01. Purpose and scope
Harrow & Vane AES Limited Liability Company (“Harrow & Vane,” “we,” “us”) respects the privacy of visitors, customers, account holders, and individuals using our websites and software. This policy explains how personal information is collected, used, shared, protected, and retained. Research data is additionally addressed in our Research Data Policy and any study-specific consent documents.
02. Information we collect
Depending on your interactions with us, we may process contact and account information; login and authentication events; billing addresses, order histories and software entitlements; device, browser, IP address, diagnostics and security logs; support communications; and files or records submitted to our applications. Certain applications may involve sensitive educational or health-related information subject to additional agreements.
03. How information is used
We use information to provide products, authenticate accounts, administer licenses and subscriptions, process orders, respond to support requests, secure our systems, maintain service reliability, meet legal requirements, and improve products. We do not treat ordinary use of a commercial service as consent to unrelated research or AI model training.
04. Lawful bases
Where applicable, processing relies on contract performance, compliance with legal obligations, legitimate interests, consent, or another recognized legal basis. Consent can be withdrawn where applicable, without retroactively invalidating earlier lawful processing.
05. Sharing and service providers
Information may be shared with authorized hosting, identity, commerce, security, support and other service providers, as well as when legally required or as part of a lawful business transaction. We do not authorize the sale of customer-submitted medical, educational or research records for unrelated commercial exploitation.
06. Cookies
Our services may use cookies for authentication, security and functionality. Optional analytics or advertising technologies, if deployed, are subject to applicable notice and choice requirements. Browser settings and available consent controls may provide additional options.
07. Security and retention
We use safeguards appropriate to the data and risks, potentially including encryption, access restrictions, logging and incident-response procedures. No system is completely secure. Information is kept only as long as reasonably necessary for its stated purposes, legal obligations, disputes and security, then deleted, de-identified or securely disposed of where appropriate.
08. Your privacy rights
Depending on your jurisdiction, you may request access, correction, deletion, copies of certain data, withdrawal of consent, or opt-out of certain uses. Requests may require identity verification and may be limited by lawful exceptions. Where required, appeal and non-discrimination rights apply.
09. Children and sensitive information
General commercial services are not directed to children under 13 unless expressly designed for authorized use. School-provided student records and health or research information may be governed by additional contracts and applicable laws, including FERPA, COPPA, state privacy laws and HIPAA where relevant. HIPAA does not automatically apply to every research activity.
10. International processing and updates
Data may be processed where we or authorized providers operate, subject to applicable transfer safeguards. We may revise this policy and provide notice of material changes as required by law.
11. Contact
For privacy questions and rights requests, use the designated privacy contact published on our official website. A dedicated privacy contact should be confirmed before publication.