Privacy Policy

Privacy Policy for Haleria AI Chat Assistant

At Haleria AI Chat Assistant, we prioritize your privacy and are dedicated to safeguarding your personal and business information. This Privacy Policy explains how we collect, process, store, and protect your data when you use our services.

1. Data Privacy and Confidentiality

• We treat all customer data as private and confidential.
• Haleria does not sell, share, or disclose your data to third parties under any circumstances.
• Each customer is provided with a dedicated, isolated database to ensure the security and separation of their information.

2. Data Collection and Usage

• We collect only the data essential for delivering and enhancing Haleria's services.
• Uploaded files, chat histories, and usage records are securely stored in your private database.
• Haleria does not access or utilize your data for any purpose beyond what is necessary to provide our services.

3. Third-Party Document Service Integration

• Document Access: When you connect document services (such as Google Docs) to Haleria, we access and read the content of your documents solely to provide AI chat assistance and document analysis features.
• Spreadsheet Access: When you integrate spreadsheet services (such as Google Sheets), we read your data to enable AI-powered analysis, insights, and automated responses based on your content.
• Data Processing: Connected service data is processed in real-time to generate AI responses and is temporarily cached in memory during active sessions for performance optimization.
• Usage Limitations: Third-party service data is used exclusively for providing Haleria's AI chat services and is never used for advertising, marketing to third parties, or any purpose unrelated to our core functionality.
• Access Scope: We only request the minimum necessary permissions from third-party APIs and access only the documents and sheets you explicitly authorize.
• No Sharing: Connected service data is never shared with third parties, sold, or used for any commercial purposes outside of delivering Haleria's services to you.

4. Data Security Measures

• We employ industry-standard security practices to protect your data from unauthorized access, breaches, or leaks.
• Data is encrypted during transmission and storage using robust encryption protocols.
• We conduct regular security audits and updates to maintain compliance with the highest standards.
• Third-Party Data Security: All connected service data is encrypted both in transit (using HTTPS/TLS) and at rest using AES-256 encryption.
• Access Controls: Access to third-party service data is restricted to authorized personnel only and is logged for audit purposes.
• API Security: We use secure OAuth 2.0 authentication with third-party APIs and follow industry security best practices for data handling.

5. Customer Control Over Data

• You retain full ownership and control over your data at all times.
• You may request the export or deletion of your data by contacting our support team at any time.
• Upon termination of your account, all associated data is permanently deleted from our systems, except where retention is required for legal or compliance purposes.
• Service Access Control: You can revoke Haleria's access to your connected document and spreadsheet services at any time through your respective account settings.
• Data Deletion: When you disconnect third-party services or delete your account, all connected service data is immediately purged from our systems.
• Selective Access: You have granular control over which specific documents and sheets Haleria can access from your connected services.

6. Data Retention and Deletion

• Retention Period: Third-party service data is retained only as long as necessary to provide our services or as required by law.
• Automatic Deletion: Cached data from connected services is automatically purged from temporary storage after session completion.
• User-Requested Deletion: You can request immediate deletion of all connected service data associated with your account at any time.
• Account Termination: Upon account deletion, all third-party service data is permanently and irrecoverably removed within 30 days.

7. No Third-Party Access

• Haleria does not share your data with external entities, including advertisers or third-party analytics providers.
• Your interactions and stored data are accessible only to you and authorized personnel within your private database.
• Data Isolation: Your connected service data is never shared with other Haleria users or external services.
• AI Processing: When processing connected service data through AI models, we ensure that your data is not used to train or improve third-party AI systems.

8. Third-Party API Compliance

• Limited Use Requirements: Our use of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.
• Authorized Scopes: We only request access to the minimum necessary API scopes required for our declared functionality from all connected services.
• Data Transfer: Connected service data is not transferred to third parties except as necessary to provide our services or as required by law.
• Human Review: Connected service data may be accessed by authorized personnel only for security purposes, abuse prevention, or compliance with applicable laws.

9. Compliance and Updates

• We adhere to applicable global data protection regulations to ensure the safety and security of your information.
• This Privacy Policy may be updated from time to time, and we will notify you of any material changes.
• Service Provider Compliance: We maintain strict compliance with all connected service providers' API Terms of Service and User Data Policies, including Google's requirements.
• Regular Audits: We conduct regular reviews of our third-party data handling practices to ensure continued compliance with all service providers.

10. Contact and Data Subject Rights

• Data Access: You can request a copy of all connected service data we have collected about you.
• Data Portability: You can request your connected service data in a machine-readable format for transfer to another service.
• Data Correction: You can request corrections to any inaccurate connected service data we may have stored.
• Support Contact: For any questions about third-party service data handling or to exercise your rights, contact our support team.

By using Haleria AI Chat Assistant and connecting third-party services, you consent to the privacy practices described in this policy, including our handling of connected service data as outlined above. If you have questions or concerns about your data privacy, particularly regarding third-party service data handling, please reach out to our support team for assistance.