Privacy

halcyon is a general AI agent that researches, drafts, plans, and codes. This policy is a plain account of what we do with your information — what we hold, why we hold it, and what remains yours to control. We wrote it to be read, not skimmed past.

It covers two things: the marketing website you are reading now, and the halcyon product itself. Where the two behave differently, we say so plainly rather than blur the line.

We collect two kinds of information.

• Given by you — inside the product: the text of your sessions and prompts, the documents you upload, the code you share, and the email address you sign in with. Nothing more is asked of you.
• Collected automatically — on this marketing website only, we load PostHog product analytics, which sets cookies and records how the pages are used: page views, clicks, approximate location derived from your IP address, and the browser and device you arrive with. The product itself — the agent that does your work — runs without sending this kind of telemetry.

Your sessions are used to answer your questions inside your sessions — to read the sources, hold the draft, run the code you asked for. They are not used to train models for anyone else. The email you sign in with authenticates you and lets us reach you about your account.

Website analytics are used only in aggregate: to understand which pages are read and where the writing loses people. They are never used to build a profile that follows you across the web.

We do not sell your data, and we do not share your session content for anyone else's purposes. A small number of subprocessors help us run the service, each bound by contract to handle data only as we instruct:

• Web hosting — the infrastructure the product and this site run on.
• A large-language-model inference provider — processes your prompts to produce the agent's replies, and is contractually bound not to retain them.
• PostHog — product analytics for this marketing website (host us.i.posthog.com), which processes website usage data on our behalf.

This marketing website uses cookies and similar technologies through PostHog, our analytics provider. They let us count visits and understand how the pages are read. You can refuse or clear these cookies in your browser at any time; the site stays fully readable without them.

The product itself relies only on what is strictly necessary to keep you signed in. It does not load behavioural analytics or third-party trackers.

We protect your information with reasonable, current measures: encryption in transit (TLS), access controls that limit who can reach stored data, and retention kept only as long as your work needs it. Backups guard against loss and are subject to the same controls.

No system is perfect, and we do not claim otherwise. We claim only that we take care.

Under applicable data-protection laws, such as the GDPR and the LGPD, you hold rights over your information: to access what we hold, to correct it, to delete it, to receive it in a portable form, to object to certain processing, and to withdraw consent you have given.

Inside the product, export and deletion are one-click operations and leave no archived copy. For anything else, write to us at the address below and we will act.

Write to [email protected] with any question, request, or concern about your privacy. We answer within a working week, sometimes sooner. There is a person at the other end, not a queue.

When this policy changes in a way that matters, we update the date shown below the title and, where the change is significant, we tell you before it takes effect. We do not make quiet, retroactive edits.