Privacy Policy

1. Who we are

Halo is operated by Nova Connects Ltd, trading as "Halo". For the personal data we process about you as a Halo user (account, billing, support, telemetry), Nova Connects Ltd is the data controller. Where Halo is provided to you through your employer, your employer is the data controller for content you post inside their workspace, and Nova Connects Ltd acts as their data processor.

2. Information we collect

We collect information you provide directly (such as your name, email, employer, login credentials, and profile details), information generated through your use of the service (posts, messages, reactions, attendance, support enquiries), and technical information from your device (IP address, browser type, device identifiers, usage telemetry).

3. How we use information

We use information to: create and operate your account; deliver the features your employer has enabled; secure the service and prevent fraud; provide customer support; improve the product; communicate service updates; and comply with legal obligations.

4. Legal basis for processing

We process personal data under the following legal bases under UK GDPR:

Contract — to provide the service to you or your employer under our terms.
Legitimate interests — to secure the service, prevent abuse, improve the product, and run our business.
Legal obligation — to comply with tax, accounting, and other statutory duties.
Consent — where required, e.g. optional marketing emails or non-essential cookies. You can withdraw consent at any time.

5. Sharing and sub-processors

We share information with:

Sub-processors that help us run the service (hosting, analytics, email delivery) under written data-protection agreements.
Paddle.com Market Ltd ("Paddle"), our Merchant of Record. Paddle handles payment processing, subscription management, billing, tax compliance, invoicing, and related customer support for all Halo purchases. Paddle is an independent controller for the payment data it collects.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law.

We do not sell personal information.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the service. When your employer offboards you, your account is deactivated and data is deleted or anonymised per their retention policy and applicable law. Billing records are retained as required by tax law.

7. Your rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal information, and to withdraw consent. UK/EEA users have the right to lodge a complaint with their supervisory authority (in the UK, the ICO). Contact your workspace administrator or email privacy@joinhalo.app to exercise these rights. We will respond within one month.

8. Security

We use encryption in transit and at rest, role-based access controls, and continuous monitoring. No method of transmission over the internet is 100% secure, but we work hard to protect your information.

9. International transfers

Halo is operated globally. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions.

10. Changes

We may update this policy from time to time. Material changes will be communicated through the product or via email.

11. Contact

Nova Connects Ltd — questions? Email privacy@joinhalo.app.