Privacy Notice

Controller

Infini Harmony LLC is the data controller for the Behavioral Resonance Matrix (BRM) assessment service. Contact: harmony@infiniharmony.com.

Data we collect

• Assessment answers and results (stored privately, addressed by a hashed recovery capability — no account or password).
• Email address and first name, only if you explicitly consent to the post-assessment email sequence.
• Support messages you send us.
• Basic technical data such as device/browser identifiers and IP address for security and fraud prevention.

Payment data is collected and processed by Paddle as Merchant of Record; we do not receive your card details.

Purposes and legal basis

• Providing the assessment and results (contract performance).
• Security and fraud prevention (legitimate interests).
• Marketing emails, only with your explicit consent, which you can withdraw at any time via the unsubscribe link.
• Team aggregate reports are anonymized; individual results are visible only to the holder of each private link.

Who we share data with

• Service providers and subprocessors: hosting and database (Lovable Cloud), email delivery (Klaviyo).
• When you request AI insights, your assessment answers and calculated scores are sent through Lovable AI to its model provider for personalized coaching. Your private access token and payment details are not sent to the model.
• Paddle, as Merchant of Record, for sale of the product, payments, tax compliance, and invoicing.
• Professional advisers (legal, accounting) and authorities where required by law.

Retention

We keep assessment data while your license is active and delete or anonymize data when it is no longer needed for the purposes above or to meet legal obligations.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise any right, email harmony@infiniharmony.com. We respond within one month. If you are in the UK/EEA, you may also complain to your supervisory authority; international transfers are protected by appropriate safeguards.

Security and cookies

We use appropriate technical and organisational measures, including encryption in transit, hashed access capabilities, and access controls. This site uses only essential browser storage (to keep your assessment progress on your device); we do not use analytics or marketing cookies.