Effective date
September 10, 2026
Data Halo handles
- Account information, including your email address and assigned account identifier.
- Vault information, including login names, usernames, website addresses, encrypted passwords, and encrypted authenticator seeds.
- Workspace and security records, including memberships, invitations, permissions, activity events, and timestamps.
- Limited technical information needed to operate, secure, diagnose, and improve the reliability of the service.
How vault encryption works
Halo encrypts vault secrets on your device before they are stored by the service. Your master password, Account Key, usable vault keys, and decrypted vault secrets are not sent to Halo servers. Some vault metadata, such as item names, usernames, website addresses, workspace membership, and timestamps, is protected by account access controls rather than end to end encryption.
How data is used
Halo uses this data to authenticate you, synchronize your encrypted vault, enforce workspace permissions, provide password and verification code filling, prevent abuse, investigate security events, and respond to support requests.
Halo does not use your data for third party advertising or cross service tracking.
Service providers
Halo uses infrastructure and service providers to authenticate accounts, store encrypted data, deliver the application, and maintain service security. Providers process data only for those operational purposes and under their applicable terms and safeguards.
Retention and choices
Account and workspace data is retained while needed to provide Halo and meet security, legal, and operational obligations. Your organization administrator can change workspace access. Contact support to request help with account data or deletion. Some security and legal records may need to be retained after a request.
Security
Halo uses encryption in transit, client side encryption for vault secrets, access controls, and device security features. No system can guarantee absolute security. Keep your master password, Account Key, recovery code, and device passcode private.
Children
Halo is a business service and is not directed to children under 13.
Policy updates and contact
Halo may update this policy as the service changes. The effective date above will be revised when that happens. For privacy questions, visit the Halo support page.