Privacy Policy

Effective date: August 7, 2026
Version: v1.0.0

Harrington L.L.C. (“Harrington,” “we,” “us,” or “our”) provides a private songwriter’s workbench. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through harrington.coach, app.harrington.coach, the Harrington application, and related support and communications (collectively, the “Service”).

This policy applies to the paid product and replaces the prior interim pre-launch website privacy notice. The Service is offered only to people located in the United States who are age 18 or older.

1. Information we collect

We collect information you provide, information created through your use of the Service, information collected automatically, and limited information from service providers.

Lyrics, notes, profiles, or messages may reveal sensitive subjects you choose to write about, such as religious beliefs, health experiences, relationships, trauma, or information about other people. Please submit only information you have the right to use and that is needed for your songwriting work.

We do not intentionally collect government identification numbers, precise geolocation, health records, or payment-card numbers through ordinary product fields. Do not place that information in lyrics, notes, prompts, or support messages.

2. How we use information

We use personal information to:

• create, authenticate, secure, and administer accounts;
• save, synchronize, recover, display, organize, analyze, and export your work;
• provide AI, coaching, rhyme, meter, chord, structure, and related tools you invoke;
• preserve product history and generate requested reports;
• start trials, process subscriptions and top-ups, apply usage limits, collect payment, and provide billing support;
• send account, security, billing, legal, and service communications;
• diagnose errors, measure content-free product use, prevent abuse, and improve reliability and usability;
• respond to support, privacy, legal, and copyright requests;
• enforce our Terms, protect users and the Service, and investigate fraud or security incidents; and
• comply with legal, tax, accounting, and regulatory obligations.

We do not use your songs to train Harrington-owned generative AI models. We do not use private creative content for advertising.

3. AI processing

When you deliberately use an AI feature, Harrington sends the information reasonably needed to answer your request to Anthropic through its commercial API. Depending on the feature, that may include your instruction, profile preferences, relevant lyrics, chords, notes, song context, or coaching history. The provider returns a response to Harrington; it does not independently edit your song.

Anthropic currently states that commercial API inputs and outputs are not used to train its models by default. It currently states that standard API inputs and outputs are generally deleted from its back-end within 30 days, subject to exceptions for services with different retention, customer agreements, legal obligations, usage-policy enforcement, feedback, or safety review. Provider practices can change, and we will update this policy if a material change affects Harrington users.

Do not submit personal information about another person to an AI feature unless you have a lawful reason and permission to do so.

4. How we disclose information

We disclose personal information only as described below. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Service providers

We use service providers under contractual or account terms to operate the Service:

• Vercel for hosting, server execution, delivery, and related request metadata;
• Supabase for authentication, database, storage, and account data;
• Anthropic for user-invoked AI inference;
• Stripe for checkout, payment methods, subscriptions, tax configuration, top-ups, invoices, and customer billing tools;
• PostHog, when enabled, for limited product analytics configured without automatic text capture or session recording;
• Sentry, when enabled, for error and performance monitoring with application-level content scrubbing;
• a transactional email provider, when enabled, for account and service messages; and
• our business email provider for support, legal, and ordinary business communications.

These providers may process information in the United States and other locations permitted by their terms and applicable law. Their own legal obligations and privacy notices may also apply to information they process as independent controllers, such as Stripe’s direct payment interactions.

Other disclosures

We may also disclose information:

• at your direction or with your consent;
• to professional advisers under confidentiality obligations;
• in connection with a merger, financing, reorganization, or sale, subject to appropriate protections and notice where required;
• to comply with law, legal process, or lawful government requests; or
• when reasonably necessary to investigate fraud or abuse, protect safety and rights, enforce agreements, or secure the Service.

We do not publicly publish your private songs or make them discoverable to other users through the Service.

5. Analytics, diagnostics, cookies, and local storage

The product may use strictly necessary cookies or similar storage for authentication, security, preferences, and continuity. Browser-local caches and recoverable drafts help performance and reduce data-loss risk.

