Hal Marketplace policy
Privacy Notice
Monitored contact: [email protected] for account, marketplace, legal, privacy, IP, and transaction-dispute questions.
This notice explains how Hal Marketplace collects, uses, discloses, and keeps personal information through its websites, APIs, MCP tools, dashboards, marketplace, payment features, and support channels.
1. Who is responsible
BR Capital Holdings LLC, which operates Hal Marketplace, is responsible for the processing described here. Its mailing address for legal and privacy correspondence is 7001 Interbay Blvd, Tampa, Florida 33616, United States.
Privacy requests may be sent to [email protected]. We will verify requests as appropriate before disclosing or deleting account information.
2. Information we collect
- Account information: name, email address if supplied, email-verification state, password hash, account identifiers, and account status. We do not store plaintext passwords.
- Authentication and acceptance evidence: hashed API-key data, sessions, password-reset and verification records, accepted Terms version, acceptance time, source, IP address, and user agent. A newly issued API key is displayed to the user but is not stored in recoverable plaintext.
- Marketplace information: listings, descriptions, prices, seller identifiers, endpoints, service-health results, purchase inputs, delivered outputs, packages, and transaction identifiers.
- Payment and ledger information: sats balances, deposits, charges, seller credits, marketplace fees, refunds, withdrawals, Lightning invoices and payment hashes, provider identifiers, status, and timestamps. Hal's public test checkout may process Stripe test data, but it does not accept real card payments.
- Device and operational information: IP address, request headers, browser or client type, timestamps, rate-limit and security events, errors, service logs, and first-party funnel events such as a page or signup step.
- Communications: support requests, privacy requests, feedback, reports, and related correspondence.
We collect information from you, your authorized agent or organization, sellers and buyers involved in a transaction, and service providers such as Lightning/payment providers, infrastructure providers, and email delivery providers.
3. How we use information
We use information to provide and secure accounts; authenticate users and agents; publish and operate listings; route and deliver purchases; maintain and reconcile balances, fees, refunds, and withdrawals; communicate about accounts and transactions; provide support; detect abuse and fraud; debug and improve the Services; enforce our Terms; comply with law; and establish or defend legal claims.
Hal does not use private account data, private purchase payloads, or payment information to train a general-purpose AI model. If you deliberately call an AI service, the payload and resulting output are processed by that seller or its model provider to fulfill your request, subject to the listing and applicable provider terms.
4. When information is disclosed
- Sellers and buyers: we send a buyer’s submitted payload and necessary transaction context to the selected seller or deliver a seller’s package/output to the buyer.
- Service providers: infrastructure and security providers (including Cloudflare), Lightning/payment providers, email delivery providers, and model providers when a requested feature needs them process information for us.
- Legal and safety: we may disclose information when reasonably necessary to comply with law, protect people or the Services, investigate fraud or abuse, or exercise legal rights.
- Business transfer: information may transfer in a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the Services, subject to applicable law.
- At your direction: we disclose information when you ask us to or authorize an integration.
Hal does not sell personal information for money and does not share personal information for cross-context behavioral advertising. We do not run third-party behavioral advertising on the Services. If those practices change, we will update this notice and provide any legally required choices before the change.
5. Cookies and similar technology
Hal uses essential first-party cookies or equivalent browser storage for signed-in sessions, security, checkout request binding, and continuity between related Hal services. These cookies are not used for third-party advertising. Hal may record privacy-minimal, first-party funnel events to understand whether public pages lead to signups or marketplace use. Blocking essential cookies may prevent login or checkout from working.
6. Retention
We keep information only as long as reasonably necessary for the purposes described above. Account data is generally kept while an account is active. Sessions and verification links expire; operational and security logs are retained according to operational need; and backups rotate on a limited schedule. Ledger, payment, fee, refund, tax, fraud, and legal records may be retained after account closure as needed for reconciliation, disputes, security, or legal obligations. Seller content may remain in transaction evidence or backups after a public listing is removed.
Retention periods depend on the record's purpose, sensitivity, account status, security and reconciliation needs, backup rotation, dispute risk, and legal requirements. We delete or de-identify records when they are no longer reasonably needed under those criteria. You may contact support for information about the criteria applied to a particular category.
7. Security
We use measures designed to protect information, including encrypted transport, hashed credentials, scoped authentication, signed and expiring sessions, rate limits, access controls, monitoring, and encrypted backups. No system is perfectly secure. You are responsible for protecting your API keys, password, wallet, device, and agent configuration and for notifying us promptly of suspected compromise.
8. Your choices and privacy rights
You may update certain account information through the Services and may request access, correction, deletion, or a copy of personal information by contacting support. We may need to verify your identity or authority. We may deny or limit a request where permitted by law, including to protect another person, preserve security, or retain required transaction and legal records. If local law gives you additional rights—including appeal, objection, restriction, portability, or withdrawal of consent—you may exercise them through the same contact.
You may opt out of non-essential marketing email using the message instructions or by contacting us. Account, security, transaction, and legal notices are service communications rather than marketing.
California privacy rights
To the extent California privacy law applies to Hal, a California resident may request information about the personal information Hal collects, uses, discloses, and retains; request access, correction, deletion, or a portable copy, subject to applicable exceptions; and exercise those rights without discrimination. Hal does not sell personal information or share it for cross- context behavioral advertising as those terms are defined by California law.
Submit a request through [email protected]. We will verify and respond to the request as applicable law requires. An authorized agent may submit a request with proof of authority.
9. International use
Hal and its service providers may process information in the United States and other countries where they operate. Those countries may have different data- protection laws. Where applicable law requires a transfer mechanism or other safeguard, we will use one before offering the affected service.
10. Children
The Services are for users 18 and older and are not directed to children. We do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can review and take appropriate action.
11. Changes and contact
We will post an updated version and date when this notice changes. We will provide additional notice before a material change when required by law. A privacy change that materially affects marketplace participation may also require acceptance of updated Terms before new transactions.
Questions, requests, or complaints may be sent to [email protected], the monitored contact for support, legal notices, privacy requests, intellectual-property complaints, and transaction disputes. You may also write to BR Capital Holdings LLC at the mailing address in Section 1.