Privacy Policy

Last Updated July 1st, 2026.

This Privacy Policy explains how Better Brain Lab LLC, a Wyoming limited liability company doing business as HarperFlow ("HarperFlow," "we," "us," or "our"), collects, uses, discloses, stores, and protects personal information when you visit harperflow.io, use the HarperFlow application, request a free GEO audit, subscribe to our newsletter or marketing emails, communicate with us, or otherwise use our services (collectively, the "Services").

HarperFlow provides a GEO/AEO publishing pipeline for Webflow websites and related services. The Services may research, generate, structure, score, schedule, and publish articles and related content to customer websites.

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at [email protected] or by mail at:

Better Brain Lab LLC

30 N Gould Street

Sheridan, WY 82801

United States

This Privacy Policy is intended to satisfy privacy notice requirements under applicable laws, including the General Data Protection Regulation ("GDPR"), the UK GDPR, and U.S. state privacy laws where applicable.

1. Information We Collect

We collect information directly from you, automatically through the Services, and from third parties you connect to HarperFlow.

1.1 Account and Contact Information

We may collect your name, email address, company name, job title, password or authentication information, billing contact details, support communications, and other information you provide when creating an account, contacting us, booking a call, subscribing to updates, or requesting support.

1.2 Website, Business, and Content Information

To provide the Services, we may collect information about your website, business, products, services, customers, target audience, competitors, brand voice, content preferences, content strategy, published articles, blog categories, CMS fields, metadata, media assets, internal links, source materials, audit inputs, and related website or business information.

1.3 Integration and Credential Information

If you connect a Webflow site or other supported platform, we may collect integration details, authorization grants, API tokens, CMS IDs, site IDs, collection IDs, field mappings, publishing permissions, and related technical information needed to operate the Services.

Webflow access tokens and similar platform credentials are stored in encrypted form. You may revoke HarperFlow's access through your connected platform's dashboard, including through Webflow's Apps & Integrations settings where applicable.

1.4 Generated Content and Operational Data

We may collect and store article drafts, generated article outputs, citations, source lists, research logs, prompts, prompt outputs, article audit scores, formatting decisions, internal link suggestions, publishing schedules, article history, CMS publishing logs, and related workflow data.

1.5 Billing Information

Payments are processed through Stripe. We may collect billing plan, subscription status, invoice history, payment status, transaction identifiers, billing address, tax information, and limited payment metadata. We do not intentionally store full payment card numbers on our own systems.

1.6 Communications and Marketing Information

If you contact us or subscribe to marketing communications, we may collect your email address, message content, communication preferences, campaign interactions, email opens, clicks, unsubscribes, and related records. We may send emails from HarperFlow domains and subdomains, including send.harperflow.io.

1.7 Analytics, Cookies, and Device Information

We use Google Analytics and may use cookies, pixels, tags, and similar technologies to understand how visitors use our website and Services. This may include IP address, device identifiers, browser type, operating system, pages viewed, referring pages, session duration, clicks, approximate location, and usage events.

You can control cookies through your browser settings. Google also provides tools to control certain analytics collection.

1.8 Information From Third-Party Services

We may receive information from third-party services you connect to HarperFlow or use to interact with us, including Webflow, Stripe, Supabase, Claude/Anthropic, Google Cloud, Cloudflare, n8n, Postal, Hostinger, Google Analytics, and other service providers, integrations, or infrastructure vendors.

2. How We Use Information

We use information for the following purposes:

  • To provide, operate, maintain, and improve the Services.
  • To connect to your Webflow site or other supported platforms.
  • To research, generate, structure, score, schedule, and publish articles.
  • To map content into your CMS and maintain publishing workflows.
  • To generate GEO audits, reports, recommendations, and related outputs.
  • To process subscriptions, payments, invoices, upgrades, downgrades, and cancellations.
  • To communicate with you about your account, support requests, product updates, security issues, marketing, and administrative matters.
  • To send newsletters, launch updates, reports, research, offers, and marketing communications.
  • To analyze usage, measure performance, troubleshoot issues, and improve product functionality.
  • To develop new features, reports, research, benchmarks, and content systems.
  • To protect HarperFlow, customers, users, third parties, and the Services from fraud, abuse, security incidents, misuse, unlawful activity, or technical harm.
  • To enforce our Terms of Service and other agreements.
  • To comply with legal obligations and respond to lawful requests.
  • To use customer names, logos, public websites, and public examples of published output in marketing, unless a customer opts out by contacting us.

