Governance & Privacy.
Terms of Service
By accessing the HalfBot runtime, you represent that you are at least 18 years of age and reside within a jurisdiction where the use of sovereign intelligent orchestration is permitted by law.
1. Intellectual Property: All algorithms, architecture, and “Half-Brain” protocols remain the property of HalfBot Orchestration. Your use of the service constitutes a license to utilize our intelligence layer for project-specific tasks in accordance with your subscription tier.
2. Responsible Use: Users are strictly prohibited from utilizing the runtime for harmful, illegal, or deceptive activities. HalfBot reserves the right to terminate access upon detection of intent-layer violations.
Privacy & Sovereignty
HalfBot adheres to the core philosophy of “Non-Rented Intelligence.” We do not sell your contextual data, model prompts, or project metadata. Your data is your sovereign workspace.
3. Data Collection Principles: We practice strict data minimization. We only collect the minimal account, telemetry, and transactional data necessary to operate the runtime deterministically and maintain operational security.
4. Security & Isolation: Interaction layers are protected via 256-bit encryption. Handshakes are authenticated cryptographically. Prompt executions are isolated and processed without cross-client exposure.
EU GDPR Compliance (Regulation 2016/679)
For users, customers, and data subjects located within the European Economic Area (EEA), the following statutory terms govern the processing of personal data:
5. Roles & Legal Bases (Art. 6 & 28 GDPR)
- Data Controller: HalfBot acts as the Data Controller for your account identity, authentication credentials, and billing records.
- Data Processor: When you process third-party data through HalfBot production pipelines (e.g. SKU metadata, translation catalogs), HalfBot acts as the Data Processor under Article 28 GDPR.
- Legal Bases: We process data based on Contract Performance (Art. 6(1)(b) GDPR), Legitimate Interests in platform integrity and threat mitigation (Art. 6(1)(f) GDPR), Legal Obligation for tax and accounting records (Art. 6(1)(c) GDPR), and Consent (Art. 6(1)(a) GDPR) where explicitly requested.
6. Data Hosting Location & Sub-processors
Primary database hosting and serverless functions operate within the European Union (Google Cloud Platform, region europe-west1, Frankfurt, Germany). LLM proxying is conducted through sovereign internal gateway layers without unauthorized external leakage.
7. Data Subject Rights (Articles 15–22 GDPR)
Under Chapter III of the GDPR, EEA data subjects have the following enforceable rights:
- Right of Access & Portability (Art. 15 & 20): You may request a copy of your personal data in a structured, machine-readable format.
- Right to Rectification (Art. 16): You may correct inaccurate or incomplete personal records.
- Right to Erasure / “Right to be Forgotten” (Art. 17): You may request the deletion of your account and related runtime data via our dedicated deletion interface or API (
DELETE /api/v1/smart/data). - Statutory Retention & Legal Hold (Art. 17(3)(e) & 17(3)(b)): In accordance with Article 17(3) of the GDPR, the right to erasure does not apply to data necessary for the establishment, exercise, or defense of legal claims (including unfulfilled financial obligations, contract disputes, or evidentiary records) or for compliance with statutory fiscal retention obligations. Such data remains strictly partitioned under Legal Hold.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local EU Data Protection Authority (DPA).
Sovereign Compliance Assurance
To exercise your rights of access, rectification, or erasure, or for questions regarding our Data Protection Agreement (DPA) and Standard Contractual Clauses (SCCs), contact our compliance office at legal@halfbot.run.