Privacy Policy

Effective date: 2026-10-22. It replaces the privacy notice dated 2026-10-21.

Halmos Labs, Inc., a Delaware corporation ("Halmos Labs," "we," "us," or "our"), provides ADoor. ADoor is a database your team, your apps, and the AI assistants you connect can use under the grant you set. This privacy policy describes personal information we process through the website at adoor.halmoslabs.com, the app at app.adoor.halmoslabs.com, the API, the command line, and those assistant connections (together, the "Service").

People in the European Economic Area, the United Kingdom, and Switzerland should also read Notice to European users below.

Personal information we collect

Information you give us

Your account email and name, from sign-in.
The tables, rows, and row history in your workspace, and the email addresses of people you invite.
Messages you send to support@halmoslabs.com.
Payment details, which Stripe collects, including the payment method, the billing name, the billing email, and the billing address. We do not store card numbers. ADoor keeps the Stripe customer id, the subscription id, the subscription item id, the plan, the storage ceiling, the measured usage, and the status it needs to apply that plan.

We do not ask you for a government identification number, a precise location, or a profile photo. What you put in a table is up to you. That can include information about other people. Do not invite someone, or store their information, unless you have a right to do so.

Sign-in goes through WorkOS. ADoor stores the name and email from that sign-in. If you use a sign-in method WorkOS offers, that method's provider processes the sign-in under its own terms. Which methods are turned on is set in WorkOS. This repository does not list the methods that are turned on in production.

Information collected automatically

We use only sign-in cookies. They are:

ps_session and ps_browser, which keep you signed in. Both are HttpOnly, SameSite=Strict, limited to the app host, and kept for 30 days.
Short-lived HttpOnly cookies used only while sign-in is in progress, including ps_auth_flow and ps_auth_switch (about 10 minutes, on the sign-in path).

We do not use analytics cookies, advertising cookies, pixels, or web beacons. The marketing site does not set a cookie for this policy.

Usage records, such as storage size and request metadata, are collected to run the Service. Row contents and query text are not sent to analytics. A security signal may include an IP prefix (an IPv4 /24 or an IPv6 /48), never a full IP address. We do not collect precise geolocation.

Information from other sources

We do not buy personal information from data brokers. We do not receive it from advertising partners. WorkOS provides the name and email for the account, as described above.

How we use personal information

We use personal information to:

run your account, store your data, apply the grants you set, and operate the website, the API, the command line, and assistant connections;
sign you in, limit abuse, and investigate security events;
bill a paid plan through Stripe;
measure storage and requests so the Service can operate (row contents and query text are not sent to analytics);
answer email to support@halmoslabs.com;
comply with law and protect the Service, our users, and other people.

We do not use your data to train models. We do not use personal information for targeted advertising. We do not sell personal information. We do not use it for profiling that produces legal or similarly significant effects.

There is no admin console. A security operator can open an audited, read-only view of workspace data for at most 15 minutes.

How long we keep data

We keep account and workspace data while the account exists.

Undo history covers row inserts, updates, and deletes. It does not cover schema changes. Retained history is capped by size: 2 MiB on the Free plan and 64 MiB on a paid plan. When the cap is reached, the oldest history entries are dropped. There is no point-in-time restore.

We keep nightly encrypted backups for 30 days. The backup file is stored in Cloudflare R2. The backup bucket documented for this service is in Western Europe.

A signed-in person can start account deletion in the product. ADoor emails a confirmation link. Confirming it retires the account name and email, revokes sessions and connections, and deletes workspaces that person alone owns, including their tables and history. A shared workspace stays for the people who remain, and that person is removed from it. Deletion is refused when it would leave a workspace without an owner. Copies already in a backup stay until that backup expires.

Email support@halmoslabs.com to ask for access, correction, or deletion.

We share personal information with the service providers below, with people and assistants you grant access to, and when the law requires it. We may also share it with professional advisers (lawyers, auditors, bankers, and insurers) who are bound to confidentiality, and with a buyer or successor if the business is sold, merged, or reorganized. We do not share workspace rows with the public. We do not share personal information with advertising partners.

A grant can name a space, a table, the fields in it, and which rows. An assistant or app can read and write only what that grant allows. What you tell ChatGPT, Claude, Grok, Cursor, or another assistant outside ADoor is kept by that assistant under its own terms.

Subprocessors

Cloudflare (hosting, Western Europe, plus a global edge). The application container is constrained to Western Europe. Cloudflare's edge is global. Cloudflare R2 stores the encrypted backup described above, and it stores in-flight transfer files for large import and export. The backup bucket documented for this service is in Western Europe.
Supabase (database, AWS eu-west-1, Ireland).
WorkOS (sign-in, United States).
Resend (invitation email, United States). The same service sends account email for an address change and for deletion confirmation.
PostHog (product analytics, United States). Server-side only, with no cookies and no full IP address. The capture sets the IP field empty and turns off geo-IP. A security signal can include the IP prefix described above, plus an internal account id or workspace id. It does not include row contents or query text.
Stripe (payments, United States).

Your choices

Email support@halmoslabs.com to ask for access, correction, or deletion, or to appeal a refusal. We may need enough detail to find the account. We do not ask you to send a government identification number by email.

There is no marketing list. We do not send promotional email.

The sign-in cookies are what keep the app signed in. If the browser blocks them, the app will not keep a session.

You can close the account as described under How long we keep data.

Other sites and services

The Service links to sign-in at WorkOS, to payment pages at Stripe, and to the assistants you choose to connect. Those services are not part of ADoor. Their privacy policies govern what they collect. Connecting an assistant lets it read and write only inside the grant you set.

