Data Compliance &
Processing Policy

Last updated: 09 January 2026

01

Introduction

HarisLab Connect is a software platform that provides tools for managing subscribers, email campaigns, newsletters, updates, and customer communications.

We are committed to protecting data and operating in accordance with applicable data protection and privacy laws.

Data Role: HarisLab Connect acts as a data processor. Users of the platform act as data controllers and are fully responsible for the data they upload, manage, and send using the service.

02

Our Role as a Data Processor

HarisLab Connect does not own, control, or independently use user data. Our operations are governed by the following principles:

  • Users decide what data is added
  • Users decide who receives emails
  • Users decide when content is sent

HarisLab Connect only processes data strictly on behalf of users to provide the requested service.

03

Data We Process

User Account Data

  • Name and email address
  • Account settings and preferences
  • Authentication and security information

Subscriber Data

  • Email addresses and names
  • Subscription source and status
  • Data imported directly by the user

Communication Data

  • Campaigns and newsletters created by users
  • Contact and feedback form submissions
  • Delivery metadata (message IDs, status)

Technical Data

  • IP address and browser info (for security)
  • API keys and system tokens
04

Purpose of Processing

  • Enable sending through platform
  • Deliver feedback messages
  • Monitor delivery status
  • Prevent spam and abuse
  • Maintain system reliability
05

Email Responsibility

👉 Users are solely responsible for:

  • email content
  • subscriber lists
  • consent
  • compliance with laws (GDPR, etc.)
06

Data Storage & Security

We implement industry-standard security measures including:

Secure Server Infrastructure Encrypted Data Storage Bcrypt Password Hashing API Key Validation
08

Data Retention

Data is retained only as long as necessary. Users may delete subscribers and campaigns at any time from their dashboard.

09

User Rights

Users retain rights to access, update, export, and request deletion of their data via the panel or support request.

10

Third-Party Services

We use trusted partners solely for operation, including email delivery providers (e.g., Brevo) and hosting infrastructure. These services process data strictly on our instructions.

12

Contact Information

For data compliance questions or formal data deletion requests, please use our secure channel.

Contact Compliance Support