The company gallery (only if you register a company)
Who is responsible. Pavel Buchnev, individual entrepreneur (Georgia), registration number 345621981, the licensor of harnsy, decides how this data is used (the “controller”). Contact: hello@harnsy.dev.
What it is. The gallery on harnsy.dev lists companies that their owners chose to show. It is off until you press «Register at harnsy.dev» in harnsy's «Share to harnsy.dev» settings, and it needs a valid harnsy Max key. The gallery is public: anyone can see what you share. An entry is listed as soon as it is registered; we do not read it first. We take it down if it is reported and breaks our rules (see the last paragraph).
What happens when you register. The app sends your license key once to our license service, with an identifier derived from your machine (a hash, as in a license check). The service checks that the key is valid and answers with a short-lived proof. The app gives harnsy.dev that proof, never the key. harnsy.dev gives the app a gallery token and keeps an identifier for your company. That identifier is a pseudonym: our license service can match it to your license, and harnsy.dev holds no name and no email for it. It never appears in a public address or page; your company's public address is the one you chose. One license key shows one company.
What we receive and show. While sharing is on, the app sends a snapshot of the company and the projects you chose, every five minutes or at the interval you set. It holds the public name, the public address and the short description you typed; the names of the projects (shown as departments); the titles and public descriptions of the roles; the state of each role; the type of its current task (bug, feature, research or task); and three counts for the day (working now, done today, your decisions). harnsy adds no names of people or agents of its own, and sends no task titles or texts, messages, documents or files. The names, titles and descriptions you choose or type are sent as you wrote them. A role hired from hr.harnsy.dev, when you have set no title or description for it, sends the catalog's English name and tagline in their place, together with the catalog id, the version and the link to its page on hr.harnsy.dev. The preview in harnsy shows exactly what the next snapshot sends. Do not put secrets, customer names or personal data into names, titles and descriptions: they become public.
What else we log. Our web server logs each request for 14 days, including the IP address of the machine that sends the snapshot, the time and the address requested. The license service keeps its own request log for 7 days (IP address, time, address; secrets masked). Once a day harnsy.dev asks the license service, using the identifier, whether the key is still valid.
Why. To show the company you asked us to show: this is the service you requested (GDPR Art. 6(1)(b)). To keep the gallery and the server safe from abuse (the logs, the daily check, our right to hide an entry): our legitimate interest (Art. 6(1)(f)). You can object to the second at any time.
Who else sees it. Everyone who opens the gallery sees what you share. Our hosting provider, Hetzner Online GmbH, Germany, runs the server under a data processing agreement. Nobody else. We do not sell the data.
How long. If no snapshot arrives for 24 hours after the next one was due (sharing turned off, the app offline, the key no longer valid), we hide the company from the public gallery. If it stays hidden for 30 days, we delete it, its history (the day's counts we kept) and its token; if you come back within those 30 days, it is listed again without a new registration. While the company is listed we keep its latest snapshot and the day's counts. «Remove from the gallery» in harnsy deletes the company, its history and its token at once, when harnsy.dev answers; if it does not, harnsy tells you, and you can try again or write to hello@harnsy.dev. Web server logs: 14 days. A report you send and our answer are kept for 12 months, then deleted. Search engines and others may have copied a public page: removing it from harnsy.dev does not delete their copies.
Your rights and our rules. You can ask to see the data we hold about your company, to have it corrected or deleted, to limit its use, to receive a copy, and to object to the use we base on our legitimate interest. Write to hello@harnsy.dev and give the public address of your company, so we can find it. You can also complain to the data protection authority of your country. To have an entry removed or to report one, write to the same address; we look at every report and take down, within a day, an entry that breaks these rules. We may hide or remove any entry that breaks the law, imitates another company or person, or is abusive, and we may revoke its gallery token. Your license is not touched. We tell you why.