to object to our processing of your personal data.
  • Withdraw Consent: The right to withdraw consent at any time where we relied on consent.

To exercise these rights, please contact us using the details in Section 24.

15. California Privacy Rights (CCPA / CPRA)

If you are a resident of California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights, including the right to know what personal information is collected, the right to delete it, the right to correct it, and the right to opt-out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. Harmonia does not sell personal data. To exercise your rights, contact us.

16. European Privacy Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have rights regarding your personal data. Harmonia acts as the Data Controller for your information. We process data based on the principles of lawfulness, fairness, and transparency. If you believe we have violated your GDPR rights, you have the right to lodge a complaint with your local Data Protection Authority.

17. Children's Privacy

The Platform is not directed to, and is not intended for use by, anyone under the age of 16 (or 18 in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can immediately delete it.

18. Marketing Communications

We may send you email updates, platform announcements, or newsletters if you have opted in to receive them. You can opt-out of receiving these communications at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by updating your notification preferences in your dashboard.

19. Account Security Responsibilities

While we secure the platform, you are responsible for protecting your account. Users should:

  • Protect passwords and never share them with anyone.
  • Protect OTP codes sent to their email; never share them with support staff.
  • Report unauthorized access to their account immediately.
  • Keep account information (like payout wallet addresses) accurate and verified.

20. Automated Decision Making

Harmonia uses automated systems to assist in moderation and fraud detection. For example, our system automatically detects VPN usage, bot activity, and low-quality Micro-Task submissions. Important decisions, such as permanent account suspensions or withholding of payouts, are subject to manual review by our administrative team to ensure fairness.

21. Business Transfers

If Harmonia is acquired, merged, or reorganized, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Platform before your information is transferred and becomes subject to a different privacy policy.

22. External Links

Our Platform may contain links to third-party websites or services (for example, our Discord community, Offerwall providers, or payment provider pages). We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies separately.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We'll update the "Last updated" date at the top of this page when we do. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

24. Contact Information

If you have questions about this Privacy Policy or how we handle your information, please reach out to us:

Related Legal Documents: This Privacy Policy should be read together with Harmonia's Terms of Service, Cookie Policy, Disclaimer, and Payments & Billing.