If enabled in production, Harrington uses PostHog for manually selected, content-free events such as page views or feature actions. Harrington’s intended configuration disables autocapture and session recording. If enabled, Sentry receives error and performance metadata; Harrington applies scrubbing rules intended to remove known creative-content fields. No scrubber can guarantee that a user will never put sensitive information into an unexpected field, URL, or error condition.

We do not currently use third-party advertising cookies or targeted-advertising trackers. If that changes, we will update this policy and provide any required notice or choice before enabling them.

6. Retention

We retain information only as long as reasonably necessary for the purposes described in this policy, considering the type and sensitivity of the information, product needs, security, legal obligations, disputes, and the feasibility of deletion from active systems and backups.

Generally:

• account, profile, creative, coaching, and product-history data remain while your account is active and are deleted from active Harrington systems when you delete the account, subject to the exceptions below;
• subscription, transaction, tax, consent, policy-version, cancellation, and accounting records may be retained for the periods needed for legal, tax, chargeback, audit, and dispute purposes;
• security, fraud, request, and diagnostic records are retained for limited periods appropriate to investigation, reliability, and legal needs;
• support and legal communications are retained as needed to resolve the matter and preserve appropriate business records;
• provider-held information follows the provider’s retention rules and Harrington’s selected configuration; and
• deleted information may remain temporarily in restricted backups or logs until ordinary deletion or overwrite cycles complete.

We may retain information longer when required by law, reasonably necessary for a legal claim or security matter, or requested by you. We may retain de-identified or aggregated information that cannot reasonably be linked to you.

7. Your choices and privacy requests

You can review and update certain account information in the Service, export supported song formats, manage billing, cancel a subscription, and delete your account. Product exports are not necessarily a complete privacy-access response.

You may email hello@harrington.coach to request access, correction, deletion, or a portable copy of personal information, or to ask about our practices. Where applicable law grants additional rights—such as rights to know, correct, delete, obtain a copy, opt out of certain processing, limit certain uses of sensitive information, or appeal a denial—we will honor them as required.

We may need to verify your identity using information associated with your account. An authorized agent may submit a request where allowed by law, but we may require proof of authority and identity. We will not discriminate against you for exercising a privacy right.

Because we do not sell personal information or share it for cross-context behavioral advertising, Harrington does not currently offer a “Do Not Sell or Share” link. We also do not use sensitive personal information to infer characteristics for advertising. If our practices change, we will implement required notices and controls.

If we deny a privacy request and your state gives you a right to appeal, reply to our decision with the subject “Privacy Appeal.” You may also contact your state attorney general or privacy regulator.

8. Account deletion and billing records

Deleting your account is intended to remove your account and user-owned product data from active Harrington systems and to cancel an active subscription. Deletion cannot be undone. Export your work first.

Deletion does not require us or our providers to erase information that must or may lawfully be retained for payment processing, taxes, fraud prevention, security, legal compliance, disputes, enforcing agreements, provider logs, or restricted backup cycles. Stripe may retain transaction and payment records under its own legal obligations and policies.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed for the nature of the Service, including authentication, access controls, encryption in transit, database ownership controls, server-side handling for privileged operations, and limits on content in analytics and logs. No system is completely secure. Use a unique password, protect your account, and maintain independent exports of important work.

If we determine that a security incident requires notice, we will notify affected individuals and regulators as required by law.

10. Children

The Service is not directed to children and is not available to anyone under 18. We do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact hello@harrington.coach so we can investigate and delete it as appropriate.

11. U.S.-only service

Harrington currently offers the Service only to people located in the United States. Do not create an account or submit personal information if you are outside the United States. Information is processed in the United States and in other locations used by our service providers as permitted by applicable law.

12. Changes to this policy

We may update this Privacy Policy. We will post the revised version with a new effective date. If a change materially affects how we use information already collected, we will provide reasonable advance notice and obtain consent when required by law.

13. Contact us

For privacy questions or requests, contact:

Harrington L.L.C.
Email: hello@harrington.coach
Subject line for privacy requests: Privacy Request
Arizona, United States