Privacy Policy

1. Information We Collect

Hala AI collects only the minimum necessary information required to provide our enterprise AI services. This includes:

• Account Information: Name, professional email, and organizational role.
• Interaction Data: Transcripts of AI-driven voice or text interactions.
• Metadata: IP addresses and device identifiers for security logging.

2. How We Use Your Data

Usage is limited to processing requests to operate your assistant, maintaining the quality and reliability of the service, and providing technical support upon request. Data obtained through connected Google services is used only to operate the relevant feature (such as calendar scheduling) and is never used to train, develop, or improve any machine-learning or AI model.

3. Data Storage & Security

4. Healthcare & sensitive data

Customer conversation content is not used to train, develop, or improve any third-party foundation models. It is processed only to operate your AI assistant.

5. Google Calendar data

When you connect a Google account, Hala AI requests access to your Google Calendar to provide appointment booking:

• We use the calendar.events.freebusy scope to read your availability so the assistant offers only open time slots and avoids double-booking.
• We use the calendar.events scope to create, update, cancel, and read appointments booked through Hala AI.

We access this data only to provide these scheduling features. We do not sell it, and we do not share it with third parties except as needed to operate the service (for example, our hosting providers).

Hala AI never uses Google user data to train, develop, or improve any machine-learning or AI model, including foundational models. You can disconnect your Google account at any time from your dashboard, which revokes Hala AI's access.

Hala AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Bot protection (Cloudflare Turnstile)

To protect our demo and forms from automated abuse, we use Cloudflare Turnstile. Turnstile processes limited client-side signals, such as IP address, browser and device characteristics (including TLS fingerprint and user-agent), and the page's site key, solely to distinguish humans from bots. This processing is described in Cloudflare's Turnstile Privacy Addendum. We do not use these signals to identify, profile, or track you.

5. Controller & processor roles

For your Hala account (business profile, billing, staff users), Hala AI acts as the data controller.

For end-customer conversations processed through your connected channels, Hala acts as a processor on your behalf. You remain responsible for lawful bases and notices to your customers.

7. Regional data protection (GDPR, KVKK & PDPL)

Built to support GDPR, KVKK, and PDPL requirements. You may exercise the data-subject rights in Your Rights below—including access, correction, and deletion—or contact info@halaai.app.

6. Your rights