Placeholder — to be reviewed by a lawyer before launch.

Privacy policy

Halto Labs (“we”) operates Halto. We act as a processor for the data your AI agents send to Halto, and as a controller for your account data.

What we process

• Account data: email address, workspace name, team members and roles.
• Agent activity: the tool and action each agent attempted, our decision and reason, and parameters after redaction.
• Short redacted excerpts of untrusted content your agent read, to explain security decisions.
• Costs your agents report; billing data handled by Stripe.

Data minimisation

Before storage we remove API keys, tokens, passwords, private keys, card numbers and IBANs, and mask email addresses and phone numbers by default. Email addresses mentioned in untrusted content are stored only as one-way fingerprints.

Where data is stored

In the European Union (Supabase, EU region). Hosting by Vercel. Optional sub-processors when you enable them: Anthropic, OpenRouter or Vercel AI Gateway and the model provider they route to (AI mode — only redacted excerpts; free OpenRouter models may log prompts), Telegram, Meta (WhatsApp), Resend (email), Slack, Stripe. App notifications go through your phone's push service (Apple, Google or Mozilla) and contain only a generic title and a request id — never what the agent wants to do.

Retention and deletion

Activity logs are deleted automatically after your retention period (set by your plan: 7 days on the trial, up to 12 months on paid plans). Owners can export all data (JSON) or permanently delete a workspace at any time from Settings.

Your rights

You can access, correct, export or delete your data. Contact hello@halto.dev.