Legal
Harri (US) LLC – Last updated on October 7, 2026
At Harri, we respect your privacy, and we understand the importance of the information you entrust to us. This Privacy Notice tells you how Harri uses your data when you visit our website, create a Harri profile or contact us about our platform.
Harri (US) LLC
665 Broadway APT 402
New York, NY 10012
United States
You can contact Harri at DPO@harri.com.
We only collect and process information about our website visitors when they consent to our use of cookies. If you consent, then we will record your computer’s IP address, unique mobile device identifier, browser type, ISP or carrier name, and the URL of the last webpage you visited before visiting our website. This information gives us insights on how our users use our site and our services. We use this information to ensure that our service continues to appeal to our users and to monitor overall usage trends, metrics, page views, etc.
Legal basis: consent. See our Cookie Notice for more information on the retention periods.
We use essential, performance, marketing, and analytics cookies to collect your usage, device, and location information (determined through your IP address) when you interact with the Services. We will only use essential cookies without your consent.
We will only use the following cookies and pixels with your consent:
We will use the data obtained from these cookies and pixels for benchmarking purposes and for internal analytics. We maintain and use this data in deidentified form.
Legal basis: consent.
See our Cookie Notice for more information on the retention periods.
If you contact our customer support team, we will collect and use your name, work email address, work phone number, job title, the name of the company that you work for and information about how we can help you. We use this information to answer your query or schedule your demo and to provide additional information regarding the solution(s) you are interested in.
Legal basis: our legal basis for processing your data initially is consent, as you choose to send us a message. Our legal basis for contacting you further regarding our solutions is legitimate interest.
Data retention period: if you don’t go forward with a solution, we will keep your data for 120 days in our ticket system and then archive it. If your company engages with Harri, then we will retain your information for as long as you work for that company.
If the company partners with Harri, we will use your name, work email address, work phone number, job title, the name of the company that you work for to contact you and to facilitate the business relationship between Harri and the company.
Legal basis: our legal basis using your personal data is legitimate interest.
Data retention period: we will retain your information for as long as you work for that company.
If you use our AI chatbot, we will collect and use the information that you provide to us.
We will only collect your IP address, location and any device identifiers if you consent to our use of cookies. If you don’t consent to our use of cookies, then we won’t collect this data.
Legal basis: our legal basis is your consent, both for using the chatbot and agreeing to our cookies.
Data retention period: we will keep this information for 120 days in our systems and then archive it.
We send marketing emails to work email addresses of people in organisations that would be interested in using our platform.
You can also sign up to receive our marketing emails on our website.
You are free to unsubscribe at any time and we always have an ‘unsubscribe’ link in each email. We honor commercial-email opt-out requests within 10 business days. You may still receive necessary account, security or service communications.
If you consent to our tracking and marketing cookies, these emails will analyse whether a predefined action took place by a recipient, such as opening our emails and other engagement metrics such as timestamps, delivery status, click rate (of links within an email), bounce rate, and reply rate. We also use these metrics to better adapt and distribute our emails, as well as to identify top engaged email recipients. We will only use these cookies with your consent.
Legal basis: consent if you sign up for our marketing emails on our website. We use legitimate interest to conduct business to business marketing.
Retention period: we will keep your email on our marketing list until you unsubscribe. We will then keep your email on a suppression list for five years so that we don’t contact you again by mistake. Having a suppression list is a legitimate interest.
Creating a Harri profile
If you wish to apply for a job on our website, then you will need to create a Harri profile and enter your personal data. Harri is the controller for your Harri profile. You can use your Harri profile to apply for jobs for companies that use Harri.
When you create a Harri profile, we will collect your:
We use this information to create and manage your account and authenticate you.
You can choose to be added to our Talent Community. Being part of our Talent Community allows us to send you jobs that you might be interested in, and it also makes your profile searchable and contactable by employers who can invite you to apply for positions.
