Privacy policy.

This Privacy Policy describes how Late Sun Studio, LLC ("Late Sun Studio," "we," "us," or "our") collects, uses, discloses, and otherwise processes information in connection with the Halfday applications, browser extension, websites, and related services (collectively, the "Services"). By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.

Information you provide. We collect information you provide when you create an account, sign in, connect a third-party service, contact us, or otherwise use the Services, such as your name, email address, profile image, and the content of your communications with us.

Information from third-party services. When you sign in through, or connect, a third-party service (for example, a sign-in provider or Google), we receive information that the service makes available to us in accordance with your authorization and that service's settings, such as account identifiers, your email address, and the data described in Section 3.

Device and service information. We collect information about the devices and computers you use with the Services, such as device and computer names, platform, enrollment and connection status, session and authentication records, push-notification tokens, and records of service usage needed for operation, security, and billing.

Your content. Files, repositories, tasks, and transcripts you work on with Halfday are generally stored on your own computers, not on our servers. Our servers relay that content between your devices in encrypted form. Certain items you store with us, such as vault entries and drafts awaiting delivery to your computer, are end-to-end encrypted so that we cannot read them.

We use information to:

• provide, operate, maintain, and secure the Services;
• authenticate users, connect devices, and deliver notifications;
• carry out actions you request, including actions in services you connect;
• process payments, meter usage, and enforce plan limits;
• respond to requests and provide support;
• detect, investigate, and prevent fraud, abuse, and security incidents;
• comply with legal obligations and enforce our terms; and
• understand how the Services are used and improve them, including through product analytics that record which features you use and how (such as account and device details, counts, durations, and costs, but not the content of your work), subject to the restrictions in Section 3.

We do not sell personal information, use it for targeted advertising, or share it with data brokers.

If you choose to connect a Google account, Halfday requests access to your Gmail account so that it can display and organize your mail, identify messages that may need your attention, prepare suggested replies, and carry out the actions you choose, including archiving, moving to Trash, restoring, and sending messages you approve.

Data accessed. Depending on your use, this may include message content and metadata (such as senders, recipients, subjects, dates, and labels) and your mailbox address.

Storage. We store message metadata, short excerpts, and information derived from your mail (such as organization state, suggested replies, and your preferences) as needed to provide the feature. We do not retain full message bodies as stored records. Your Google access credentials are stored in encrypted form.

Automated processing. With your permission in the app, selected message content is processed by the AI service providers named in Section 5 solely to provide the Halfday features you use. We configure these requests so that providers do not retain the data or use it to train models.

Sharing at your direction. If you choose to turn a message into a task on one of your computers, the relevant content is transferred to that computer and processed by the AI tools you have configured there, under those providers' own terms.

Limited Use. Halfday's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data, or data derived from it, to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users. We do not use or transfer Google user data for advertising, and we do not sell it. Our personnel do not read Google user data unless you give us permission, it is necessary for security purposes or to comply with applicable law, or it is aggregated and anonymized for internal operations.

You may disconnect Gmail in Halfday at any time, or revoke access in your Google Account settings. Disconnecting removes your Inbox data from our active systems as described in Section 6. It does not delete messages from your Gmail account.

The Halfday browser extension operates only in browser tabs that Halfday opens for a task you assign, and communicates only with the Halfday application on your own computer. It may access the content of those tabs, including page content, screenshots, and network activity, solely to perform that task. The extension does not monitor your other browsing, contains no analytics or advertising, and does not send data to our servers.

We share information only as follows:

• Service providers that process information on our behalf to provide the Services, including hosting and infrastructure, storage, sign-in and authentication, AI processing, product analytics, payment processing, and notification delivery. These providers may use information only to perform services for us.
• AI service providers, only after you agree in the app. To sort your mail, Halfday sends message subjects and text to AI models from OpenAI. To title, route, and describe your tasks and projects, it sends what you write and your project details to AI models from OpenAI and Z.ai. Dictated audio goes to AssemblyAI and Google to be transcribed, and the text to OpenAI to be tidied. Most of these requests reach the models through OpenRouter. We use these providers only under zero-data-retention terms: they do not keep the data or use it to train models. You can turn AI features off at any time in Settings › You, and Halfday then stops sending this data.
• At your direction, such as when you connect a third-party service or ask Halfday to act in one.
• Legal and safety, when we believe disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Late Sun Studio, our users, or others.
• Business transfers, in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality arrangements.
• With your consent, or in aggregated or de-identified form that cannot reasonably be used to identify you.

We retain information for as long as reasonably necessary to provide the Services and for the purposes described in this Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements.

When you disconnect a service or delete data, we remove it from our active systems within a reasonable period, generally within 30 days. Residual copies may remain in backups for a limited period before they are overwritten. To request deletion of your account, contact us at the address below. Deleting data from our systems does not delete data stored on your own computers.

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption in transit, encryption of stored access credentials, and end-to-end encryption of vault contents. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may update your account information, disconnect services, disable notifications, and request access to or deletion of your personal information by contacting us. Depending on where you live, you may have additional rights under applicable law, such as rights to access, correct, delete, or port your information, or to object to or restrict certain processing. We will respond to verified requests as required by applicable law. We do not discriminate against you for exercising these rights.

The Services are operated in the United States. If you use the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate, which may have data-protection laws different from those of your country.

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make changes, we will post the revised Policy with a new effective date and, where required by law, provide additional notice or obtain consent. Your continued use of the Services after the effective date constitutes acceptance of the revised Policy.

Late Sun Studio, LLC
support@latesun.studio