3. Legal Bases for Processing

If GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:

  • Contract: to provide the Services, manage subscriptions, process payments, connect integrations, and fulfill our obligations to you.
  • Legitimate interests: to improve the Services, secure our systems, prevent abuse, analyze usage, communicate with business users, develop features, and market our Services where permitted.
  • Consent: where required for certain cookies, marketing communications, or optional processing.
  • Legal obligation: to comply with tax, accounting, privacy, security, dispute, and regulatory obligations.

Where we rely on legitimate interests, we consider the nature of the data, your relationship with HarperFlow, the purpose of processing, and safeguards available to you.

4. AI, Content, and Model Training

HarperFlow uses AI systems and automation to help research, generate, structure, evaluate, and publish content. We may process your website content, business information, brand voice inputs, CMS data, and generated outputs to provide the Services.

We do not use customer content to train foundation models. We may use customer content, generated outputs, operational metadata, audit scores, workflow data, and performance data to operate, maintain, troubleshoot, secure, evaluate, and improve HarperFlow's own Services, including through aggregation, anonymization, or de-identification where appropriate.

We may use third-party AI and infrastructure providers, including Claude/Anthropic and Google Cloud, to process content and provide the Services. Their handling of data is governed by our arrangements with them and their applicable terms and policies.

5. How We Share Information

We may share information as described below.

5.1 Service Providers and Processors

We share information with vendors and processors that help us operate the Services, including:

  • Stripe for payments and billing.
  • Supabase for data storage, authentication, and backend services.
  • Claude/Anthropic for AI processing.
  • Google Cloud for cloud infrastructure and processing.
  • Cloudflare for hosting, security, edge delivery, Workers, and related infrastructure.
  • n8n for workflow automation.
  • Webflow for CMS integration and publishing.
  • Postal, self-hosted email systems, and Hostinger for email delivery and related services.
  • Google Analytics for website analytics.
  • Other vendors that provide hosting, analytics, support, security, monitoring, communications, compliance, or business operations services.

5.2 Connected Platforms

When you connect HarperFlow to Webflow or another supported platform, we share information with that platform as needed to authenticate, map CMS fields, create drafts, publish content, update metadata, manage assets, and operate the integration.

5.3 Business Transfers

We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction involving HarperFlow or Better Brain Lab LLC.

5.4 Legal, Safety, and Enforcement

We may disclose information if we believe it is necessary to comply with law, legal process, court orders, government requests, tax obligations, law enforcement requests, security investigations, fraud prevention, protection of rights, enforcement of our agreements, or protection of HarperFlow, customers, users, third parties, or the public.

5.5 Marketing Examples and Public Proof

We may use customer names, logos, public websites, screenshots, public published articles, public case examples, and similar public-facing materials to describe or market HarperFlow, unless you request that we not do so. You may opt out by contacting [email protected].

6. Cookies and Analytics

We use Google Analytics and similar technologies to understand website traffic, usage patterns, and marketing performance. These tools may use cookies or similar identifiers.

Depending on your location, you may have the right to accept, reject, or manage non-essential cookies. You may also use browser settings or Google-provided tools to limit analytics tracking.

We do not currently describe the Services as free of cookies or tracking.

7. Marketing Communications

We may send you product updates, newsletters, research, reports, offers, launch updates, free audit information, and other marketing communications. You may unsubscribe by using the unsubscribe link in the email or contacting us at [email protected].

We may still send non-marketing communications about your account, subscription, security, billing, legal notices, support requests, or changes to the Services.

8. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain business records, improve the Services, and protect HarperFlow.

Cancellation of a subscription does not delete your account or data. Cancellation stops renewal and may suspend or limit publishing privileges according to the Terms of Service.

If you request deletion of your account, we will delete or de-identify account data within a reasonable period, except where retention is required or permitted by law, security, fraud prevention, backup integrity, dispute resolution, tax/accounting obligations, enforcement, or legitimate business purposes.

Webflow access tokens and similar platform credentials are deleted within 14 days after account deletion, unless earlier revoked by you through your platform dashboard or unless retention is legally required. Customers may revoke HarperFlow's Webflow access immediately through their Webflow dashboard under Apps & Integrations.

Generated articles, research logs, prompts, source lists, audit scores, citations, workflow data, and operational metadata may be retained for as long as we determine is reasonably useful for business, product, compliance, evidentiary, security, or operational purposes, unless applicable law requires deletion or limits retention.

9. Security

We use administrative, technical, and organizational measures designed to protect information, including encryption for sensitive integration credentials such as Webflow access tokens. No method of transmission, storage, or processing is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the security of your account credentials, connected platforms, Webflow permissions, website admin access, and devices.

10. International Data Transfers

HarperFlow is based in the United States and uses service providers that may process information in the United States and other countries. If you are located outside the United States, your information may be transferred to, stored in, or processed in countries that may not provide the same level of data protection as your jurisdiction.

Where required, we use appropriate safeguards for international transfers, which may include Standard Contractual Clauses, data processing terms, vendor contractual commitments, and other lawful transfer mechanisms.

11. Your Privacy Rights

Depending on your location, you may have rights to:

  • Access personal information we hold about you.
  • Correct inaccurate information.
  • Delete personal information.
  • Export or receive a copy of personal information.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Opt out of certain marketing communications.
  • Opt out of certain sales, sharing, targeted advertising, or profiling where applicable.
  • Appeal certain privacy rights decisions where required by law.

To exercise rights, contact [email protected]. We may need to verify your identity before fulfilling a request.

12. California and U.S. State Privacy Notice

If you are a California resident or resident of another U.S. state with applicable privacy rights, this section provides additional information.

We may collect the following categories of personal information:

  • Identifiers, such as name, email address, IP address, account identifiers, and billing identifiers.
  • Commercial information, such as subscription plan, invoices, transaction history, and product usage.
  • Internet or network activity, such as website usage, analytics events, device information, and log data.
  • Professional or business information, such as company name, job title, business website, and business profile.
  • Inferences, such as product preferences, content strategy signals, and usage-derived insights.
  • Sensitive personal information only where necessary for limited purposes, such as login credentials, account security, or payment-related processing handled by Stripe.

We use these categories for the purposes described in this Privacy Policy.

We do not sell personal information for money. We may use analytics and advertising-related technologies that some state laws may define as "sharing" or "targeted advertising." Where required, we will provide a way to opt out.

We do not knowingly collect, sell, or share personal information of children under 18.

13. Children

The Services are intended for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact [email protected].

14. High-Risk and Regulated Businesses

HarperFlow may support regulated, sensitive, or high-risk businesses only within reason and may require additional onboarding, safeguards, documentation, review, or written approvals. Customers are responsible for ensuring that their use of the Services complies with laws, regulations, professional obligations, advertising rules, platform policies, and industry standards applicable to their business.

15. Data Processing Addendum

For Agency and Enterprise plans, HarperFlow may provide or enter into a Data Processing Addendum where appropriate. If GDPR, UK GDPR, or similar laws apply and HarperFlow processes personal data on your behalf as a processor, the applicable DPA will govern that processing to the extent required by law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services, by email, or by another reasonable method. The updated Privacy Policy will be effective when posted unless otherwise stated.

Your continued use of the Services after the effective date of an updated Privacy Policy means you acknowledge the updated policy.

17. Contact Us

Better Brain Lab LLC

30 N Gould Street

Sheridan, WY 82801

United States

[email protected]