Privacy Policy

Halley ("Halley", "we", "us", or "our") provides a cloud platform for vehicle fleet management, rental workflows, shared case folders, digital signatures, document storage, and operational reporting (collectively, the "Service"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what choices you have when you use our website, web application, and mobile applications.

This policy applies to users who access Halley on behalf of an organization as well as individuals who interact with Halley through public links, such as shared folders or downloadable reports. By creating an account, signing in, or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this policy, please do not use the Service. Where required by applicable law, we will request your consent for specific processing activities.

Account and identity information: name, mobile phone number, email address, organization affiliation, role, language preference, and profile details provided by you or your organization administrator.

Operational and business data: vehicle records, rental and share folder details, customer and employee information entered into the platform, signatures, uploaded photos and documents, generated PDFs, reports, timestamps, audit events, and other content created through normal use of the Service.

Authentication and security data: one-time verification codes, session tokens, login history, device identifiers supplied by your browser or app, and records needed to protect accounts against unauthorized access.

Technical and usage information: IP address, browser type, operating system, app version, pages or screens viewed, feature usage, crash logs, and diagnostic data used to maintain reliability and performance.

Communications: messages you send to our support team, feedback submitted through the product, and records of operational notifications related to your account or organization.

We use personal information to provide, operate, and maintain the Service, including account creation, phone-based authentication, permission management, file storage, report generation, and customer support.

We use information to secure the platform, detect fraud or abuse, troubleshoot errors, monitor system health, and enforce our terms and organizational access controls.

We may use aggregated or de-identified data to analyze product usage, improve features, plan capacity, and develop new functionality. Aggregated data does not identify individual users.

We may send service-related communications such as verification codes, security alerts, account notices, and responses to support requests. Marketing communications, if any, will be sent only where permitted by law and according to your preferences.

We process information where necessary to comply with legal obligations, respond to lawful requests, establish or defend legal claims, and protect the rights, property, and safety of Halley, our users, and the public.

We do not sell personal information. We share information only as described in this policy or with your direction.

Within an organization: administrators and authorized users in your organization may access information according to the permissions configured for their account.

Service providers: we use trusted vendors for hosting, storage, authentication, messaging, analytics, and customer support. These providers process data on our behalf under contractual confidentiality and security obligations.

Public and shared links: when a user or organization creates a public link to a folder or report, access is limited by the settings chosen at the time the link is created. Anyone with the link may be able to view the shared content.

Legal and safety disclosures: we may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to prevent harm, investigate misuse, or protect our legal rights.

Business transfers: if Halley is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction subject to appropriate safeguards.

We retain personal information for as long as needed to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements.

Organization administrators may delete or export certain records according to product capabilities and their internal policies. Backup copies may persist for a limited period before being overwritten.

When information is no longer required, we take reasonable steps to delete, anonymize, or isolate it from active systems.

We implement administrative, technical, and organizational measures designed to protect personal information, including encrypted transport, access controls, monitoring, and restricted internal access on a need-to-know basis.

No method of transmission or storage is completely secure. You are responsible for safeguarding your device, verification codes, and account credentials, and for notifying us promptly if you suspect unauthorized access.

Depending on your location and applicable law, you may have the right to request access, correction, deletion, restriction, portability, or objection to certain processing of your personal information.

You may update some account details through the application or by contacting your organization administrator. Requests that require changes outside self-service tools can be submitted to us using the contact details below.

You can control certain browser cookies and local storage settings through your device or browser. Disabling essential cookies may affect login and core functionality.

For privacy-related requests, contact us at privacy@halley.app. We may need to verify your identity before responding.

Halley may process and store information in countries other than the country where you live. When we transfer information internationally, we use appropriate safeguards consistent with applicable data protection requirements.

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, maintain session security, and understand how the Service is used.

Essential technologies are required for authentication and basic operation. Where optional analytics or preference cookies are used, we will provide controls or notices as required by law.

We may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or our practices. The latest version will be posted on this page with an updated date.

If we make material changes, we may provide additional notice through the application or by other appropriate means. Continued use of the Service after an update becomes effective constitutes acceptance of the revised policy.