If you don’t want to receive emails from Harri, please click the ‘unsubscribe’ link at the bottom of each email.
Legal basis: your consent. You consent to create a Harri profile and consent to join the Talent Community.
Retention period: we will keep your Harri profile active until you request that we delete your profile. We will delete your profile within two days of receiving your request.
Using your Harri profile to apply for a job or engaging with job boards
If you apply for a job, we will share the personal data in your Harri profile with the employer. The employer then becomes the controller for your data and Harri becomes the processor. As the controller for the recruitment process, the employer will have access to your application and will be able to use it to assess your suitability as a candidate with them. For example, the employer can use Harri to schedule interviews, make recruitment notes and to ask you specific questions during the recruitment process. The processing of your information by each employer is subject to the employer’s privacy notice.
If you are hired by an employer, they may use Harri to manage their workforce. Please see your employer’s privacy notice for more information about how they do this.
Data deletion requests:
Harri can delete your Harri profile. We can’t delete your data that is held by an employer. If you ask us to delete your data, we will forward your request to the employer.
Access requests:
We can provide you with the data in your Harri profile. We can’t provide you with any data that is held by an employer such as recruitment or employment data. If you ask us for this information, we will forward your request to the employer.
Legal basis: our legal basis sharing your Harri profile with an employer is your consent when you apply for a job with that employer.
Data retention period: if you have applied for a job using your Harri profile and/or you are employed by an employer that uses the Harri platform to manage their workforce, Harri is the processor for that personal data. The employer decides the retention periods for the personal data that is held by them in the Harri platform and all data is retained in accordance with the employer’s privacy notice.
Interacting with us on social media
We maintain social media pages on Facebook, X, LinkedIn, Instagram and YouTube (our “Social Media Pages”). When you visit or interact with these pages, we and the relevant social media platform may process personal data about you. Our respective responsibilities depend on the platform, the features used and the processing involved.
Managing our Social Media Pages
When you interact with our Social Media Pages, we may receive your name, username, profile photograph and any information you provide through comments, messages, reactions, reviews or shared content. The information available to us depends on your interactions and the platform’s settings.
We use this information to manage our pages, respond to enquiries, moderate contributions, communicate with users, understand engagement with our content and analyse how our content is perceived and improve our public relations efforts.
Information you publish on publicly accessible pages may be visible to other users and may be copied or shared by them. Public availability does not remove the legal protections applying to your personal data.
Legal basis: We rely on our legitimate interests in maintaining our social media presence, responding to enquiries and improving our communications.
Page Insights and audience statistics
Social media platforms may provide us with audience statistics and engagement reports, sometimes called “Page Insights”. Depending on the platform and features used, these may include aggregated information about audience demographics, approximate locations, devices, reach, reactions, comments, shares, clicks and video views.
Although the reports we receive may be aggregated or anonymous, the platform will process personal data to produce them. This may include information about visits and interactions, online identifiers and information collected through cookies or similar technologies.
For certain Insights activities, we and the platform may act as joint controllers for the processing used to generate these reports. Receiving only aggregated or anonymous reports does not, by itself, exclude our responsibility for that underlying processing.
Where we are joint controllers, our arrangement with the platform allocates responsibilities for matters such as providing privacy information and responding to individuals’ rights requests. You may exercise your rights against either joint controller, regardless of that allocation. You may contact us at DPO@harri.com.
Legal basis: we will receive this information if you consent to our use of social media trackers.
Advertising and marketing
We may publish promotional content on our Social Media Pages. Where we use platform advertising tools to select audiences, personalise advertisements or measure campaign performance, this may involve additional personal data processing and joint controller responsibilities. Neither we nor the social media platform will use your personal data if you do not consent to our use of social media cookies or pixels.
Liking, following or commenting on our pages does not, by itself, mean that you consent to receive promotional private messages or to every use of your information for advertising.
Where we send promotional direct messages, we comply with the applicable electronic marketing rules, including obtaining consent where required.
