Aristotle API Privacy Policy

Last Updated: June 17, 2026

This privacy policy ("Privacy Policy") explains how Concordance Inc. dba Harmonic ("Harmonic," "we," "us," or "our") collects, uses, and discloses Personal Information (as defined in the Terms (as defined below)), in connection with the "Services" (as defined in the Terms).

Capitalized terms not defined in this Privacy Policy have the meanings set forth in the Terms of Use between you and the entity you represent (collectively "Customer," "you," or "your") and Harmonic (the "Terms").

We respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. Please remember to do the same. As provided in the Terms, you are not permitted to include Personal Information in API inputs or outputs or otherwise include it in Customer Data. All Personal Information provided to us, including in violation of the Terms via API inputs or outputs or as Customer Data, will be subject to this Privacy Policy.

Scope and Role

This Privacy Policy applies to "Personal Information" we collect from you in connection with your access to or use of the Services directly or indirectly, including when you sign up for an account or request an API key.

Harmonic acts as the business/controller for that information.

Important: The Services are for uploading Lean4 files as Customer Data.

Personal Information We May Collect

We may collect the following Personal Information:

  • Account Information: When you create an account with us, we may collect Personal Information associated with your account, including your name, email account, password, and related account credentials.

  • Communication Information: If you communicate with us, including via email or our pages on social media sites, we may collect Personal Information like your name, contact information, and the contents of the messages you send.

  • User Content: We may collect AI Customer Input, including your prompts and other content you upload.

We do not collect Personal Information from third parties.

Personal Information We May Receive from Your Access to or Use of the Services: When you visit, access, use, or interact with the Services, we may receive the following information:

  • Log Data: Information that your browser or device automatically sends to us. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.

  • Usage Data: Information about your use of the Services, including the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection. This includes usage analytics, performance data and quality signals.

  • Device Information: Information about the device you use to access the Services, including the name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device and browser you use and its settings.

  • Location Information: We may determine the general area from which your device accesses our Services based on information like its Internet Protocol address for security reasons and to make your product experience better, for example to protect your account by detecting unusual login activity or to provide more accurate responses. In addition, some of our Services allow you to choose to provide more precise location information from your device, including location information from your device's GPS or other geolocation functionality.

Information We May Receive from Other Sources: We may receive information from our trusted partners, including security partners, to protect against fraud, abuse, and other security threats to our Services. We may also collect information from other sources, including information that is publicly available on the internet, to develop the models that power our Services.

The Services are not designed to respond to "do not track" signals received from browsers.

How We Use Personal Information

We use your name and email address to:

  • Create and manage your account and authenticate access to the Services.

  • Communicate with you about your account or the Services (for example, onboarding, key issuance/rotation, rate-limit or policy updates, security or compliance notices, and material changes).

  • Send information about Aristotle and other Harmonic products or services that may be relevant to you (you can opt out at any time).

  • Prevent fraud, illegal activity, or misuse of our Services.

  • Protect the security of our systems and Services.

  • Protect the rights, privacy, safety, or property of Harmonic, our users, or third parties.

  • Comply with applicable Law.

  • We do not use your Personal Information for profiling, automated decision-making that produces legal or similarly significant effects, or targeted advertising.

We may also aggregate or de-identify Personal Information so that it no longer identifies you and use this information to analyze the way our Services are being used, to improve and add features to them, and to conduct research. Once de-identified, we will not re-identify the information or otherwise attempt to recreate Personal Information, except to comply with applicable Law.

Harmonic may use and disclose Aggregated Statistics for any purpose.

Nothing in this Privacy Policy limits our ability to use or disclose information as otherwise permitted by applicable Law.

No Sales; No Sharing for Ads; No Commercial Disclosure

Basic Protection of Personal Information: We do not sell Personal Information and we do not share Personal Information except as provided in this Privacy Policy or as otherwise permitted by applicable Law. We do not share Personal Information for cross-context behavioral or targeted advertising. We do not disclose Personal Information to third parties for their own commercial purposes.

