How AI Harness Labs handles your information

Who we are

AI Harness Labs is run by PoolsiFi Technologies Inc.. We operate this website, the online course, and the internship placement programme described on it.

What we collect and why

When you visit the site: we count visits ourselves, in our own database, without an outside analytics service or a tracking cookie. When a page opens it sends us the page's address (with any ids in it removed), the name of the site that sent you, any campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_content), a friend's referral code if the link had one, whether you use a computer, a phone or a tablet, and the country our host reports for your connection. To count people rather than pages, our server makes an anonymous code from your network (IP) address and your browser together with a random value that is replaced every day and then deleted, so you are a new visitor each day and nobody, us included, can link your visits across days. Your address and browser are not stored, and the codes of earlier days are erased. If your browser sends Do Not Track or Global Privacy Control, nothing is counted. Bots and the admin area are not counted.

Where a sign-up came from: when you start free, apply, post a project, start the AI interview or pay, we record on it the campaign tags, the referring site and the first page of your first and your latest visit, and a friend's referral code, so we know which channels bring people. You and we can see it.

Referral codes: a paid learner has a personal code. If you sign up with a friend's code, we record that, and your friend sees your first name, the date and whether you have signed up, applied or paid, never your email address or anything else. We record the discount on your payment and your friend's reward, and pay the reward by hand.

When you apply as a learner: your name, email address, phone number if you give it, city, which of our audiences you belong to, how many hours you can give, and what you would like to build. We use this to decide on your application and to contact you about it.

When you post a project as a business: your business name, website, your name, work email, city and state, team size, whether you are open to hiring, and the problem you describe. We use this to scope the project with you and to match a trainee to it. If you choose to be listed, we also record when you said so, and may show your business name and city, with a one-line summary of the project, on the site; you can turn it off at any time.

When you take the AI business interview: your answers, the transcript of the interview and the projects it proposes. We use them to write the briefs you approve and to match trainees to them.

When you connect an account for your intern's agent: if you connect Google, the access Google gives us to your Gmail and Google Calendar, and if you connect QuickBooks, Square, HubSpot or Jobber, the access that provider gives us, each kept encrypted in our database's secret store and used only to carry out the requests you allowed; if you register a web address, that address and the secret we sign each post with; the names of the tokens you issue and what each may do (never the token itself, only a fingerprint of it); a record of every request your intern's agent made and what happened to it, without its content (only a fingerprint of it); the full text of the requests held for your approval and of the drafts and events the agent left for you to copy, so you can read them first; any lists of allowed recipients, standing permissions and limits you set; and our go-live check of the agent. Your intern never sees your passwords or this access. You can disconnect an account at any time on your agents page, which deletes the stored access and asks the provider to withdraw it.

When a business turns on business memory: facts about how the business works, from the interview, the brief, the intern's weekly check-ins, a one-line note when the agent reads a connected system, facts the owner adds and notes the intern's agent adds. Names, email addresses, phone numbers, card and id numbers and street addresses are replaced with placeholders before anything is saved. It is kept on a server we run in Germany, in a memory kept apart for that business, searched by keyword on that server only. Only an intern placed with the business can connect an agent, with a token they create; we record which version of the agreement the owner and the intern accepted, the token's name and dates (never the token itself), and a log of what was sent to the memory without its text. When an agent recalls a fact, that fact goes to the AI model the agent runs on. Memory is off unless the owner turns it on, and the owner can correct, withdraw or delete it at any time.

When you accept an agreement: which version of the Intern Agreement or the Business Agreement you accepted on the form, and when.

When you accept an agreement (applying, posting a project, starting free, the NDA with the business or the intern you are matched with, or a retainer): a signed copy of the agreement as you accepted it, with your name and email, the names of the other parties, the date and time, and the network (IP) address and browser the acceptance came from. We keep the address and browser as evidence of who accepted what and when; you, the other party to an NDA, and we can open the copy.

When we pay a business its completion fee: the bank or PayPal details you give us to pay it, and a record of each payment.

When you pay: payment is handled by Stripe. We never see or store your card number. We keep a record that a payment happened, its amount, and Stripe's reference for it.

While you learn: which lessons you have marked complete, your capstone submission (title, description, links, and any file you upload) and its AI review, your messages to the AI mentor, and your internship status and outcome. If you choose to show a completed placement on the site, we record when you said so, and may show your first name with the business, the outcome, a one-line summary of the project and the month; you can hide it at any time.

