Privacy Policy

1. Introduction

Halden Pro ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you consent to the data practices described here.

2. Information We Collect

Information you provide:

• Account information (name, email, password)
• Business information (company name, address)
• Payment information (processed by Stripe — we do not store card numbers)
• Customer and job data you enter into the Service

Information collected automatically:

• Log data (IP address, browser type, pages visited)
• Device information
• Cookies and similar tracking technologies
• Usage data and feature interactions

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process transactions and send related information
• To send administrative communications and account notifications
• To respond to customer support requests
• To send marketing communications (where permitted by law)
• To detect and prevent fraudulent or unauthorized activity
• To comply with legal obligations

4. Cookies

We use essential cookies to operate the Service and optional cookies for analytics and performance. You can control cookie preferences through your browser settings or our cookie consent banner. Declining optional cookies will not affect core Service functionality.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Stripe (payments), Resend (email), Anthropic (AI features), Neon (database hosting) — bound by confidentiality obligations
• Legal Requirements: When required by law, subpoena, or other legal process
• Business Transfers: In connection with a merger, acquisition, or asset sale, with advance notice

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.

7. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to processing of your personal data
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

9. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, request deletion of their personal information, and opt-out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email above.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or in-app notification at least 30 days before changes take effect.

12. Contact Us

For privacy questions or to exercise your rights, contact us at [email protected].