Privacy Policy

Overview

This policy explains what information Halo (“we”, “us”) collects, why we collect it, and the choices you have. It covers our marketing site, the free reputation scan, and the Halo application.

Information we collect

• Account & contact details — your name, email, and business information when you sign up, request a report, or contact us.
• Review data — the reviews, ratings and reply history for the locations you add. Most of this is public information read from what platforms already publish: you give us a business listing, not a password. Where a platform offers an official login (Google Business Profile), you can connect it and we read through that instead.
• Usage data — standard log and analytics data (device, pages, and actions) used to keep the service reliable and improve it.

How we use information

• To provide the service: aggregating reviews, drafting replies for your approval, and reporting on ratings and sentiment.
• To communicate with you about your account, support requests, and product updates.
• To secure, maintain, and improve Halo.

We do not sell your personal information, and we do not use the content of your connected reviews to train models for other customers.

How review sources are read

Two different ways, and the difference matters, so here it is plainly. Most sources are read from what those platforms already publish publicly, through a specialist review-data provider. No login of yours is involved and nothing private is accessed. Google Business Profile can additionally be connected through Google's own authorization; we request only the access needed to read your reviews and, once Google grants the API access we have applied for, to post the replies you approve. You can disconnect it at any time from your settings, which revokes that access.

Who else processes your data

We use a small number of providers to run Halo. They process data on our instructions only:

• Clerk — accounts, sign-in and organisations.
• Stripe — subscriptions and payments. Card details go to Stripe directly and are never held by us.
• Resend — the emails Halo sends you.
• DataForSEO — reading public reviews from review platforms.
• Google — Places data, and Business Profile where you connect it.
• OpenAI — drafting reply text and the sentiment summaries on your dashboard. Content sent through their API is not used to train their models.
• PostHog and Google Analytics — product and marketing analytics.
• Hetzner — the servers Halo runs on.

Data retention

We keep information for as long as your account is active or as needed to provide the service. You can ask us to delete your data, and we will do so unless we are required to retain it for legal reasons.

Your choices & rights

You can access, correct, export, or delete your personal information. Depending on where you live, you may have additional rights under laws such as the Australian Privacy Principles or the GDPR. To exercise any of these, contact us.

Security

We use industry-standard measures to protect your information in transit and at rest, and limit access to the data our team needs to operate the service. No system is perfectly secure, but we work hard to keep yours safe.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

Contact

Questions about privacy? Get in touch and we'll help.