Privacy Policy
The short version: we keep the least we can, we seal what we keep, and we never sell any of it. Here is the long version.
What we hold
Your email address. It identifies your Halo.
Your phone number, if you gave us one, so we can send you a code.
Your name and delivery address, when a store checkout passes them to your Halo so you do not retype them.
A record of the purchases made with Halo: the store, the amount, the date, and whether a claim was filed.
The public half of the keys on the devices you enrolled — the half that checks your signatures. Never anything biometric.
Technical records: sign-in events, security incidents, and the sealed audit trail we keep as proof.
What we never hold
Your fingerprint or your face. They stay inside your device and unlock a key there.
Your full card number. It lives with our payment processor; we keep a reference.
Your password, because Halo does not use one.
How it is protected
Sensitive fields are encrypted one by one with AES-256-GCM, each record with its own key, so a stolen database yields nothing readable.
Fields we must match, such as your email, are compared through a keyed fingerprint, never stored in the clear.
Our audit trail is sealed link by link: an entry cannot be altered afterwards without breaking the chain.
Who else sees it
Our payment processor, to hold your card and move the money.
Our messaging providers, to deliver a code to your phone or your inbox.
The store you are buying from, which receives what it needs to ship your order.
Authorities, when the law requires it, and only as far as it requires.
Nobody else. We do not sell your data and we do not rent it for advertising.
How long
When you close your Halo, your codes and your phone number are erased on the spot, your cards are detached and your devices forgotten.
What remains after that — your email, your past orders, your claims and the sealed record — stays for as long as the law requires us to be able to prove a transaction, up to seven years. We would rather tell you that than promise an erasure we do not perform.
One-time codes, ten minutes.
Your rights
Ask us for a copy of what we hold, ask us to correct it, or ask us to erase it: legal@paywithhalo.com.
Where the law gives you the right to object or to restrict what we do, exercise it and we will comply.
Some records survive an erasure request because the law requires proof of a transaction. We will tell you which ones, and why.