Harman Consulting

Privacy policy

Effective: October 26, 2026

This policy covers clintonharman.com, operated by Clinton Harman as Harman Consulting, the Voice Development skill and standalone prompt, and the Harman Consulting Social Publisher application. For privacy questions or requests, email me@clintonharman.com.

Information you send through the website

The inquiry form collects your name, email address, optional organization and message. It saves your inquiry in the website's database so I can review and respond, and sends an email notification through Resend. Submission references, timestamps and delivery status help prevent duplicates and investigate delivery problems. An email service accepting a notification does not establish that it reached the inbox.

Article comments collect a display name, email address and message. Comments are reviewed before publication. If approved, your display name, comment, submission date and any published reply are visible to visitors; your email address is not shown with the comment. Please put only information you are comfortable sharing publicly in a comment. The private moderation record can also contain review status, internal flags, draft replies and moderation history.

The forms use submission checks and rate limits to reduce spam and duplicate requests. The application stores hashed identifiers for these checks. Comment rate limits use a keyed hash derived from the connection's IP address and email address. These hashes are not a promise of anonymity.

The forms also use Cloudflare Turnstile to distinguish people from automated traffic. Cloudflare processes browser and network security signals for this check. See the Turnstile privacy addendum.

Please leave confidential information, passwords and sensitive personal information out of forms and support examples.

Visits, analytics and hosting

The public website uses Google Analytics to understand page use and find problems such as broken links. Analytics can process page and referral information, session activity, browser and device details, approximate location and cookie identifiers. It loads on the public site; authoring previews and administration pages are excluded. Google Signals and Google's user-provided data collection are turned off. See Google's analytics information and privacy policy.

The site runs through OpenAI Sites using Cloudflare infrastructure, including database storage. Hosting and network services process technical requests and operational logs to deliver and protect the site, which can include IP addresses, requested URLs, timestamps and browser information. See Cloudflare's privacy policy.

You can manage cookies and tracking through your browser and use Google's analytics opt-out tools. Blocking necessary website requests may affect forms or other features. Leaving a public comment is optional; you can use the support email for a private question.

Support correspondence and service providers

If you email me, I receive your email address, message, attachments and the information carried with the email. I use that correspondence to understand and respond to your request. Samples you separately send for support are handled as correspondence; sending them is not required to use Voice Development.

Service providers process information as needed to host the website and database, deliver and store email, protect the site, and provide analytics. These currently include OpenAI Sites and Cloudflare for the website, Resend for inquiry notifications, Hostinger for the support mailbox, and Google for analytics. Their own policies and service settings also affect their processing and retention. Following a link to another website brings you under that site's practices.

Voice Development and your AI application

Voice Development consists of instructions and resources, including a synthetic example. The current package has no publisher-operated server, account integration or telemetry service. Installing or using these instructions does not by itself send me your private chats, writing samples or Voice Profile.

The AI application you choose processes what you provide according to its own terms, privacy policy and account settings. If that application can read or save files, check what you authorize and where your review artifacts are stored. The skill does not provide a private storage service or automatically retain your profile for later chats.

Harman Consulting Social Publisher is an internal tool for preparing, publishing and checking approved content on Harman Consulting’s LinkedIn company Page. As of this policy’s effective date, its LinkedIn API connection is being set up and is not active. No LinkedIn API data is currently collected or stored by this app. The following practices apply to a connection only if you later authorize it.

An authorized connection may use the account and Page identifiers, Page administration permissions, approved post text, article links and media, and publication identifiers and status needed to carry out those tasks. It uses only the permissions you grant through LinkedIn’s authorization screen. Access credentials must be kept in protected application storage and must not appear in public files, article content or ordinary logs. This app’s scope does not include private messages, contact-list collection, recruiting or sales prospecting.

LinkedIn receives content you authorize for publication and processes it under its own privacy policy. Retrieved LinkedIn member data is not sold, exported to third parties, combined with outside data to build profiles, used for advertising audiences, or used to train AI models. The app does not send retrieved LinkedIn member profile, comment or reaction data to general-purpose AI services. Access to LinkedIn-derived data is limited to the authorized people managing the relevant Page.

LinkedIn-derived data is subject to LinkedIn’s data storage requirements, separately from website inquiries, comments and email. The app must enforce the applicable field-specific limits before API access is enabled: Other members’ profile data may only be cached for up to 24 hours, and member social activity for up to 48 hours. Organization social activity has a six-week limit, extended to six months for an authenticated organization; authenticated-organization profile data has an eight-week limit. Page administration and reporting data may be retained for up to one year, excluding individual member data. Other organization profile data cannot be stored or cached except for organization names and logo URLs for up to 30 days. Some identifiers have no duration restriction. Where limits overlap, the shortest applicable limit governs; LinkedIn’s terms and the app’s actual permissions may impose stricter limits. Data must be deleted sooner when required by a withdrawal, deletion request or LinkedIn’s terms. The website’s longer retention of its own form submissions does not extend these limits.

You can withdraw an app connection through LinkedIn’s permitted services settings. You can also email me@clintonharman.com to request access, correction, disconnection or deletion of information held by this app. Include the app name and enough context to identify the account or Page; identity verification may be needed. Revoking access stops future authorized API access, but does not itself remove posts already published on LinkedIn. Manage those posts on LinkedIn or include them in your request. LinkedIn may retain its own records under its policies.

Retention and requests

The website does not currently apply a scheduled automatic deletion period to saved inquiries or comment records. They can remain in the database until an operator deletes them. Removing a comment from public view changes its moderation status; it does not erase the private comment or its moderation history. Email correspondence can also remain in the mailbox until it is deleted. Service providers may retain their own logs and backups under their policies and settings.

Google Analytics is configured to retain event data for two months and user data for 14 months, with the user retention period reset by new user activity. This means new activity can extend retention of a user identifier. These settings do not set an expiry for most standard aggregate reports. See Google's retention explanation.

To ask about access to information you sent, a correction, or removal of an inquiry or comment, email me@clintonharman.com. Include enough context to identify your submission and use the original email address where possible. I may need to verify that the request concerns your information. Removal from this website cannot remove copies already held by other visitors, search engines or independent services.

Changes

The current policy and its effective date will be available on this page. New data connections, hosted skill services or paid services require a review of these practices before they are covered here.