Privacy Policy
Your privacy matters to us. This policy explains what information we collect, how we protect it, and the rights you have over it.
1. Overview
HALOFIX USA LLC ("HALOFIX," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, mobile application, and platform services (collectively, the "Service").
HALOFIX USA works to follow applicable laws. We write this policy in plain language so it is easy to understand.
2. What Data We Collect
We collect only the information needed to provide our services. We do not collect more than necessary.
Contact Info
- Examples
- Name, email address, phone number
- How We Use It
- To create your account and communicate with you
Address
- Examples
- Home address, service location
- How We Use It
- To match you with nearby heroes
Payment Method
- Examples
- Credit card last 4 digits (full numbers stored by Stripe)
- How We Use It
- To process payments for services
GPS Location
- Examples
- GPS coordinates during active booking
- How We Use It
- To track hero arrival and service location
Service Details
- Examples
- Photos of repair needs, job descriptions
- How We Use It
- To match you with the right hero
Communications
- Examples
- Messages, calls, support tickets
- How We Use It
- To coordinate service and provide support
Device and website data
- Examples
- IP address, browser, pages visited, cookies
- How We Use It
- To run, secure and improve the website (ad measurement: see Section 4)
| Data Type | Examples | How We Use It |
|---|---|---|
| Contact Info | Name, email address, phone number | To create your account and communicate with you |
| Address | Home address, service location | To match you with nearby heroes |
| Payment Method | Credit card last 4 digits (full numbers stored by Stripe) | To process payments for services |
| GPS Location | GPS coordinates during active booking | To track hero arrival and service location |
| Service Details | Photos of repair needs, job descriptions | To match you with the right hero |
| Communications | Messages, calls, support tickets | To coordinate service and provide support |
| Device and website data | IP address, browser, pages visited, cookies | To run, secure and improve the website (ad measurement: see Section 4) |
We do not collect sensitive information like Social Security numbers, health records, or biometric data unless legally required for specific hero verification purposes.
3. How We Use Data
We use your personal information to:
- Provide Services: Create your account, process bookings, and coordinate with heroes
- Match You with Heroes: Use your location and service needs to find available, qualified heroes
- Communicate: Send booking confirmations, arrival notifications, and service updates
- Process Payments: Handle billing and payments through our secure payment processor
- Ensure Compliance: Meet legal requirements, verify a hero's state license where their trade requires one, and prevent fraud
- Improve Our Service: Analyze usage patterns to make our platform better (analytics tools load only after you accept analytics cookies)
- Measure our ads: see Section 4.
We only use your data for the purposes listed here. If we ever want to use it for something else, we will ask for your permission first.
4. No Lead Selling
We Never Sell Your Personal Data
We never sell or rent your personal data, and we never give it to lead brokers.
Advertising cookies (your choice). If you accept marketing cookies, the advertising tools named in Section 9 receive device and browsing data from our website to measure our ads. HALOFIX treats this as "sharing". It is off unless you accept marketing cookies, and you can turn it off any time: change your cookie choice, use our Do Not Sell or Share page, or send a Global Privacy Control signal (Section 15).
We only share your data in these limited circumstances:
- With Your Assigned Hero: When a job is offered, the Hero sees the service, your city and ZIP, the urgency and the estimate, never your street address. Your street address is shown to your assigned Hero only once the Hero starts traveling to your job, and never earlier than 3 hours before the appointment. Messages and calls between you and the Hero go through HALOFIX USA.
- Service Providers: We use trusted companies (like Stripe for payments, Twilio for texts) that help us run our platform. Each one is named, with its purpose, in Third-Party Data Processors below.
- With advertising tools, only as described above.
