Halneo ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our platform at halneo.com.
1. Information We Collect
1.1 Information You Provide
- Account information: Name, email address, password (stored as a secure hash), phone number
- Business information: Business name, address, logo, product listings, pricing, shop description
- Payment information: Subscription plan selection. Card and payment details are processed directly by PayHere — we do not store your card details
- Communications: Messages you send to our support team
1.2 Information Collected Automatically
- Shop analytics: Visitor IP addresses, device type, operating system, browser, traffic source, and pages visited on your public shop
- Usage data: Features used, pages visited within the dashboard, session duration
- Log data: Server logs including access times and error reports
1.3 Customer Order Data
When your customers place orders through your Halneo shop, we collect their name, phone number, delivery address, and order details. This data is stored on your behalf and is accessible only to you (the business owner) and Halneo.
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Create and manage your account | Name, email, password |
| Operate your online shop | Business info, product listings, shop settings |
| Process subscription payments | Plan selection, email (via PayHere) |
| Provide AI marketing features | Product names/descriptions sent to AI APIs |
| Show you analytics about your shop | Visitor data, order data |
| Send account and order notifications | Email address |
| Improve and secure the platform | Usage data, log data |
3. Third-Party Services
We use the following third-party services to operate Halneo. Each has its own privacy policy:
- PayHere — payment processing for subscriptions (payhere.lk/privacy)
- Google Gemini — AI poster generation and copywriting features. Product names and descriptions may be sent to Google's API (Google Privacy Policy)
- HuggingFace — AI image generation for Growth and Pro plan users
- Fal.ai — high-quality image generation for Pro plan users
- Hostinger — cloud hosting for halneo.com. Your data is stored on servers in the EU region
We do not sell your personal data to any third party.
4. Data Storage and Security
- All data is transmitted over HTTPS (TLS encryption)
- Passwords are hashed using bcrypt and are never stored in plain text
- Access to production databases is restricted to authorised personnel only
- We perform regular backups of all business and order data
- Session tokens use HttpOnly, Secure cookies with SameSite protection
While we take reasonable measures to protect your data, no system is completely secure. We will notify you promptly in the event of a data breach that affects your personal information.
5. Data Retention
- Active accounts: Data is retained for as long as your account is active
- Deleted accounts: Data is retained for 30 days after deletion to allow recovery, then permanently deleted
- Analytics data: Shop visitor data is retained for 12 months
- Order data: Retained for 3 years for business record-keeping purposes
6. Your Rights
You have the right to:
- Access: Request a copy of all personal data we hold about you
- Correction: Update or correct inaccurate information from your dashboard settings
- Deletion: Request deletion of your account and associated data
- Export: Download your business and order data in CSV format from your dashboard
- Objection: Opt out of non-essential communications at any time
To exercise any of these rights, contact us at info@halneo.com.
7. Cookies
Halneo uses the following cookies:
- Session cookie: Required for login and dashboard access. Expires when you close your browser or after 60 minutes of inactivity.
- Remember-me cookie: Optional, set when you tick "Remember me" at login. Valid for 30 days, stored as a secure HttpOnly cookie.
We do not use advertising or tracking cookies. We do not use Google Analytics or Facebook Pixel.
8. Children's Privacy
Halneo is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice in your dashboard. Your continued use of Halneo after such notice constitutes acceptance of the updated policy.
10. Contact Us
For any privacy-related questions or requests:
- Email: info@halneo.com
- Website: halneo.com/contact
- Address: Halneo, Sri Lanka