Halyx privacy policy

This English version is a translation provided for convenience only. In the event of any discrepancy, the French version prevails.

1. In short

• Halyx is software installed on your computer. Your shows, your patch and your settings stay on your machine. We have no access to them. Only the fixture profiles you create follow your account, so you find them on your other machines (point 4.12).
• To sell and check licences, we process little data: your email address, your licence, the machines on which you activate it (in the form of a hashed fingerprint), and your invoices.
• Payments are handled by Stripe. We never see your card number.
• We write to you about your account, your purchases and your contract: confirmation codes, security alerts, confirmation of your order, cancellation or withdrawal, end of a subscription after a bank dispute, a reminder before an annual subscription renews, a warning before an unused account is erased, information about a change of price or terms. Stripe also sends you its receipts and its failed payment notices.
• From the software, you can download your data, correct your email address or delete your account at any time.
• Error reports help us fix the software. Halyx tells you about them on first launch, and you can turn them off at any time in Settings.
• To offer you updates, Halyx checks with GitHub whether a new version exists, without sending any account or identifier (section 3).
• There is no advertising, no tracking and no sale of data.
• For any question: contact@halyxapp.com.

2. Who is responsible for your data?

The data controller is:

Morgan Sanchez EI (sole trader, entrepreneur individuel), registered name “MONSIEUR MORGAN SANCHEZ”, trading as Halyx 142 rue de Rivoli, 75001 Paris, France SIREN 852 341 536 — SIRET 852 341 536 00021 — registered with the French National Business Register (Registre national des entreprises, RNE) EU VAT number FR54852341536 Contact for any question about your data and to exercise your rights: contact@halyxapp.com

In this document, “we” means this seller. “Halyx” means the software and the online services that accompany it (account, licences, payment).

We have not appointed a data protection officer: our activity does not require one. Write to us directly at the address above.

3. What never leaves your machine

Halyx works offline first. The following stay on your machine and are never sent to us:

• your shows, cue lists, scenes, effects and movements;
• your patch and your files (your personal fixture profiles, however, follow your account when you are signed in: point 4.12);
• your settings, your outputs (ODE, Art-Net, sACN) and your network configuration;
• the devices authorised to control Halyx and their access codes;
• your account session, kept encrypted on the machine.

Some optional features contact a third-party service at your request and with your own account with that service:

• searching for profiles on GDTF Share (with your GDTF Share credentials);
• reading a fixture's documentation through Anthropic's artificial intelligence service (with your own Anthropic access key, kept on your machine).

In both cases, your machine communicates directly with the chosen service. We receive nothing. That service processes your data under your contract with it and its own privacy policy.

Checking for updates. When your machine is connected to the Internet, Halyx checks at startup, then every 6 hours, whether a new version exists. To do so, it reads the public repository of Halyx versions, hosted by GitHub (GitHub, Inc., United States). It is a simple request, like opening a web page: it sends neither your account, nor your email address, nor your machine's fingerprint, nor anything from your shows; at most, it states the name and version of the software. Like any host, GitHub sees the IP address of your connection and processes it under its own privacy policy (docs.github.com/site-policy/privacy-policies/github-general-privacy-statement). Downloading an update, when you decide to install it, goes through the same repository, under the same conditions. We receive nothing from these exchanges, and nothing is sent when the machine is not connected. Legal basis: our obligation to inform you of the updates necessary to keep the software in conformity, including security updates (article 6.1.c GDPR; article L. 224-25-25 of the French Consumer Code), and our legitimate interest in offering you the others (article 6.1.f GDPR).

4. What data do we process, why, and on what basis?

The General Data Protection Regulation (GDPR, article 6) requires a legal basis for each processing operation. Here are ours.

4.1 Your account

• Why: to create your account, sign you in, secure access, send you 6-digit codes (confirmation, forgotten password, change of email), security alerts and the warning before an unused account is erased (section 5).
• Data: email address; password (stored in hashed form by our host, never in plain text); account identifier; chosen language; dates of creation, confirmation and last sign-in; technical connection data (IP address, browser or system type), kept by our host for the security of sign-ins.
• Legal basis: performance of the contract (article 6.1.b GDPR).
• The email address and the password are required. Without them, we cannot create an account. Halyx remains usable without an account, in demo mode (without live output).

4.2 Your licence and your machines

• Why: to assign your rights (plan, number of universes), activate the licence on your machines, manage the trial, gift codes, releases and transfers between machines, and produce the signed authorisation that lets the software check the licence offline.
• Data: plan, status, start and end dates, origin (trial, subscription, gift code, manual grant), number of machines allowed; for each machine: its fingerprint, its display name (the computer's network name), the dates of activation, last check and release; gift codes redeemed. The signed authorisation is stored on your machine. It contains the account identifier and email address, the machine fingerprint, the plan and its validity dates.
• Legal basis: performance of the contract (article 6.1.b GDPR).