- Legal Requirements: We may share data if required by law, such as to comply with a court order or government request
- Emergencies: To protect your safety or the safety of others in an emergency
5. GPS & Location Data
We collect GPS location data, but only when you have an active booking. Here is how it works:
- When: dispatch updates is active only during the period between hero dispatch and job completion
- What: We track the hero's location to show you their estimated arrival time
- How Long: GPS coordinates are stored for 10 minutes in temporary memory (Redis cache) and then automatically deleted
- Permanent Records: We keep only milestone events (job started, hero arrived, job completed) - not continuous location history
Your Control
You can disable location sharing in your device settings, but this may prevent real-time hero tracking features from working.
6. AI & Automated Decision Making
We use artificial intelligence to help improve our services. Here is what you should know:
- AI Estimates: When you upload photos for an estimate, our AI analyzes them to provide an approximate cost range. These are estimates only - final quotes come from heroes after inspection.
- Assigning a Hero: Your job is offered to every Hero who matches your service and area at the same time; the first to accept is assigned.
- Fraud Detection: Automated systems help us detect suspicious activity to protect your account.
- Human Review: Important decisions (like account suspension or dispute resolution) always involve human review.
You have the right to request human review of any automated decision that significantly affects you. Contact us at legal@halofixusa.com to request a human review.
7. Call Recording Notice
Call Recording Notice
Calls may be recorded. By continuing, you consent to recording.
We tell every caller that calls may be recorded. Here is how it works:
- Notice: An automated message plays at the start of each call informing you that the call may be recorded
- Purpose: We record calls for quality assurance, training, and to resolve disputes
- Retention: Call recordings are kept 30 days after the call (longer only while a dispute, warranty claim, chargeback or legal hold on the linked booking is open). The written transcript of an AI-line call is a separate record and stays with the booking (see the retention schedule below)
- Access: You may request a copy of recordings involving you by contacting legal@halofixusa.com
If you do not wish to be recorded, you may end the call and contact us via email or through our website chat.
8. SMS/Text Messaging Terms
By providing your phone number and checking the SMS consent box during booking, you agree to receive transactional text messages from HALOFIX USA LLC related to your home service bookings. These messages may include:
- Booking confirmations and appointment reminders
- Hero dispatch and arrival notifications
- Service completion and payment updates
- Digital warranty and receipt delivery
Message frequency varies based on your service bookings. Message and data rates may apply. You can opt out at any time by replying STOP to any message. For help, reply HELP or contact us at support@halofixusa.com or call (786) 550-2580.
Your consent to receive SMS is not a condition of purchasing services. We will never share your phone number with third parties for marketing purposes.
If you have separately opted in to receive promotional communications, HALOFIX USA LLC may also send you promotional SMS messages including seasonal maintenance reminders, exclusive discounts for existing customers, and warranty renewal offers. Promotional SMS consent is separate from transactional SMS consent and is not required to use our services.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All SMS opt-in data is retained solely by HALOFIX USA LLC and is not shared with service providers (Heroes) or partners for their independent marketing use.
Supported carriers include but are not limited to: AT&T, T-Mobile, Verizon, Sprint, and other major US carriers.
How to Opt Out of SMS
- Reply STOP to any message to unsubscribe immediately
- Reply HELP to any message for assistance
- Email: support@halofixusa.com
- Call: (786) 550-2580
- You will receive a one-time confirmation message after opting out
9. Third-Party Data Processors
These companies process personal information for us so we can run HALOFIX. Each one works for us under its own service terms; the table names what each does and what information it receives.
