Privacy Policy

I. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked with you or your organization ("Personal Information"), as well as information that does not directly identify you ("Non-Personal Information"). We collect this information in the ways described below.

A. Information Collected Through Technology

As you navigate the Site and use the Service, we and our service providers may automatically collect certain information through cookies, log files, pixel tags, and similar technologies. This information may include your Internet Protocol (IP) address, browser type and version, operating system, device identifiers, referring and exit pages, the pages you view, the dates and times of your visits, and other diagnostic and usage data.

Cookies are small data files stored on your device. We use both session cookies, which expire when you close your browser, and persistent cookies, which remain on your device until they expire or you delete them. We use these technologies to operate and secure the Site and the Service, to remember your preferences and login session, to understand how users interact with our offerings, and to measure and improve performance. You can set your browser to refuse some or all cookies or to alert you when cookies are being sent; however, if you disable cookies, some features of the Site or the Service may not function properly.

B. Information You Provide to Us

We collect the information you provide directly to us, including when you:

• register for or administer an account, which may require your name, business email address, username, password, job title, and organization name;
• purchase a paid plan or manage billing, in which case payment card and billing information is collected and processed by our third-party payment processor and is not stored by us in full;
• connect third-party services and applications to the Service (for example, commerce, payment, CRM, or support platforms), in which case we receive the authentication tokens and configuration data necessary to establish and maintain those connections;
• subscribe to our newsletter, request a demonstration, or otherwise contact us, in which case we collect your name, email address, and the contents of your communication; and
• respond to surveys or otherwise interact with us.

C. Information We Receive From Third Parties

We may receive information about you from third parties, such as the integrations and applications you choose to connect to the Service, our analytics partners, and publicly available sources. We use this information in a manner consistent with this Privacy Policy.

D. Children's Privacy

The Site and the Service are intended for use by businesses and their authorized personnel and are not directed to, or intended for use by, individuals under the age of 18. We do not knowingly collect Personal Information from anyone under the age of 18. If we learn that we have collected Personal Information from a person under the age of 18, we will delete that information as promptly as reasonably possible. If you believe that a person under the age of 18 may have provided us with Personal Information, please contact us at contactus@halofy.ai.

II. How We Use and Share Information

A. How We Use Information

We use the information we collect to:

• provide, operate, maintain, and secure the Site and the Service;
• create and administer your account and authenticate users;
• process transactions and send related information, including confirmations and invoices;
• establish and maintain the integrations and connections you configure;
• respond to your inquiries, requests, and support needs;
• send administrative and transactional communications and, where permitted, marketing communications about our products and services;
• monitor and analyze usage, trends, and activities to understand and improve the Site and the Service;
• detect, investigate, and prevent fraudulent, unauthorized, or illegal activity and protect the rights, property, and safety of Halofy, our users, and others; and
• comply with our legal obligations and enforce our agreements.

B. Personal Information

We do not sell your Personal Information, and we do not share it with third parties except as described in this Privacy Policy. We may share Personal Information in the following circumstances:

• Service providers. We share Personal Information with vendors, consultants, and other service providers who perform services on our behalf, such as hosting, payment processing, analytics, and customer support. These providers are authorized to use Personal Information only as necessary to provide services to us and are contractually obligated to protect it.
• Legal and safety. We may disclose Personal Information if we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our terms and agreements; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Halofy, our users, or the public.
• Business transfers. If Halofy is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, Personal Information may be transferred as part of that transaction, subject to the commitments made in this Privacy Policy.
• With your consent. We may share Personal Information for any other purpose disclosed to you at the time we collect it or with your consent.

C. Non-Personal and Aggregated Information

We may aggregate or de-identify information so that it can no longer reasonably be used to identify you. We may use and share aggregated or de-identified information for any lawful purpose, including to analyze, improve, and promote the Site and the Service, provided we do not attempt to re-identify it.

III. How We Protect Information

We implement and maintain reasonable technical, administrative, and organizational measures designed to protect the information we collect against unauthorized access, disclosure, alteration, and destruction. The specific measures we use are appropriate to the nature of the information we handle and the risks involved.

No method of transmission over the Internet or method of electronic storage is completely secure, however, and we cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at contactus@halofy.ai.

IV. Your Rights Regarding Your Personal Information

A. Marketing Communications

You may opt out of receiving promotional emails from us by following the unsubscribe instructions included in those emails or by contacting us at contactus@halofy.ai. Please note that even if you opt out of promotional messages, we may continue to send you administrative and transactional communications relating to your account and the Service.

B. Your Choices

You may review, update, or correct your account information at any time by logging into your account or by contacting us. You may also request that we delete your account and associated Personal Information, subject to our legal obligations and legitimate business needs to retain certain information.

C. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides you with the following rights, subject to certain exceptions:

• the right to know the categories and specific pieces of Personal Information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties with whom we share it;
• the right to request deletion of Personal Information we have collected from you;
• the right to request correction of inaccurate Personal Information;
• the right to limit the use and disclosure of your sensitive personal information;
• the right to opt out of the sale or sharing of Personal Information; and
• the right not to be discriminated against for exercising your privacy rights.

We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising as those terms are defined under the CCPA. If you are a California resident, you also have the right to limit our use and disclosure of your sensitive personal information (such as account login credentials) to the uses permitted under the CCPA; we use such information only to provide, secure, and support the Service and do not use or disclose it for purposes that would trigger this right. To exercise any of these rights, please contact us at contactus@halofy.ai. We will verify your request before fulfilling it and may ask you to provide information sufficient to confirm your identity. You may designate an authorized agent to make a request on your behalf.

D. Rights in the European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have the following rights under applicable data protection law, subject to certain conditions: the right to access, correct, update, or request deletion of your Personal Information; the right to object to or restrict the processing of your Personal Information; the right to data portability; and the right to withdraw consent at any time where we rely on consent to process your Personal Information. Where we process your Personal Information, we do so on the basis of your consent, to perform a contract with you, to comply with a legal obligation, or for our legitimate business interests. You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at contactus@halofy.ai.

V. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. When Personal Information is no longer required, we will delete or de-identify it in accordance with our retention practices and applicable law.

VI. International Data Transfers

Halofy is based in the United States, and the information we collect is processed in the United States and may be processed in other countries where we or our service providers operate. These countries may have data protection laws that differ from those of your country. Where required by applicable law, we implement appropriate safeguards for such transfers.

VII. Links to Other Websites

The Site and the Service may contain links to third-party websites and services that we do not operate or control. This Privacy Policy does not apply to those third-party sites and services, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party sites and services you visit.

VIII. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the "Last Updated" date at the top of this Privacy Policy. If we make material changes, we will provide additional notice, such as by posting a prominent notice on the Site or sending you a notification, prior to the changes taking effect. Your continued use of the Site or the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

IX. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: