Note: This is a courtesy translation. In case of any discrepancy, the Spanish version is legally binding.
Privacy Policy
Last Updated: January 14, 2026
This Privacy Policy explains how halot.io collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR).
Data We Collect
We collect the following types of data:
- Personal Information: Name, email address, password (encrypted)
- Profile Data: Display name, bio, hourly rate, specializations, company information
- Payment Information: Processed securely by Stripe. We store transaction IDs only.
- Usage Data: IP address, browser type, pages visited, time spent
How We Use Your Data
- Provide and improve our services
- Process payments and transactions
- Send email notifications about your account
- Match builders with suitable testers
- Prevent fraud and ensure platform security
- Comply with legal obligations
Data Sharing
We share your data only with:
- Stripe: Payment processing (PCI-DSS compliant)
- Supabase: Database and authentication (GDPR compliant)
- Email Service: Transactional emails only
- Legal Authorities: Only when required by law
CLAUSE P. Data Communication for Shipping Management
P.1. Legal Basis
When a job requires the shipment of a physical product to the Tester, we communicate your postal address (and, if necessary, your phone number) to the Client or to the logistics company. This communication is based on article 6.1.b) of the GDPR (contract execution), as it is strictly necessary for you to receive the product and perform the testing.
P.2. Data Communicated
We only share the following data with the Client or the logistics company:
- Full name (for delivery).
- Complete postal address.
- Phone number (optional, only if the messaging service requires it).
P.3. Use Limitation
The Client cannot use this data for other purposes (such as marketing, newsletters or business contact) without your express additional consent.
P.4. Right to Erasure
Once testing is completed and the product is returned (if applicable), you can request the Client to delete your shipping data from their systems. Contact us (privacy@halot.io) if you need to exercise this right.
Your Rights (GDPR)
Under GDPR, you have the right to:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing of your data
To exercise these rights, contact: privacy@halot.io
Cookies
We use cookies for: Cookie Policy for more details.
- Essential Cookies: Authentication and security (required)
- Analytics Cookies: Understand how users interact with our site (optional)
Data Security
We implement industry-standard security measures including encryption, secure servers, and regular security audits. However, no method is 100% secure.
Data Retention
We retain your data for as long as your account is active, plus 7 years for tax/legal purposes. You can request deletion at any time.
Children's Privacy
Our service is not intended for users under 18. We do not knowingly collect data from children.
Changes to Policy
We may update this policy occasionally. We will notify you of significant changes via email.
Contact Us
For privacy concerns or to exercise your rights, contact us at:
Email: privacy@halot.io
Data Protection Officer: dpo@halot.io