- Purpose
- CDN, DDoS protection, DNS, Turnstile bot protection on public forms
- Data Shared
- IP address, request metadata, bot-check signals
- DPA Status
- standard terms
- Purpose
- Speech-to-text transcription for voice calls
- Data Shared
- call audio, call transcript, call metadata
- DPA Status
- standard terms
- Purpose
- Text-to-speech voice responses
- Data Shared
- generated response text, call audio metadata
- DPA Status
- standard terms
- Purpose
- Advertising conversion tracking; loaded only after marketing cookie consent
- Data Shared
- IP address, device info, browsing behavior
- DPA Status
- standard terms
- Purpose
- Website analytics and conversion tracking; the browser tag is delivered through Google Tag Manager only after analytics cookie consent, and a sanitized copy of first-party events can be sent server-side when configured
- Data Shared
- IP address, device info, browsing behavior, event data
- DPA Status
- standard terms
- Purpose
- Address autocomplete, address geocoding, and job tracking maps
- Data Shared
- IP address, street address entered
- DPA Status
- standard terms
- Purpose
- Tag container loaded only after analytics cookie consent; the tags it fires are configured inside the container
- Data Shared
- IP address, device info, browsing behavior
- DPA Status
- standard terms
- Purpose
- Workflow automation (booking notifications, CRM sync)
- Data Shared
- name, email, phone, booking details
- DPA Status
- standard terms
- Purpose
- Advertising measurement; loaded only after marketing cookie consent
- Data Shared
- IP address, device info, browsing behavior
- DPA Status
- standard terms
- Purpose
- Website behavior analytics; loaded only after analytics cookie consent
- Data Shared
- IP address, device info, browsing behavior
- DPA Status
- standard terms
- Purpose
- Transactional email delivery
- Data Shared
- email address, email subject and body
- DPA Status
- standard terms
- Purpose
- Error monitoring and performance tracing
- Data Shared
- error and stack data, request metadata, browser details, masked session replay (captured when an error occurs)
- DPA Status
- standard terms
- Purpose
- Payment processing, Hero payouts (Connect)
- Data Shared
- name, email, payment method, bank account (Heroes)
- DPA Status
- standard terms
- Purpose
- Database, authentication, file storage
- Data Shared
- all platform data (encrypted at rest)
- DPA Status
- standard terms
- Purpose
- SMS notifications, verification, and phone/voice transport
- Data Shared
- phone number, SMS content, call metadata, call audio transport
- DPA Status
- standard terms
- Purpose
- Redis for rate limiting, phone verification codes, Hero GPS location, and AI chat session state
- Data Shared
- IP address, phone number, Hero GPS location, chat session state
- DPA Status
- standard terms
- Purpose
- Application hosting, edge functions, image optimization
- Data Shared
- IP address, request metadata, server logs
- DPA Status
- standard terms
Vercel AI Gateway (OpenAI, Google Gemini)
- Purpose
- AI model routing for the chat assistant, voice agent, and photo-based estimates (OpenAI GPT-4o mini, Google Gemini 2.0 Flash)
- Data Shared
- chat messages, call transcript text, job photos
- DPA Status
- standard terms
| Processor | Purpose | Data Shared | DPA Status |
|---|---|---|---|
| Cloudflare | CDN, DDoS protection, DNS, Turnstile bot protection on public forms | IP address, request metadata, bot-check signals | standard terms |
| Deepgram | Speech-to-text transcription for voice calls | call audio, call transcript, call metadata | standard terms |
| ElevenLabs | Text-to-speech voice responses | generated response text, call audio metadata | standard terms |
| Google Ads | Advertising conversion tracking; loaded only after marketing cookie consent | IP address, device info, browsing behavior | standard terms |
| Google Analytics | Website analytics and conversion tracking; the browser tag is delivered through Google Tag Manager only after analytics cookie consent, and a sanitized copy of first-party events can be sent server-side when configured | IP address, device info, browsing behavior, event data | standard terms |
| Google Maps | Address autocomplete, address geocoding, and job tracking maps | IP address, street address entered | standard terms |
| Google Tag Manager | Tag container loaded only after analytics cookie consent; the tags it fires are configured inside the container | IP address, device info, browsing behavior | standard terms |
| Make (Integromat) | Workflow automation (booking notifications, CRM sync) | name, email, phone, booking details | standard terms |
| Meta Pixel | Advertising measurement; loaded only after marketing cookie consent | IP address, device info, browsing behavior | standard terms |
| Microsoft Clarity | Website behavior analytics; loaded only after analytics cookie consent | IP address, device info, browsing behavior | standard terms |
| Resend | Transactional email delivery | email address, email subject and body | standard terms |
| Sentry | Error monitoring and performance tracing | error and stack data, request metadata, browser details, masked session replay (captured when an error occurs) | standard terms |
| Stripe | Payment processing, Hero payouts (Connect) | name, email, payment method, bank account (Heroes) | standard terms |
| Supabase | Database, authentication, file storage | all platform data (encrypted at rest) | standard terms |
| Twilio | SMS notifications, verification, and phone/voice transport | phone number, SMS content, call metadata, call audio transport | standard terms |
| Upstash | Redis for rate limiting, phone verification codes, Hero GPS location, and AI chat session state | IP address, phone number, Hero GPS location, chat session state | standard terms |
| Vercel | Application hosting, edge functions, image optimization | IP address, request metadata, server logs | standard terms |
| Vercel AI Gateway (OpenAI, Google Gemini) | AI model routing for the chat assistant, voice agent, and photo-based estimates (OpenAI GPT-4o mini, Google Gemini 2.0 Flash) | chat messages, call transcript text, job photos | standard terms |
Our payment processor, Stripe, sets two cookies (__stripe_mid and __stripe_sid) on our website to prevent payment fraud.
