Privacy Policy

Who we are

HRDMNY Technologies, LLC ("HRDMNY") provides Harmony, a software platform for private-money and hard-money loan originators. HRDMNY is a software company, not a lender or broker. This policy describes how we handle information in connection with the Service.

Information we collect

• Account information: name, email, organization details, and settings.
• Usage data: logins, feature use, and page views within the Service.
• Technical data: IP address, browser, device, and session information.
• Your Data: the business content customers submit, which may include personal information about their borrowers, lenders, and contacts. For that information the customer is the data controller and HRDMNY processes it on the customer's behalf and instructions.
• Payment information: billing details and transaction records. Card numbers are collected and held by Stripe; HRDMNY never stores full card numbers.

How we use information

• To provide, operate, and support the Service;
• To process transactions and manage subscriptions;
• To secure the Service and prevent abuse;
• To communicate about the Service, including support and required notices;
• To improve the Service, using aggregated or de-identified information;
• To comply with legal obligations.

Security

Data is encrypted in transit with TLS and at rest with AES-256. Organizations are isolated at the database level with row-level security, access is role-based, automated actions are written to an audit trail, and backups run automatically with point-in-time recovery. Details: hrdmny.com/security.

Sharing

We do not sell personal information. We disclose information only: at the customer's direction or with consent; to the service providers listed in Section 6.7 of the Agreement (Supabase, Vercel, OpenAI, Stripe, Mailgun, Twilio, SignWell, Inngest), bound to use it only to provide their service to us; when required by law or valid legal process; in connection with a merger, acquisition, or sale of assets, with notice; or to protect the rights, safety, or property of HRDMNY, our customers, or the public. SMS opt-in data and consent records are never sold, rented, or shared with third parties for their marketing.

Retention

When an account is deleted, we delete or anonymize its data within 90 days, except as required for legal compliance. Encrypted backups may persist for up to 90 additional days before cycling out.

Your rights

Depending on your jurisdiction (including under the CCPA and GDPR), you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to opt out of marketing communications. Contact privacy@hrdmny.com; we respond within the timelines applicable law requires, and we do not discriminate against anyone for exercising privacy rights. If your personal information was submitted to the Service by one of our customers (for example, by your loan originator), we will refer your request to that customer and assist them in honoring it.

Contact

• Privacy: privacy@hrdmny.com
• Phone: (323) 304-4978
• HRDMNY Technologies, LLC, Los Angeles, California