Skip to Content
LegalPrivacy Policy

Privacy Policy

Last updated: 10 April 2026

harness.design is operated by Bundled Up Limited (company number 9413321, NZBN 9429053519184), a New Zealand registered company. This Privacy Policy explains how personal information and user generated content are collected, used, stored, and protected when you use the website or service. It includes information for users in the European Union (GDPR) and California (CCPA).

1. Information we collect

We may collect the following information:

  • Name or username
  • Email address
  • Account credentials
  • Usage data such as pages visited, features used, timestamps
  • Technical data such as IP address, browser type, device type
  • User generated content including wiring harness designs and related project data
  • Email addresses of people invited to view a shared harness via email sharing
  • Payment information processed by Stripe, Inc. when subscribing to the Pro Plan, including card details. harness.design does not store or have access to your raw card data

We do not intentionally collect sensitive personal information.

2. User generated content

The service allows users to create and store wiring harness designs.

  • All designs and related data belong entirely to the user
  • Designs are private by default and are not visible to other users

The service includes sharing features that allow users to share their designs in two ways:

  • Public sharing: A harness can be made public, allowing anyone with the link to view it in read-only mode without an account
  • Email sharing: Specific email addresses can be invited to view a harness. Invited users receive an email with a link and must have an account to access the design. Access can be revoked by the harness owner at any time
  • Shared users have read-only access. Only the harness owner can edit a harness
  • Shared users may duplicate a harness to their own account. The duplicate becomes their own independent design, entirely separate from the original

We may access user designs manually for support, debugging, and technical analysis.

3. How information is collected

Information is collected when you:

  • Create an account
  • Create or modify harness designs
  • Contact us
  • Use the service
  • Interact with the website through essential cookies

4. Why we collect information

We collect information to:

  • Provide and operate the service
  • Store and display user designs
  • Improve functionality and reliability
  • Provide support and troubleshoot issues
  • Maintain security and prevent misuse
  • Process payments and manage subscriptions
  • Send transactional emails such as account notifications and sharing invitations via Resend
  • Send marketing communications and product updates (you may unsubscribe at any time)
  • Comply with legal obligations

Where applicable under international law, information is processed based on:

  • User consent
  • Performance of a service requested by the user
  • Legitimate interests such as maintaining security and improving the service
  • Legitimate interests in direct marketing to existing users based on their existing relationship with the service

6. Cookies and tracking

We use essential cookies only. These are required for:

  • Authentication and account login
  • Maintaining user sessions
  • Core application functionality

Because only essential cookies are used, there is no opt out mechanism provided on the site. You may still control or block cookies through your browser settings, though this may affect functionality.

7. Data storage and security

Data is stored using Supabase infrastructure located in the United States.

Reasonable technical and organisational measures are taken to protect information from loss, misuse, or unauthorised access.

No system is completely secure and absolute security cannot be guaranteed.

8. Sharing of information

We do not sell personal information.

Information may be shared only with:

  • Supabase, Inc.: Application data and user designs are stored and served using Supabase infrastructure. Supabase’s handling of your data is governed by the Supabase Privacy Policy 
  • Stripe, Inc.: Payment card details are processed by Stripe as our payment processor. Stripe’s handling of your data is governed by the Stripe Privacy Policy . harness.design does not receive or store your card number
  • Resend, Inc.: Transactional emails (such as account notifications and sharing invitations) and marketing communications are delivered via Resend. Resend’s handling of your data is governed by the Resend Privacy Policy 
  • Legal authorities if required by law

No third parties are given access to user designs beyond what is required to operate the service.

9. International users

Your information may be processed outside your country of residence, including in the United States. By using the service, you consent to this transfer.

10. User rights

Depending on your location, you may have the following rights.

European Union (GDPR)

  • Access your personal information
  • Correct inaccuracies
  • Request deletion of your information
  • Withdraw consent for data processing
  • Request data portability

New Zealand (Privacy Act 2020)

  • Access your personal information held by us
  • Request correction of inaccurate personal information
  • Lodge a complaint with the New Zealand Privacy Commissioner (privacy.org.nz) if you believe your privacy rights have been breached

California (CCPA)

  • Access categories of personal information collected
  • Know the purposes and sources of information collection
  • Request deletion of personal information
  • Do Not Sell My Information: we do not sell personal information

How to exercise rights

  • Users may delete designs directly within the service
  • To unsubscribe from marketing emails, use the unsubscribe link included in any marketing email
  • Account deletion or other requests can be made by emailing
    harness.design.nz@gmail.com

11. Data retention

User data is retained only as long as necessary to provide the service.

On account deletion, personal data and designs are deleted within 30 days, subject to any legal retention obligations. System backups are retained for up to 24 hours and may briefly contain data after a deletion request is processed.

12. Children

The service is not intended for users under 13 years of age.

13. Changes to this policy

This policy may be updated from time to time. Material changes will be posted on this page.

14. Contact

For privacy related questions or requests, contact
Email: harness.design.nz@gmail.com

Last updated on