Privacy policy

1. Our role in processing

We are a controller of subscriber account data: registration, contact, billing and platform usage details.

We are a processor of the data subscribers enter about their own employees and customers inside the systems. The subscriber is the controller of that data; we process it on their instructions and only as needed to run the service.

2. What we collect

We neither collect nor store your card details. Payment happens at Paddle, and card data never passes through our servers.

• Account data: name, email, mobile number, company name, country and city.
• Subscription data: package, systems, billing cycle and renewal dates.
• Technical data: IP address, browser and device type, sign-in logs and trusted devices.
• Usage logs: actions inside the platform, for security, auditing and error tracing.
• Anything you send us voluntarily through site forms or support tickets.

3. Why we process it

• To provide and operate the service and provision your account and systems.
• To manage subscriptions, billing and renewals.
• To provide technical support and answer your questions.
• To protect the platform: fraud, abuse and unauthorised access detection.
• To improve the product through aggregated usage analysis.
• To meet regulatory and accounting obligations.
• To send operational notifications about your account — these cannot be switched off, as they are part of the service.

4. Legal basis

We process your data on the basis of: performance of our contract with you, compliance with a legal obligation, our legitimate interest in securing and improving the platform, or your consent where processing is for marketing.

5. Sharing

We do not sell or rent your personal data. We share it only as strictly needed, with:

• Infrastructure providers (hosting, backup) under processing agreements.
• Paddle, for payment, invoicing and tax processing.
• Messaging providers (email, SMS, push) to deliver your account notifications.
• Government or judicial authorities where there is a binding legal request.

6. Transfers outside your country

Operating some services — payment processing in particular — may require limited data to be transferred outside your country. Where that happens we apply appropriate contractual and technical safeguards as required by the data protection laws applicable in your country.

7. Retention and deletion

We retain account data for as long as the subscription is active.

After it ends we retain data for a period that lets you recover your account or export your data; that period is shown inside the platform under subscription lifecycle settings.

Data we are legally required to keep — accounting records, for instance — is retained for the statutory period even after deletion.

8. Security

• All traffic encrypted over HTTPS.
• Passwords stored hashed with modern algorithms — never in plain text, and not recoverable.
• Each subscriber’s data logically isolated, with fine-grained per-screen access control.
• Audit logging, sign-in device tracking, and alerts on sign-in from a new device.
• Regular backups.

9. Your rights

Under the data protection laws applicable in your country you have the right to: be informed that your data is collected, access it, obtain a copy in a readable format, have it corrected, have it destroyed when no longer needed, and withdraw consent to marketing processing.

To exercise any of these rights, write to privacy@haleif.com. We respond within the statutory period and may ask you to verify your identity first.

If our response does not satisfy you, you may complain to the competent data protection authority.

10. Cookies

We use cookies that are strictly necessary: session handling, remembering your language, and protecting forms against forgery. These cannot be disabled, because the service does not work without them.

If we later use analytics or marketing cookies, we will not enable them without your consent.

11. Children’s privacy

The service is aimed at businesses, is not directed at anyone under eighteen, and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy and will notify you of material changes before they take effect. The last-updated date appears at the top of this page.