How We Disclose Personal Information

We disclose Personal Information only as follows:

  • Business Operations: In order to meet our business operations needs and to perform certain services and functions, we may disclose Personal Information to third-party vendors and service providers, including providers of hosting services, customer service vendors, cloud services, content delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers. Pursuant to our instructions, these parties will access, process, or store Personal Information only in the course of performing services on our behalf or as otherwise directed by us.

  • Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a "Transaction"), your Personal Information may be disclosed in the diligence process with counterparties and other third parties assisting with the Transaction and transferred to a successor or affiliate (including an Affiliate, as defined below) as part of that Transaction along with other assets.

  • Government Authorities or Other Third Parties: We may share your Personal Information, including information about your interaction with our Services, with government authorities or authorized third parties in compliance with the Law (a) if required to do so to comply with applicable Law, or in the good faith belief that such action is necessary to comply with applicable Law, (b) to protect and defend our rights or property, (c) if we determine, in our sole discretion, that there is a violation of our Terms, policies, or applicable Law, (d) to detect or prevent fraud or other illegal activity, (e) to protect the safety, security, and integrity of our products (including the Services), employees, contractors, users, or the public, or (f) to protect against, mitigate or minimize legal liability.

  • Affiliates: We may disclose Personal Information to an individual or entity that controls, is controlled by, or is under common control with Harmonic (an "Affiliate"). Our Affiliates may use this Personal Information in a manner consistent with this Privacy Policy.

  • Your Business Organization: If you create an account using an email address belonging to your employer or another organization that has rights to access that account, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account, or to acknowledge the employer's or organization's rights in the account.

We do not otherwise disclose Personal Information.

Your Choices and Rights

You have the following statutory rights in relation to your Personal Information:

  • Request access to your Personal Information and information relating to how it is processed.

  • Request the deletion of your Personal Information from our records.

  • Rectify or update your Personal Information.

  • Request we transfer your Personal Information to a third party (right to data portability).

  • Request restrictions on how we use or process your Personal Information.

  • Request that we disclose to you:

    • The categories of Personal Information we have collected about you;

    • The categories of sources from which the Personal Information is collected;

    • The business or commercial purpose for collecting or selling the Personal Information;

    • The categories of third parties with whom we have shared the Personal Information; and

    • The specific pieces of Personal Information we have collected about you.

  • Withdraw your consent where we rely on consent as the legal basis for processing your Personal Information at any time.

  • Lodge a complaint with your local data protection authority.

  • Not receive discriminatory treatment from us for the exercise of any of the foregoing rights.

You have the following rights to object:

  • Object to our processing of your Personal Information for direct marketing at any time.

  • Object to how we process your Personal Information when our processing is based on legitimate interests.

You can exercise some of these rights through your account. If you are unable to exercise your rights through your account, please submit your request by emailing legal@harmonic.fun.

You may designate an authorized agent to make a request on your behalf pursuant to this Privacy Policy or applicable Law. Prior to completing a request made by such an authorized agent, we require that you provide your authorized agent with written permission to submit such a request and require that you or your authorized agent provide us with a copy of such written permission.

Marketing Opt-Out: You can opt out of promotional emails at any time via the unsubscribe link. We may still send transactional/service-related emails (e.g., account, security, or legal notices).

We do not sell or share Personal Information for targeted advertising, so opt-out rights for those uses are not applicable to this Service.

Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. To further protect the transmission of data, the Services are accessible over HTTPS/TLS only. No Internet or email transmission, however, is ever fully secure or error free. You should take special care in deciding what information you provide to the Services. You transmit all information at your own risk. We are not responsible in the event you circumvent any privacy settings or security measures.

Legal Basis for Processing

For each of the applicable bases for processing Personal Information, we have identified the primary basis for the use of such Personal Data. These bases are illustrative and may not be exhaustive. Personal Information may be processed for more than one use.