10. Communications Monitoring
In-platform messages between Residents and Heroes are monitored by automated systems to enforce our Anti-Circumvention Policy. The system filters attempts to share personal contact information (phone numbers, email addresses, physical addresses, URLs, social media handles, and payment app handles) to protect both parties and maintain platform integrity.
Flagged messages are reviewed by automated systems and, where necessary, human moderators. Message content is retained per our data retention schedule below.
11. Data Retention
We keep your data only as long as necessary for business, legal, and tax purposes. These are the retention periods HALOFIX applies:
A background report a Hero chose to upload
- Retention Period
- While the Hero account is open; deleted when the Hero withdraws it or deletes the account
- Why we keep it
- The Hero chose to share it
Account credentials
- Retention Period
- Until account deletion (erased when the deletion runs; no grace period)
- Why we keep it
- Service provision
Booking & transaction records
- Retention Period
- 7 years; if you delete your account sooner, the records are kept with everything that identifies you removed
- Why we keep it
- HALOFIX record-keeping policy (the Warranty Vault period); dispute and warranty evidence; HALOFIX's accounts and the Hero's earnings records
Call recordings (audio)
- Retention Period
- 30 days after the call (longer only while a dispute, warranty claim, chargeback or legal hold on the linked booking is open)
- Why we keep it
- Service delivery, quality assurance, dispute evidence, and follow-up about home services; the call-start notice tells the caller the call may be recorded
Call transcripts
- Retention Period
- 7 years, or until you delete your account, whichever is first
- Why we keep it
- Service delivery, dispute evidence, and the booking record
Chat / messaging logs
- Retention Period
- 44 days after job completion (held while any dispute/claim is open)
- Why we keep it
- Covers the 30-day dispute window plus the 14-day evidence window; PII is blocked from chat at send time
Consent & audit records
- Retention Period
- 7 years; if you delete your account sooner, the records are kept with everything that identifies you removed
- Why we keep it
- Proof of consent and an audit trail of what was agreed to; HALOFIX record-keeping policy
Cookies & analytics data
- Retention Period
- 26 months from last interaction (not linked to your account)
- Why we keep it
- Google Analytics default retention; industry standard
Hero insurance documents
- Retention Period
- While the Hero account is open (the files are deleted when the account is deleted)
- Why we keep it
- Insurance verification and claims coverage while the Hero is active
Payment method tokens
- Retention Period
- Until user removes or account deletion
- Why we keep it
- Payments (card numbers are never stored by us)
Photos uploaded by Residents
- Retention Period
- 7 years, or until you delete your account, whichever is first
- Why we keep it
- Warranty Vault documentation; dispute resolution
Profile information
- Retention Period
- Until account deletion (erased when the deletion runs; no grace period)
- Why we keep it
- Service provision
Reviews & ratings
- Retention Period
- Until you delete your account (public content until then)
- Why we keep it
- Consumer transparency; deleted when you delete your account
Server / access logs
- Retention Period
- 12 months (not linked to your account)
- Why we keep it
- Security incident investigation; abuse prevention
| Data Category | Retention Period | Why we keep it |
|---|---|---|
| A background report a Hero chose to upload | While the Hero account is open; deleted when the Hero withdraws it or deletes the account | The Hero chose to share it |
| Account credentials | Until account deletion (erased when the deletion runs; no grace period) | Service provision |
| Booking & transaction records | 7 years; if you delete your account sooner, the records are kept with everything that identifies you removed | HALOFIX record-keeping policy (the Warranty Vault period); dispute and warranty evidence; HALOFIX's accounts and the Hero's earnings records |
