Privacy Policy

Halcyo ("we") runs an AI assistant that answers customer messages for service businesses in Bangladesh on Facebook Messenger, WhatsApp, Telegram and their websites. This policy explains what we collect, why, and your rights under the Bangladesh Personal Data Protection Act 2026 ("PDP Act").

1. Who this covers

• Visitors to halcyo.tech: people reading this website.
• Our clients: businesses that use Halcyo, and their staff who log in.
• Customers of our clients: people who chat with a business that uses Halcyo.

2. Website visitors

This website does not use cookies, advertising trackers or analytics that identify you. It stores one setting in your browser (light or dark mode). Our hosting providers (Vercel, Cloudflare) keep standard server logs, such as IP address and browser type, for security and are not used to profile you. If you message us on WhatsApp or by email, we use what you send only to reply.

3. People chatting with a business that uses Halcyo

The business you are chatting with decides how your information is used: it is the data controller. We process it only on that business's instructions, as its data processor.

• What we process: your messages and the replies; what you choose to share, such as your name, phone number, email, and details the business needs to help you (for example, the course you want, your pet's breed, or the day you want an appointment); your chat id on the channel you use; which ad brought you, if any; appointments you book.
• What we never ask for in chat: passport, national ID, bank or card details, medical reports or case documents. If you send card, national ID or passport numbers, the assistant hides them before storing. Please bring documents to your appointment instead.
• Why: to answer your questions, book appointments, let the business's staff follow up, and keep the service safe and working.
• Health and legal matters: the assistant does not give medical or legal advice and does not ask for symptoms, diagnoses or case details. Clinics and law firms use it only for booking and general questions about their services.
• Under 18: if you are under 18, please ask a parent or guardian to join your appointment.
• AI: you are chatting with an automated assistant. You can ask for a person at any time.

4. Our clients and their staff

We collect business contact details, staff names, emails and login data, billing records, and usage data (number of conversations, AI usage and costs) to provide the service, invoice, give support and keep accounts secure.

5. Who helps us run the service (sub-processors)

• Railway (application hosting) and Neon (database): servers in Singapore.
• Anthropic (Claude) and, if a client chooses it, Google (Gemini): AI models that write replies, in the United States. Under their commercial terms, the data is not used to train their models.
• Meta (Messenger, WhatsApp) and Telegram: the channels messages travel through.
• Resend: email notifications to staff. Vercel and Cloudflare: this website and network security.

Because some of these providers are outside Bangladesh, your information may be processed abroad. Each provider handles it under its own privacy and security terms, only to provide its part of the service.

6. How long we keep it

• Chat messages: deleted after 12 months, or sooner if the business chooses.
• Contact details: until the business deletes them or you ask for deletion.
• Usage records without message text: kept for billing and accounting.

7. Security

Data is encrypted in transit (HTTPS). Channel access tokens and secrets are encrypted at rest. Each client's data is kept separate, staff access is limited by role, and we keep backups and test restoring them.

8. Your rights

You can ask to see, correct or delete your information, or to stop its use. If you chatted with a business, write "delete my data" in the same chat or contact the business; we help them act on it. You can also email contact@halcyo.tech. We reply within 30 days.

9. We don't sell data

We never sell personal information or use it for advertising.

10. Changes

We will update this page when our practices change and show the new date at the top.