Privacy Policy

Harness is a product of Screendesk, our parent company. In this policy, “Screendesk”, “we”, “us”, and “our” refer to the company operating Harness. This policy explains how personal information is handled when you use Harness, including its workspaces, agents, connected tools, and automation features.

Read this policy alongside Screendesk’s Privacy Policy and our Terms of Service. It explains the processing specific to Harness. A data processing agreement with your organization also applies where relevant.

1. Who is responsible for your information

Screendesk is responsible for information we use to manage accounts, provide customer service, operate and secure Harness, and administer our business. When an organization uses Harness to process information in its workspace, that organization generally determines why the information is processed and we process it on its instructions. Your organization may have its own privacy policy.

For privacy questions or requests, email support@screendesk.io. If your request concerns information controlled by your employer or another workspace owner, contact that organization as well.

2. Information Harness collects

• Account and workspace information: your name, email address, profile information, authentication information, workspace memberships, roles, and preferences.
• Content you provide: messages, instructions, files, knowledge, saved context, feedback, and other information submitted to Harness.
• Information from connected services: content and metadata retrieved from tools you authorize, such as documents, email, calendars, records, and messages. The information depends on the connection, its permissions, and the work requested.
• Automation records: task inputs, agent responses, tool results, generated artifacts, approval decisions, progress, and execution history. These records may contain personal information from your instructions or connected sources.
• Connection credentials: access tokens, API credentials, and session information needed to operate connections you configure.
• Billing and support information: subscription and transaction details, billing contacts, and information you provide when asking for help. Payment providers process payment details under their own policies.
• Technical information: IP addresses, browser and device information, session activity, timestamps, and diagnostic and security logs.

3. How we use information

We use information to authenticate you, provide your workspace, retrieve authorized content, run requested tasks, generate results, record approvals and activity, process billing, answer support requests, and send account or security notices. We also use information to maintain reliability, investigate errors, prevent misuse, and meet legal obligations.

Where data protection law requires a legal basis, we rely on performing our contract with you, legitimate interests in operating and securing the service, compliance with legal obligations, or your consent, depending on the purpose. You may withdraw consent where processing relies on it without affecting earlier lawful processing.

4. AI models, connected tools, and service providers

Harness sends the information needed for a requested task to the model providers, connected services, and execution environments involved in that task. This may include your instructions, relevant conversation context, source content, and tool results. Model responses and actions can then become part of the workspace’s records.

Which providers receive information depends on the models, connections, permissions, and settings used for the work. A third-party service you connect may process information under its own terms, including its retention and model-training settings. Review those terms and settings before submitting sensitive information. Disconnecting a service prevents future use through that connection; it does not automatically erase task history or information already received by that service.

We also use providers for hosting, storage, payments, communications, and service operations. Information is shared as needed for those functions and subject to applicable contractual protections. For information about the providers applicable to your Harness workspace, contact support@screendesk.io. Screendesk’s security and privacy resources provide additional company-level information.

5. Workspace visibility and sharing

Other users may see your profile and content you share with them. Workspace roles, resource permissions, and sharing settings determine access within Harness. Some resources are shared with a workspace, while conversations and other resources may have narrower visibility. Joining a workspace does not make every private conversation visible to all members.

Workspace administrators manage membership and the settings available to their roles. An execution environment can be shared or private; sharing it does not by itself give another user access to your private conversations or source permissions. Review sharing settings before adding content, publishing an artifact, or approving an external action.

6. Other disclosures

We may disclose information with your instructions or consent; to comply with valid legal process; to investigate fraud, abuse, or security threats; to protect legal rights; or in connection with a business transaction, subject to appropriate safeguards. We do not sell personal information.

7. Cookies and local storage

Harness uses session cookies and related browser storage to keep you signed in, protect requests, and remember preferences. Disabling essential cookies can prevent authentication and other features from working. Third-party websites opened through a connection may use their own cookies under their own policies.

8. Retention, deletion, and security

We retain information as needed to provide Harness, maintain requested history and saved context, comply with legal obligations, resolve disputes, and protect the service. Account closure and deletion requests are handled under Screendesk’s privacy commitments and any agreement with your organization. Information subject to a legal retention requirement may need to be retained after closure.

Deleting content from Harness does not delete its original in a connected service, and deleting an original does not necessarily remove information already included in a conversation, artifact, or execution record. For assistance with access, export, or deletion, contact your workspace administrator or support@screendesk.io.

We use safeguards intended to protect personal information, including access controls and measures to protect credentials and service communications. No online service can guarantee absolute security. Keep your credentials private and use two-factor authentication where available.

9. International processing

Screendesk and the providers involved in your workspace may process information in countries other than your own. Where required, international transfers must use an applicable legal safeguard, such as an adequacy decision or standard contractual clauses. The Screendesk Data Processing Addendum addresses relevant customer-data processing and transfer terms.

10. Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to processing; withdraw consent; and complain to a data protection authority. Where applicable, California residents may also request information about collection and disclosure and exercise their privacy rights without unlawful discrimination.

Send requests to support@screendesk.io. We may need to verify your identity and authority. When we process data on an organization’s behalf, we may refer the request to that organization and assist it as required.

11. Children and policy updates

Harness is not intended for children under 13 or anyone below the applicable age of digital consent. If you believe a child has provided personal information without the required authorization, contact us so we can investigate.

We may update this policy as Harness changes. We will update the date on this page and provide notice of material changes as required by law and Screendesk’s privacy commitments.