Security

We use technical and organizational safeguards designed to protect personal information, including encrypted transport, database grants, and HttpOnly sign-in cookies. Security risk is inherent in internet services, and we cannot guarantee that personal information will never be accessed without authorization.

International data transfers

Halmos Labs, Inc. is a Delaware corporation. Personal information is processed in the locations named for each subprocessor above. Those locations include Ireland, Western Europe, and the United States. Privacy laws in those places can differ from the laws where you live.

Where the law requires a safeguard for a transfer, the transfer uses an appropriate safeguard.

Children

The Service is not intended for anyone under 16. You must be at least 16 years old to use it. If you believe we have collected personal information from a child, email support@halmoslabs.com. If we learn that we have done so, we will delete it as the law requires.

Changes

We give 30 days' notice of material changes. We will also update the effective date on this page. Using the Service after that date means the updated policy applies.

How to contact us

Email: support@halmoslabs.com. The same address is for privacy requests and security reports.

State privacy rights notice

This section applies to residents of U.S. states whose privacy laws give their residents the rights below, to the extent those laws apply to us.

You can ask for:

the categories of personal information we collected, the sources, the purposes, and the categories of third parties we disclosed it to;
a copy of the personal information;
correction of inaccurate personal information;
deletion of personal information, subject to exceptions the law allows;
an appeal if we deny a request.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not process it for targeted advertising. We do not use it for profiling that produces legal or similarly significant effects. We do not have actual knowledge that we collect, sell, or share personal information of consumers under 16 years of age.

We do not intentionally collect government identification numbers, precise geolocation, or payment card numbers (Stripe collects card numbers). Information you choose to store in a workspace can still be sensitive. We do not use workspace contents to infer characteristics for advertising.

We will not discriminate against you for exercising these rights. Email support@halmoslabs.com to make a request or to appeal. An authorized agent may submit a request if the agent shows authority we can verify, such as a power of attorney where the law requires one. We do not have a web form or a toll-free telephone number for these requests.

Categories we collect

These are the practices described above. We have not sold or shared these categories for advertising.

Identifiers, such as name and email. Used to run the account, invitations, and support. Disclosed to WorkOS and Resend, and the billing email to Stripe.
Commercial information, such as the plan and the Stripe customer and subscription ids. Used to bill a paid plan. Disclosed to Stripe.
Internet or network activity, such as request metadata and an IP prefix. Used to operate and secure the Service. Disclosed to PostHog as described above. Row contents and query text are not included.
Customer content, such as tables, rows, and row history. Used to provide the Service. Disclosed to the subprocessors that host or back it up, and to people and assistants you grant.
Inferences. We do not draw inferences for advertising.

California Shine the Light

We do not disclose personal information to third parties for their own direct marketing. A California resident can still email support@halmoslabs.com with the subject "Shine the Light Request," their name, and a statement that they are a California resident.

Nevada

We do not sell personal information for money. A Nevada resident can email support@halmoslabs.com to opt out of any future sale covered by Nevada law.

Notice to European users

The following applies to individuals in the European Economic Area, the United Kingdom, and Switzerland ("Europe" below). "Personal information" in this policy includes "personal data" as that term is used in the GDPR and the Swiss Federal Act on Data Protection.

Controller

Halmos Labs, Inc. is the controller for account information (the account email and name), sign-in, billing records we keep, support email, and usage records. For the tables, rows, and row history a customer stores, and for the email addresses the customer invites, the customer decides the purposes. For that customer content, Halmos Labs, Inc. is the processor under the data processing addendum.

Legal bases

Providing the Service, including the account, workspace storage, grants, and billing records we keep: contractual necessity.
Sign-in cookies, abuse limits, and the IP prefix on a security signal: legitimate interests in keeping the Service secure. The capture sent to PostHog does not include a full IP address.
Usage records such as storage size and request metadata: legitimate interests in operating the Service. Row contents and query text are not sent to analytics. There are no optional analytics cookies.
A paid plan: contractual necessity.
Compliance with law, and defending legal claims: legal obligation, or legitimate interests where a legal obligation does not already apply.
Account deletion and other steps you ask us to take: contractual necessity, or your request.

We do not rely on consent for advertising cookies. We do not send direct marketing.

Retention

The retention periods above apply. When we no longer need personal information, we delete it or, where a backup copy remains, we keep that copy only until the backup expires and we do not use it for any other purpose.

Your rights

If you are in Europe, you can ask us to:

provide access to your personal information;
correct it;
delete it;
transfer a machine-readable copy of information you provided;
restrict processing;
object to processing based on legitimate interests;
withdraw consent, where consent is the basis (we do not rely on consent for the processing described above).

Email support@halmoslabs.com. We may ask for information to confirm it is your account. If we refuse, we will say why, unless the law forbids that. You can also complain to the supervisory authority where you live. In the United Kingdom, that is the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone +44 303 123 1113.

Transfers outside Europe

If you use the Service from Europe, personal information is processed in the United States and in the other locations named in the subprocessor list. Where the law requires a safeguard for a transfer, the transfer uses an appropriate safeguard.

This template was prepared and made publicly available by General Legal, PC ("General Legal"). It is provided for general reference purposes only and does not constitute, and should not be construed as, legal advice, or an endorsement or review of any particular transaction in which it is used. Use of this template does not create an attorney-client relationship with General Legal. General Legal has not reviewed, and takes no position on, any modifications made to this document or the deal terms it is used to document.