Privacy Policy
Shermar Trades LLC, doing business as HALO ("HALO," "we," "us," or "our"), operates the reputation management platform available at halocrm.app. This Privacy Policy explains what information we collect, how we use it, and the rights our clients and their customers have.
We are based in Philadelphia, Pennsylvania, USA. All data we process is governed by the laws of the Commonwealth of Pennsylvania and applicable U.S. federal law.
1. Who this policy applies to
This policy applies to three categories of people:
- Clients — small business owners who sign up for HALO and connect their Google Business Profile, Yelp, Facebook, or phone system.
- Client customers — the end consumers who leave reviews on our clients' business profiles, or who call our clients' phone lines and interact with our AI Receptionist.
- Website visitors — anyone browsing halocrm.app without signing up.
2. Information we collect
From clients
- Account details: name, business name, email, phone number, business address.
- Billing details: processed through Stripe; we never store your full card number.
- Business profile connections: after you grant OAuth permission, we receive the data outlined in Section 4.
- Voice-training inputs: tone preferences, sample responses, brand voice guidelines you provide.
From client customers
- Review content (name, star rating, review text, timestamp) — as it is publicly available on Google, Yelp, or Facebook.
- Phone call data for clients using the AI Receptionist feature: caller phone number, call recording (with state-law-compliant disclosure), transcript.
- SMS responses to review-request messages, if applicable.
From website visitors
- Standard server logs: IP address, browser type, referring URL, pages viewed.
- Cookies used to remember UI preferences and measure site traffic.
3. How we use information
- Deliver the services our clients sign up for — reputation management, AI-assisted review responses, AI receptionist call handling, weekly profile posts, and analytics.
- Communicate with clients about their account, service updates, and support requests.
- Improve the product — measuring which features clients use and refining response quality.
- Comply with legal obligations and protect against fraud or abuse.
4. Google Business Profile data — Limited Use disclosure
HALO integrates with the Google Business Profile API through OAuth. This integration is governed by the Google API Services User Data Policy, including its Limited Use requirements.
When a client grants HALO OAuth permission, we access the following scopes:
business.manage— read business location info (name, address, hours, categories, attributes), read and post Google Posts, read and respond to reviews, read and answer Q&A, read and upload photos.
How we use Google data:
- To post weekly updates to the client's Business Profile.
- To draft replies to reviews for the client's human approval.
- To monitor for new reviews and alert the client.
- To report on the profile's performance month over month.
What we will never do with Google data:
- Sell, rent, or transfer it to third parties.
- Use it to train machine-learning models beyond the direct purpose of drafting responses for the client who owns the profile.
- Use it for advertising — ours or anyone else's.
- Allow humans to read Google user data except (a) with the user's explicit consent, (b) as required by law, (c) when necessary for security purposes (debugging or abuse response), or (d) in aggregated, de-identified form for analytics and service improvement.
Clients may revoke HALO's access to their Google Business Profile at any time through their Google account security settings, and request deletion of any stored Google data via our Data Rights page.
5. Cookies and tracking
We use functional cookies to keep you signed in and remember your preferences. We use privacy-preserving analytics (server-side logging only) to understand aggregate traffic patterns. We do not use advertising trackers or retargeting pixels on pages that display Google user data.
6. Data retention
- Active clients: data is retained as long as the account is active.
- Cancelled accounts: data is retained for 30 days after cancellation to allow for account reactivation, then permanently deleted.
- Call recordings (AI Receptionist): retained for 90 days then automatically deleted unless the client opts into longer retention.
- Review data: deleted within 30 days of the client disconnecting the associated Business Profile.
7. Subprocessors we use
HALO relies on these third parties to operate. Each is contractually bound to meet security and privacy standards equivalent to this policy.
- Netlify — web hosting and serverless functions (United States).
- Anthropic (Claude API) — AI response drafting. Anthropic does not train on our API data per its enterprise zero-retention terms.
- Twilio — phone number provisioning and call routing for the AI Receptionist.
- Stripe — payment processing. We never see or store full card numbers.
- Google — Business Profile API (per OAuth consent).
8. Your rights
Depending on where you live, you may have the right to:
- Request a copy of the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Withdraw OAuth consent for connected services (Google, Yelp, Facebook).
- Object to certain processing or request restriction.
- Lodge a complaint with a supervisory authority.
To exercise any of these, visit our Data Rights page or email shermar@halocrm.app. We respond within 7 business days.
9. Children's privacy
HALO is a B2B product. Our services are not directed to anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us data, email us and we will delete it.
10. Changes to this policy
We may update this policy to reflect changes in the service or legal requirements. The "Last updated" date above will always reflect the current version. Material changes will be communicated to active clients by email at least 30 days before taking effect.
11. Contact
Shermar Trades LLC · DBA HALO
Philadelphia, PA, United States
Email: shermar@halocrm.app
Phone: (267) 667-0758