When you sign in with Google: Google tells us your email address and name so we can match you to the account you created when you applied or posted a project. We do not receive your Google password or access to anything else in your Google account.

Who sees it

The people who run AI Harness Labs see everything above in order to run the programme. When a learner is matched to a business, each side sees the other's name and email address and the project brief, so they can work together. We do not sell your information and we do not share it with anyone else except the services below, and the public listing you may choose to turn on.

Services we rely on

• Supabase, which stores our database and files.
• Vercel, which hosts this website.
• Stripe, which processes payments.
• Resend, which delivers our emails.
• DeepSeek, whose AI models run the AI mentor, review capstones, run the AI business interview and the guide chat, pick out the facts of a project from the interview, check build-log posts before they are published, run the go-live check of an intern's agent, and draft library entries from what we capture. Only the text each of these needs is sent: your messages to the AI mentor or the guide, your internship brief and check-ins, your capstone submission, a post you write, and a business's interview answers and transcript. It is sent only to produce a reply, a review, project proposals, a list of facts, a check or a draft. Before anything is sent, the people's full names, email addresses, phone numbers, card and ID numbers and street addresses that our filter recognises in what you or a business wrote are replaced with placeholders, and put back only in the reply we show you. The business's own name and the trainee's first name are kept so the reply makes sense, and the code files in a capstone upload are sent as uploaded, after any keys in them are removed.
• Hetzner, which runs the server in Germany that holds business memory, for businesses that turn it on.
• Google, only if you choose to sign in with Google, or, as a business, to connect your Gmail and Google Calendar for your intern's agent.
• Intuit (QuickBooks), Square, HubSpot and Jobber, only if a business connects that system for its intern's agent.
• PayPal, only if a business chooses to receive its completion fee through PayPal.

How long we keep it

We keep your information while you are an applicant, learner, or business in the programme, and afterwards for as long as we need it to answer questions about your placement, reference letter, or payment. If you ask us to delete your account we will, except for payment records we are required to keep.

The record of what an intern's agent asked to do, and of who connected, paused or changed what, cannot be edited by anyone, us included. We delete it after 24 months, and within a month of an account being deleted we delete every part of it that belongs to that account.

Visit counts (pages, sources, devices, countries) and the record of sign-ups and payments as events are deleted after 13 months. The anonymous visitor code of a day is erased when the day ends (UTC).

Signed copies of agreements cannot be edited by anyone, us included, and are kept after an account is deleted, as the record of what was agreed.

Business memory is kept until the owner turns it off or the business's account is closed, and is then deleted, with its backup copies gone within 7 days.

Your choices

You can ask us at any time to show you what we hold about you, correct it, or delete it. Write to hello@aiharnesslabs.com. We reply within a few working days.

Cookies

We use a few small cookies, each for one job. We do not use advertising or tracking cookies, and none of them is shared with anyone else.

• Signing in. Set when you log in, to keep you signed in from page to page. It lasts until you sign out, and at most 400 days. While you sign in with Google or an email link, a second one remembers the sign-in you started; it is removed once you are in.
• Where you came from. Set on your first visit, or when a link carries campaign tags or a friend's referral code: the tags, the referring site's name, the first page and the referral code, of your first and your latest such visit. It holds no id and is not used to follow you; it is read only when you sign up, apply, post a project, start the interview or pay, and by the page that shows a friend's discount. It lasts 90 days. With Do Not Track or Global Privacy Control on, it is set only to keep a referral code, which your friend's discount depends on.
• Your theme. Set only if you choose Light or Dark, so pages open in that theme. It lasts a year; choosing System removes it.
• The guide on public pages. Set the first time you open the guide without being signed in: a random id, not linked to your name or email, used to count your questions against the daily limit and how many people use the guide. It lasts 30 days.
• Connecting Google for your intern's agent (business owners only). Set when you press Connect, to check that the answer from Google is for the request you made. It lasts 10 minutes and is removed when you come back.
• Connecting QuickBooks, Square, HubSpot or Jobber for your intern's agent (business owners only). The same check for each of these, with what you ticked for the agent. It lasts 10 minutes and is removed when you come back.

Your browser also keeps a few choices on your device, not sent to us: your theme, the side you chose in the guide, and whether you have opened the guide.

Changes

If we change this policy we update the date at the top. If a change affects how we use what you have already given us, we email you first.