| Call recordings (audio) | 30 days after the call (longer only while a dispute, warranty claim, chargeback or legal hold on the linked booking is open) | Service delivery, quality assurance, dispute evidence, and follow-up about home services; the call-start notice tells the caller the call may be recorded |
| Call transcripts | 7 years, or until you delete your account, whichever is first | Service delivery, dispute evidence, and the booking record |
| Chat / messaging logs | 44 days after job completion (held while any dispute/claim is open) | Covers the 30-day dispute window plus the 14-day evidence window; PII is blocked from chat at send time |
| Consent & audit records | 7 years; if you delete your account sooner, the records are kept with everything that identifies you removed | Proof of consent and an audit trail of what was agreed to; HALOFIX record-keeping policy |
| Cookies & analytics data | 26 months from last interaction (not linked to your account) | Google Analytics default retention; industry standard |
| Hero insurance documents | While the Hero account is open (the files are deleted when the account is deleted) | Insurance verification and claims coverage while the Hero is active |
| Payment method tokens | Until user removes or account deletion | Payments (card numbers are never stored by us) |
| Photos uploaded by Residents | 7 years, or until you delete your account, whichever is first | Warranty Vault documentation; dispute resolution |
| Profile information | Until account deletion (erased when the deletion runs; no grace period) | Service provision |
| Reviews & ratings | Until you delete your account (public content until then) | Consumer transparency; deleted when you delete your account |
| Server / access logs | 12 months (not linked to your account) | Security incident investigation; abuse prevention |
You can request deletion by exercising your right to deletion (see "Your Rights" below). What remains: Proof of your consents and signatures, and our call-consent, text message, email, security and compliance logs, are kept without your name, phone number, email, address or IP address. They are linked to your request only by a coded reference. Booking and payment records are kept without anything that identifies you, for our accounting and for the earnings records of the Hero who did the work. The tax forms we are required to keep for Heroes and Partners are kept. A record that you asked for this deletion is kept.
12. Data Security
We take security seriously and use industry-standard measures to protect your data:
- Database Security: We use Supabase with Row-Level Security (RLS) to ensure users can only access their own data
- Access Controls: Strict role-based access limits who at HALOFIX can view personal data
- Administrative Access: Restricted to authorised staff roles and recorded in an audit trail
No system is 100% secure, but we work hard to protect your information. If you discover a security issue, please report it responsibly to legal@halofixusa.com.
13. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Ask us to fix inaccurate or incomplete information
- Deletion: Request deletion of your account and all of your personal information. When nothing is open on your account, it is deleted at once. If a payment, payout, commission or dispute is still open, nothing is deleted until it has settled; then it is deleted automatically. What remains: Proof of your consents and signatures, and our call-consent, text message, email, security and compliance logs, are kept without your name, phone number, email, address or IP address. They are linked to your request only by a coded reference. Booking and payment records are kept without anything that identifies you, for our accounting and for the earnings records of the Hero who did the work. The tax forms we are required to keep for Heroes and Partners are kept. A record that you asked for this deletion is kept.
