Privacy Policy

This Privacy Policy describes how Mingis Capital Partners LLC, doing business as HalcyonAccord collects, uses, and protects personal information when you use the HalcyonAccord platform at halcyonaccord.com.

Information We Collect

We may collect:

• Account information (name, email address, password)
• Organization and team details you provide
• Messages and content you create on the platform
• Files you upload to the platform
• Usage data including API token consumption and agent interactions
• Payment information processed securely by Stripe (card details are not stored by us)
• OAuth tokens for connected services (Google Workspace, Microsoft Teams, Jira, QuickBooks, Meta) — encrypted at rest in our database and used only to perform actions you authorize

How We Use Your Information

Information is used to:

• Operate and improve the HalcyonAccord platform
• Authenticate your account and manage your organization
• Process payments and manage billing
• Connect to third-party services you authorize (email, calendar, project management, accounting)
• Provide AI agent services using Anthropic's Claude API and OpenAI's API
• Monitor platform usage and enforce spending limits
• Communicate with you about your account

Third-Party Services

HalcyonAccord integrates with third-party services on your behalf:

• Anthropic and OpenAI — AI model providers. Your agent conversations are processed by their APIs under commercial terms that prohibit using your data to train their models.
• Stripe — Payment processing. Card data is handled entirely by Stripe.
• Google — Gmail, Calendar, Drive, Docs, Sheets, and Slides access when you connect these services. See Google User Data below.
• Microsoft — Teams access when you connect this service.
• Atlassian — Jira access when you connect this service.
• Intuit — QuickBooks access when you connect this service.
• Meta — Instagram access when you connect this service.

Each integration only accesses data you explicitly authorize. You can disconnect any service at any time from the Plugins page.

Google User Data

When you connect a Google account, HalcyonAccord requests only the scopes needed for the connector you choose, and uses the data solely to carry out the tasks you or your organization's members ask an agent to perform:

• Gmail (gmail.modify) — read, search, and summarize messages; save attachments to your organization's workspace; draft and send replies; apply labels or archive messages, all at your direction or on recurring schedules your organization configures.
• Calendar (calendar) — check availability and create, update, or delete events you ask for on calendars you already manage.
• Drive (drive.readonly, drive.file) — read files you point an agent to, and create or update files the agent produces for you.
• Docs, Sheets, Slides (documents, spreadsheets, presentations) — read and edit documents, spreadsheets, and presentations you ask an agent to work on.
• Basic profile (userinfo.email) — identify which Google account is connected.

HalcyonAccord's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Google user data is:

• Not used to develop, improve, or train generalized artificial-intelligence or machine-learning models, by us or by our AI providers.
• Not used for advertising, and never sold or transferred to data brokers or information resellers.
• Not read by humans at HalcyonAccord, except with your explicit consent for a specific support request, where required by law, or for security investigation of abuse.
• Transferred only to the AI provider (Anthropic or OpenAI) processing the task you requested, and only the portions needed to complete that task.
• Retained only as long as needed to complete the task, unless you or an agent acting on your instruction saves a result into your organization's own workspace. Your Google OAuth tokens are deleted when you disconnect the connector or delete your account, and you can also revoke access from your Google Account permissions page.

Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data by contacting us at support@halcyonaccord.com.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure password hashing, and access controls. OAuth tokens for connected services are encrypted at rest in our database, are never included in the prompts sent to AI providers, and are transmitted only to the respective service providers.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Disconnect any third-party service integration
• Export your data

Contact

For privacy-related questions, contact us at support@halcyonaccord.com.

← Back to HalcyonAccord