Contract: To provide, analyze, and maintain our Services. Processing the following Personal Information may be necessary to deliver a contractual or requested service to a person:

  • Account information

  • User content

  • Communication information

  • Other information you provide

  • Log data

  • Usage data

  • Device information

  • Location information

  • Cookies and similar technologies

Legal Obligation: To comply with applicable legal obligations. Processing the following Personal Information may be necessary for compliance with a legal obligation to which we are subject. Even where we are not under a specific legal obligation, we may also process the following Personal Information where necessary for our legitimate interests and those of third parties, including in protecting our Services from abuse, fraud, or security risks, (including by processing data from security partners to protect against fraud, abuse, and security threats in our Services):

  • Account information

  • User content

  • Communication information

  • Social media information

  • Other information you provide

  • Log data

  • Usage data

  • Device information

  • Cookies and similar technologies

Legitimate Interests: To improve and develop our Services and conduct research. Processing the following Personal Information may be necessary for a legitimate interest pursued by us or a third party:

  • Account information

  • User content

  • Communication information

  • Other information you provide

  • Data we receive from other sources

  • Log data

  • Usage data

  • Device information

  • Cookies and similar technologies

Consent: Pursuant to your consent. For data subjects governed by the EU General Data Protection Regulation 2016/679/EU (the "GDPR"), consent occurs only when the applicable data subject has freely given specific, informed, and unambiguous consent to process the data for one or more specific purposes. Those purposes include the ability to provide our Services, to analyze and maintain our systems, and to comply with all our legal and contractual obligations. These apply to:

  • Account information

  • User content

  • Communication information

  • Other information you provide

  • Log data

  • Usage data

  • Device information

  • Location information

  • Cookies and similar technologies

Children's Privacy

The Services are intended for use by individuals 18 years and older. We do not knowingly collect Personal Information from children under 18. If you believe a child has provided to us any Personal Information, contact legal@harmonic.fun and we will investigate any such notification and, if appropriate, delete the Personal Information from our systems. Users under 18 must have permission from their parent or guardian to use our Services.

Data Transfers

We process your Personal Information on servers located outside of the European Economic Area, Switzerland and the UK for the purposes described in this Privacy Policy. This includes processing and storing your Personal Information in our facilities and servers in the United States. While data protection Laws vary by country and other countries may not offer the same level of data protection as your home country, we apply the protections described in this Privacy Policy to your Personal Information regardless of where it is processed. When transferring Personal Information outside of the European Economic Area, Switzerland or the UK, we rely on the following transfer mechanisms to comply with applicable data protection Law:

  • We rely on the European Commission's adequacy decisions pursuant to Article 45(1) of the GDPR when transferring your Personal Information to any country that has been considered to provide an adequate level of protection.

  • For other jurisdictions, we rely on (a) the Standard Contractual Clauses ("SCCs") as approved by the European Commission pursuant to Article 46(2)(c) of the GDPR and (b) the UK Data Transfer Addendum. For more information or to obtain a copy of the appropriate safeguards we have in place when transferring Personal Information, please contact us at legal@harmonic.fun.

Length of Data Retention

The Personal Information you provide to us for your account is retained throughout the time you have an account with us. Closed account information is retained for an additional period of two years, or as otherwise required or permitted by applicable Law, unless sooner deleted upon your request. Deidentified data (including Aggregated Statistics) and Training data may be retained as needed, consistent with the need to update and maintain Training and operational processing on an ongoing basis.

Third Party Sites and Services

The Services may link to third-party sites or services. Their privacy practices are governed by their own policies; we are not responsible for those practices. You are responsible for reviewing the policies and determining whether to use other services and sharing Personal Information with those third parties.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy with a new "Last Updated" date and, where required, provide additional notice in a form required by the Laws of each jurisdiction. Your continued use of the Services after an update signifies your acceptance of the updated Privacy Policy.

Contact Us

Questions, requests, or complaints may be sent to:

  • Email: legal@harmonic.fun

  • Postal: Legal Department, Concordance Inc. dba Harmonic, 925 Alma St., Palo Alto, CA 94301.

You can contact our Data Protection Officer through legal@harmonic.fun in matters related to Personal Information processing. Please include "Attention Data Protection Officer" in the body of the email.

In this Privacy Policy, references to "includes" and "including" shall be deemed to be followed, in each instance, by the words "without limitation."