- Portability: Request your data in a machine-readable format
- Opt Out: Stop receiving marketing communications at any time
- Human Review: Request a human review of any automated decision
How to Exercise Your Rights
- Online: Account Settings → Privacy
- Email: legal@halofixusa.com
- Response Time: We respond within 45 days (may extend by 45 days for complex requests)
- Verification: We will verify your identity before processing requests to protect your privacy
These rights are the same for every user, wherever you live. You can also use our Do Not Sell or Share page. HALOFIX never treats you differently for using any of these rights.
14. Children's Privacy
No Users Under 13
HALOFIX is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use our platform or provide any personal information.
HALOFIX USA works to follow applicable laws.
If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us immediately at legal@halofixusa.com. We will delete the information promptly.
15. Global Privacy Control (GPC)
HALOFIX USA honors the Global Privacy Control (GPC) browser signal. When we detect a GPC signal from your browser, we treat it as a valid opt-out of the sale or sharing of your personal information.
You can enable GPC in supported browsers (Firefox, Brave, DuckDuckGo) or via browser extensions. No additional action is required on your part.
16. Florida Residents' Rights
Your Data Rights
You have these rights regarding your personal information:
- Data Security: We implement reasonable safeguards to protect your personal information from unauthorized access, use, or disclosure
- Breach Notification: If we learn of a security breach that affects your personal information, we tell you without unreasonable delay, and HALOFIX's policy is to do so no later than 30 days after we discover it. Where a government agency must also be told, we tell it too.
- Right to Know: You have the right to know what personal information we collect and how we use it
- Access and Correction: You may request access to your personal information and correction of any errors
Reporting a Breach: To report a suspected breach: legal@halofixusa.com or legal@halofixusa.com.
17. Background Checks and Consumer Reports
HALOFIX USA LLC does not order, procure, or pay for consumer reports, investigative consumer reports, criminal background checks, or registry searches about people who apply to join HALOFIX as a Hero (independent service professional). We have not engaged a consumer reporting agency or a screening vendor for this purpose.
What we do verify is a Hero's state professional license with the Florida Department of Business and Professional Regulation where their trade requires one, and their general liability insurance certificate.
A Hero may choose to send us a background report they already hold about themselves. Doing so is voluntary: we do not require it and we do not ask anyone to obtain one. The full notice covering how such a report is handled, and your rights if you provide one, is at /fcra-disclosure.
18. Right of Publicity
Default behavior: Profile photos, names and content you upload are used inside the platform for booking and reviews. Using your name, photo, before-and-after photos or review in HALOFIX USA marketing needs your separate opt-in.
Where HALOFIX USA LLC uses a Resident's or Hero's name, photograph, profile picture, before-and-after work photos, review excerpts, or other likeness in marketing materials (including the public website, social media, advertising, or case studies), we obtain your express consent in advance.
You may revoke consent for prospective marketing use at any time by emailing legal@halofixusa.com. Revocation does not affect materials already printed or published before we receive your request, but we will not produce new marketing materials using your likeness after revocation.
19. California Residents' Rights
California Privacy Rights
California residents have the right to:
- Know what personal information we collect, use, and disclose
- Delete personal information, subject to legal exceptions
- Opt out of the sale or sharing of personal information
- Correct inaccurate personal information
- Limit use of sensitive personal information
- Non-discrimination for exercising these rights
To exercise these rights, visit our Do Not Sell or Share page or email legal@halofixusa.com. We respond within 45 days.
20. Policy Changes
We may update this Privacy Policy from time to time. When we make material changes:
- We will post the updated policy on this page with a new "Last updated" date
- We will notify you via email or through the platform at least 30 days before material changes take effect
- For significant changes affecting how we use your data, we may request your renewed consent
Your continued use of HALOFIX after the effective date of updated terms constitutes acceptance of the changes.
21. Contact for Privacy Requests
If you have questions about this Privacy Policy, want to exercise your privacy rights, or need to report a privacy concern:
Privacy Officer
Email: legal@halofixusa.com
Online: Account Settings → Privacy
Response Time: 45 days (may extend for complex requests)
For general support questions, please use the Help Center or contact support@halofixusa.com.
Related legal documents:
Last updated October 2026