You have the right to object at any time to our processing of your personal data for direct marketing, including profiling related to that marketing.
Legal basis: your consent.
Cookies and similar tracking technologies
Social media platforms may use cookies, pixels, local storage, advertising identifiers or other technologies when you visit our Social Media Pages or use their applications. These technologies may support platform functionality, audience measurement, personalised advertising or tracking across services.
Where applicable law requires consent for storing information on, or accessing information from, your device, that consent must be obtained before the relevant activity takes place. A subsequent aggregated report does not remove any consent requirement applying to the underlying tracking.
Legal basis: your consent.
Processing undertaken independently by social media platforms
Platforms also process personal data for purposes they determine independently, including operating their services and, where applicable, advertising. Our responsibility for jointly determined processing does not extend automatically to every processing activity undertaken by a platform.
For information about each platform’s processing, retention, disclosures, international transfers and privacy controls, please see:
Retention and your rights
[How long does Harri retains social media messages, identifiable engagement information, exported reports and advertising audience data, or the criteria used to determine those periods]
You can contact us about our processing or request removal of content from pages we manage at DPO@harri.com. Our ability to remove content is limited to the content and functions within our control; copies shared by others or retained by the platform may require a separate request to them.
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object to the processing.
We share your personal data between our offices in the USA, UK, Palestine and India in order provide the software service and for administrative reasons.
Legal basis: we share your data between our entities using the legal basis of legitimate interest as the sharing is for administrative and business purposes.
Harri does not use any automated decision making in the creation of your Harri profile.
However, an employer might use automated decision-making in their recruitment questions. Please read their Privacy Notice for more information on their recruitment process.
The security of your personal data is important to us and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure.
We will only collect the information of people who are aged 14 and older. If we learn that we have collected the information of someone who us under the age of 14, we will delete that data. Please contact our DPO if you think that we have the data of someone who is under the age of 14.
Businesses can only sell the personal information of a child that they know to be under the age of 16 if they get affirmative authorization (“opt-in”) for the sale of the child’s personal information. For children under the age of 13, that opt-in must come from the child’s parent or guardian. For children who are at least 13 years old but under the age of 16, the opt-in can come from the child.
Some browsers provide a “Do Not Track” (DNT) setting that signals a preference not to be tracked across websites. Our websites do not respond to DNT signals. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
DNT is different from Global Privacy Control (GPC). Where required by California law, we honor GPC signals as requests to opt out of the sale or sharing of personal information. You can also manage your choices through the link on our website.
Depending on your state of residence and the laws applicable to our processing of your personal information, you may have the right to:
• Access your information: Ask whether we process personal information about you and request a copy, together with information about its collection, use and disclosure.
• Correct your information: Request correction of inaccurate personal information.
• Delete your information: Request deletion of personal information, subject to applicable exceptions.
• Obtain a portable copy: Receive certain personal information in a usable format and, where applicable, transmit it to another organisation.
• Opt out of sale, sharing or targeted advertising: Where these activities occur, request that we stop activities covered by the applicable law.
• Opt out of certain profiling: Object to qualifying profiling used to make decisions that produce legal or similarly significant effects.
• Exercise rights concerning sensitive information: Where applicable, limit certain uses or disclosures of sensitive personal information or withdraw consent to its processing.
• Appeal a decision: Where applicable, appeal our refusal to act on your privacy request.
These rights vary between states and are subject to legal conditions and exceptions. Some state consumer privacy laws exclude information processed in an employment or business context. Additional information about California and Nevada rights appears in the relevant sections of this notice.
How to exercise your rights
Contact us at DPO@harri.com to submit a request. Where applicable law requires additional request methods or advertising opt-out controls, these are identified in the relevant sections of this notice. You do not need to create a new account to exercise your rights.
We may need to verify your identity before responding to certain requests. We will request only information reasonably necessary for verification. Where permitted by law, an authorised agent may submit a request on your behalf, and we may require evidence of their authority.
