Legal

Privacy Policy

This policy describes how Halvonis handles information on the public website and in the Halvonis application. It is written for Halvonis. Last updated September 11, 2026.

Who we are

Halvonis provides software-enabled business systems and automation services for service businesses. This website is the public presence for that product.

Information we collect

Depending on how you use Halvonis, we may collect:

• Information you submit through the request-access form, such as name, business name, email address, and a short description of your work.
• Basic website technical data needed to operate and secure the site, such as browser type and request logs.
• If you are an authorized operator of a Halvonis workspace: account information used to sign in, and operational records created while using configured workflows.
• If a business uses customer-facing workflows: information that business or its customers submit as part of those workflows, such as booking details, messages, or files the business chooses to collect.

Capabilities depend on each business setup. Not every business uses messaging, photos, payments, or other optional modules.

How we use information

We use information to:

• respond to access requests and operate the Halvonis product;
• provide configured workflows to authorized businesses;
• secure the service, prevent abuse, and diagnose problems;
• improve reliability and understand how the product is used, without inventing performance claims.

Processors and connected services

Halvonis may use trusted processors to authenticate operators, host the application, send messages when messaging is enabled, and process payments when payment features are enabled for a business. Payment card data is handled by the payment processor, not stored by Halvonis as a card vault.

Sharing

We do not sell personal information. We share information with processors who help us run the service, when required by law, or with a business's authorized operators in the workspace that business controls.

Google User Data and Data Security

Some businesses voluntarily connect a Google Calendar account to Halvonis. Halvonis does not access Google user data unless that business completes Google's authorization flow.

What Google data Halvonis accesses

When a business connects Google Calendar, Halvonis may access the Google account email used for that connection and Calendar event information needed for authorized scheduling and synchronization, such as event titles, times, and related event details available through the Calendar APIs the business approved.

How Halvonis uses Google user data

Calendar data is used only to provide user-facing scheduling, observation, reconciliation, and synchronization features requested by the connected business. Halvonis uses this data to show authorized operators the appointments they asked Halvonis to help manage, and to keep those records aligned with the connected Calendar when that business has enabled those features.

Data protection mechanisms

Halvonis applies the following safeguards to Google user data and related credentials:

• Production website and application traffic is served over HTTPS/TLS so data is encrypted in transit.
• Google OAuth access and refresh tokens are stored in an encrypted credential envelope using AES-256-GCM. Tokens are not stored as plaintext application secrets.
• Encryption keys and other production secrets are held in the production environment and are not written to application logs.
• Google Calendar connections are tenant-scoped. A workspace can access only the Calendar connection created for that business. Cross-business Calendar access is rejected.
• Application access controls require an authorized operator session before Calendar connection or workspace data can be used.
• Logs and diagnostics redact tokens, secrets, passwords, and similar credential fields. Authorization codes and OAuth tokens are not written to logs.

Sharing and sale of Google user data

Halvonis does not sell Google user data and does not use Google user data for advertising. Google user data may be processed by service providers that host and operate Halvonis, including infrastructure and authentication providers, solely to provide the requested product functions. When a business has enabled Halvonis intelligence features, Calendar event information may be sent to a contracted processor to produce a structured interpretation for that same business's scheduling workflow. Those processors are not authorized to use Google user data for their own advertising.

Google Limited Use

Halvonis's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI and machine learning

Halvonis includes optional intelligence features that can interpret Calendar events for the connected business. Google Workspace API data is not used to develop, improve, or train generalized or non-personalized AI or machine-learning models. Any AI processing of Calendar information is limited to providing that business the scheduling interpretation it requested.

Retention and deletion of Google user data

Halvonis retains connected Calendar records and credentials while the business connection remains active and as needed to provide scheduling, meet legal obligations, and resolve disputes. There is no separate advertised retention period beyond that operating need. Authorized operators may disconnect Google Calendar from the Halvonis workspace, after which Halvonis stops accessing that Calendar. To request deletion of stored Calendar records or credentials, email support@halvonis.com.

Retention

We retain information as long as needed to provide the service, meet legal obligations, and resolve disputes. Access-request submissions are kept only as long as needed to evaluate and respond to the request. Connected integration data follows the same rule and the Google-specific retention and deletion terms above.

Your choices

If you have a Halvonis operator account, you may update certain account details through the application. To ask about access-request data or other privacy questions, email support@halvonis.com.

Children

Halvonis is not directed to children and is intended for business operators.

Changes

We may update this policy as the product changes. The updated date above will change when we do.