Privacy Policy
Last updated: July 7, 2026
TechHalo.ai ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use the Halo360 platform, the SKY AI-powered benefits intelligence system, our website at techhalo.ai, and all related services (collectively, the "Services").
1. Information We Collect
We may collect information in the following categories:
- Personal Information: Name, email address, phone number, employer information, and other information you provide when registering or using the Services.
- Benefits Data: Health plan selections, enrollment information, and benefits-related data processed through the Halo360 middleware.
- Protected Health Information (PHI): When acting as a Business Associate under HIPAA, we may process PHI in accordance with applicable Business Associate Agreements.
- Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and other diagnostic data.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and gather analytical data.
2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Services, including AI-powered benefits recommendations via SKY.
- Process enrollment transactions and benefits administration tasks.
- Personalize your experience and deliver content relevant to your interests.
- Analyze usage patterns to improve platform performance and user experience.
- Communicate with you, including sending service-related notices and promotional materials (with your consent where required).
- Detect, prevent, and address technical issues, fraud, or security incidents.
- Comply with legal obligations and enforce our Terms of Use.
3. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With third-party vendors and partners who assist in operating our platform (e.g., cloud hosting, analytics, customer support), subject to confidentiality agreements.
- Business Clients: With your employer or benefits administrator to the extent necessary to fulfill enrollment and service functions, consistent with your authorization.
- Legal Requirements: When required by law, regulation, legal process, or government request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
Mobile Information and Text Messaging (SMS/RCS)
No mobile information will be shared with or sold to third parties/affiliates for marketing/promotional purposes.
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with or sold to any third parties.
For the full terms of our text messaging program, including message frequency and how to opt out or get help, see our SMS and RCS Messaging Terms.
4. Data Security
We implement industry-leading security measures to protect your data, including:
- AES-256 bit encryption at rest and TLS 1.3 encryption in transit.
- SOC2 Type II audit readiness with continuous monitoring.
- Zero-trust architecture with multi-factor authentication.
- Role-Based Access Control (RBAC) ensuring users access only authorized data.
- 24/7/365 AI-driven threat detection and incident response.
While we take extensive precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5. HIPAA Compliance
When handling Protected Health Information on behalf of covered entities, we comply with the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act. We maintain appropriate Business Associate Agreements and implement the required administrative, physical, and technical safeguards.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Opt-Out: Opt out of promotional communications at any time by following the unsubscribe instructions in our emails.
- Data Portability: Request your data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us at privacy@techhalo.ai.
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete, the right to opt-out of the sale of personal information, and the right to non-discrimination for exercising your privacy rights.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.
9. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.
10. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where required by law, provide additional notice. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
TechHalo.ai
Email: privacy@techhalo.ai