We will respond within the period required by applicable law. If we need a permitted extension, we will explain the reason and notify you as required. Requests are generally free of charge, although applicable law may permit a reasonable fee or refusal in specified circumstances. If we refuse a request, we will explain our decision and any available appeal procedure.
Where you have a right to appeal, email DPO@harri.com with “Privacy appeal” in the subject line. We will explain the outcome and, where required, how to contact the relevant regulator. We will not unlawfully discriminate or retaliate against you for exercising your privacy rights.
For questions, complaints or an accessible alternative format, contact DPO@harri.com or write to the address above. You may contact the relevant state Attorney General or other competent authority about applicable privacy concerns.
This section applies to California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to Harri’s processing. It can cover applicant and business-contact information as well as other consumer information. Employer-controlled records are addressed according to the employer’s obligations and Harri’s applicable service-provider duties.
If you are a California resident, you may ask us to disclose what personal information that we have about you and what we do with that information, to delete your personal information, to direct us not to sell or share your personal information, to correct inaccurate information that we have about you, and to limit our use and disclosure of your sensitive personal information:
We will not discriminate against you for exercising your rights under the CCPA and we will not force you to waive any of your rights.
If you wish to exercise your privacy rights, you may contact us at 844-427-7443. You may also submit a request via email to DPO@harri.com.
For requests submitted via telephone, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records, including, for example, information on your resume.
If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information. Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.
Additionally, regarding your rights with respect to personal information that we may process on behalf of your employer, you will need to submit your request to the employer directly. We will assist your employer in fulfilling your request to the extent we are legally or contractually obligated required to.
We acknowledge requests to know, delete or correct within 10 business days and generally respond within 45 calendar days. Where permitted and reasonably necessary, we may extend by a further 45 days, explaining why within the initial period.
For access, deletion and correction, provide enough information for us to locate records and reasonably verify your identity. Verification is proportionate to the request and the information involved. We may match account or contact information with our records and request additional information where necessary. Verification applies regardless of the submission channel. We do not apply this ordinary verification requirement to sale/sharing opt-outs or applicable limitation requests.
An authorized agent may submit requests where permitted by law. For requests to know, delete or correct, we may require proof of signed permission and, where permitted, direct verification or confirmation by you. Different rules apply to qualifying powers of attorney and authorized-agent opt-outs. We do not require unnecessary information or impose an access-request verification process on an ordinary opt-out.
For information processed solely on an employer’s behalf, contact the employer; we assist it with requests as required by law and our contract. Harri’s responsibilities for its own profile or other independent processing remain unchanged.
Sharing in the Last Twelve (12) Months
For a business purpose. In the preceding twelve (12) months, Harri has disclosed the following categories of personal information for a business purpose to the following categories of third parties:
• We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; website hosting; cloud storage; data analysis; customer service; email delivery; marketing; external auditors; payment processing; benefits administration; and similar services.
• We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Services and platform errors.
• We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Services.
Sale of Personal Information in the Last Twelve (12) Months
In the preceding twelve (12) months, Harri has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in this notice to provide targeted advertising. Such sharing may be deemed a sale or sharing under state data privacy laws. To opt out of the sale or sharing through cookies, please visit Do Not Sell or Share My Personal Information.
If you are in Nevada, you may submit a verified request directing us not to sell covered information collected about you through our websites or online services. Nevada sale means exchange for monetary consideration, subject to statutory exclusions. We do not currently sell covered information within that definition.
Our designated request address is DPO@harri.com; please use “Opt-Out Request Under Nevada Law” in the subject line.
We respond within 60 days of receipt and may extend by up to 30 days where reasonably necessary, notifying you of the extension.
We post the updated notice with a revised last-updated date. Where a material change requires additional notice or consent, we provide that notice or obtain consent before applying the change as required by law. We review California disclosures at least annually. Continued use does not replace affirmative consent where required.