Privacy Policy

Effective 2026-06-26. This policy explains what Halden collects, why, and the choices you have.

Halden is a team workspace (chat channels, shared documents and presence) operated by Halden ("we", "us"). It is provided as a desktop application connecting to a server hosted at https://haldenapp.com. This policy applies to that service.

Information we collect

• Account information: your email address, a one-way hashed password (we never store your plaintext password), your display name, and an optional title and status message you choose to add.
• Content you create: channel messages, threads, reactions, documents, folders, and any content reports you submit. This is stored so your teammates can access shared work.
• Workspace membership: which workspaces you belong to and your role (owner, admin or member).
• Technical data: connection timestamps, presence (online/offline), and your IP address in transient server logs used for security, abuse prevention and rate-limiting.
• On your device: your sign-in token is stored locally using your operating system's protected storage (e.g. Windows Credential/DPAPI via Electron safeStorage). It is not transmitted to any third party.

What we do NOT do

• No advertising and no ad networks.
• No selling or sharing of your data with data brokers.
• No collection of location, health or financial data.
• No background scanning of files on your device.

How we use information

• To provide the service: authenticate you, deliver messages and documents in real time, and show presence to your teammates.
• To keep the service safe: prevent abuse, enforce content guidelines and respond to reports.
• To operate and debug the service using minimal, short-lived logs.

How information is shared

• With your workspace: content you post is visible to other members of the same workspace, as is your display name, avatar color, title, status and presence.
• With service providers: the server runs on hosting infrastructure chosen by the operator; data is processed there to run the service.
• For legal and safety reasons: we may disclose or remove content to comply with the law, enforce our guidelines, or in response to a valid request from Microsoft regarding content distributed via the Microsoft Store.

Storage, security and retention

Passwords are hashed with bcrypt; sessions use signed tokens (JWT). Traffic between the app and server should be encrypted in transit (HTTPS/WSS) in production. Content is retained while your account and workspaces exist. Server logs containing IP addresses are short-lived.

Your rights and choices

• Access & edit: you can view and update your profile in the app.
• Delete content: you can delete your own messages and documents. Workspace admins can remove content within their workspace.
• Delete your account / export data: email support@haldenapp.com and we will delete your account and associated personal data, or provide a copy, within a reasonable time.

Children

Halden is intended for workplace and team use and is not directed to children. Do not use Halden if you are under the age required to consent to processing of personal data in your country.

Changes

We may update this policy as the service evolves. Material changes will be reflected on this page with a new effective date.

Contact

For any privacy question or request, contact Halden at support@haldenapp.com.

Operated by Halden. Questions about this document? Contact support@haldenapp.com.