The machine fingerprint. To recognise a machine without knowing its identifier, Halyx calculates a fingerprint: the result of a hash (SHA-256) of the identifier provided by the operating system and, on Windows, of the motherboard's identifier. These identifiers are never sent in plain text. The fingerprint cannot be used to recover the original identifiers. It is nevertheless personal data, because it is linked to your account: we protect it as such.

A machine's display name is the computer's network name. If it contains your name (“Camille-PC”), you can change it in your system.

4.3 Proof of your acceptance of the documents

• Why: to be able to prove that you accepted the licence agreement and read this policy, when creating the account or when a new version is offered to you (Account screen), and that you accepted the terms of sale before each payment, and which version.
• Data: document accepted, version number, date and time; account identifier; hashed fingerprint of your email address.
• Legal basis: our legitimate interest (article 6.1.f GDPR) in proving the conclusion of the contract and compliance with our information obligations, and compliance with our legal obligations to archive contracts concluded online (article 6.1.c GDPR; article L. 213-1 of the French Consumer Code).

4.4 Payment and subscription

• Why: to collect the subscription, manage changes of plan and quantity and cancellation, calculate the VAT of the customer's country, check that the sale is allowed (individuals in the European Union; outside the European Union, businesses with a VAT or tax identification number), issue the credit notes for refunds, and send you the emails provided for in the terms of sale: order confirmation (with the terms of sale as a PDF and the withdrawal form), acknowledgement of a withdrawal, confirmation of cancellation, end of the subscription after a bank dispute, reminder before an annual subscription renews. Stripe itself sends its receipts and its failed payment notices.
• Data: customer identifier and subscription identifier at Stripe; plan, billing period, quantity, payment status; your choice to have the subscription start immediately (right of withdrawal); for each email sent, its type, its date and what it shows (plan, amounts, dates, invoice link), without your address, which is read from your account when the email is sent. The data entered at Stripe (name, billing address, country, VAT number, payment method) is processed by Stripe. At most, we see the name, the address, the VAT number, the invoice history, and the brand and last four digits of the card. We never see the full card number.
• Legal basis: performance of the contract (article 6.1.b GDPR).

4.5 Invoicing and accounting

• Why: to issue invoices and keep the accounts.
• Data: identity or company name, billing address, VAT number, details and amounts of purchases.
• Legal basis: compliance with a legal obligation (article 6.1.c GDPR), in particular the French Commercial Code and the French General Tax Code.

4.6 Support and account log

• Why: to answer your requests, understand a licence or payment problem, find out what happened on an account, and keep proof of operations in the event of a dispute or a payment dispute.
• Data: your messages and our replies; a log of account events (sign-up, confirmation, change of email, activation or release of a machine, trial, gift code, subscription, account deletion, withdrawal request, refund, payment dispute, refused purchase, warning and erasure of an unused account, changes to licences and machines made by the administrator, payment processing errors). The log identifies the account by its identifier, not by its email address. It may contain the display name of a machine and the gift code redeemed; it may also contain a VAT number and a billing country.
• Legal basis: our legitimate interest (article 6.1.f GDPR) in providing effective support and keeping a record of operations on licences.

4.7 Prevention of fraud and abuse

• Why: to prevent a licence from being used beyond what was purchased and the free trial from being repeated.
• Data: fingerprints of machines that have already had a trial; fingerprint of the network a trial was started or attempted from (computed from the public IP address, which is never stored itself); history of machine releases and transfers; recent number of payment requests and rejected gift codes; refunds and payment disputes.
• Legal basis: our legitimate interest (article 6.1.f GDPR) in protecting our sales.
• Automated rules: only one trial per account and per machine, and no more than two per network over 30 days; a released or signed-out machine keeps its seat until its offline authorisation ends, except within the limit of three early releases per 30-day period; while a payment is pending, no new machine can be activated; a limited number of payment requests and rejected gift codes per hour. In the event of a full refund or a payment dispute, the licence is withdrawn under the conditions set out in the general terms and conditions of sale (clause 11.3); this withdrawal is triggered automatically by Stripe's notification. A purchase with a billing address outside the European Union and without a VAT or tax identification number is cancelled and refunded automatically, with no licence (general terms and conditions of sale, clause 3.5). These rules have no other effect. If you are blocked, or if your dispute is legitimate (stolen card, for example), write to us: a person will review your request.

4.8 Error reports

Automatic reports.

• Why: to detect and fix crashes and vulnerabilities in the software.
• On by default, can be turned off at any time: on first launch, Halyx tells you about these reports and offers to turn them off straight away. No automatic report is sent before you answer. You can also do so at any time in Settings → “Send error reports”. Turning them off changes nothing in the use of the software and takes effect immediately; reports already sent follow their retention period.
• Data: technical description of the error and the latest technical messages from the software; Halyx version; operating system; current plan; account identifier and the beginning of the machine fingerprint (12 characters), if you are signed in. Before sending, the software removes anything that looks like an email address, an IP address or a sign-in token. Reports contain neither your email address, nor your passwords, nor the content of your shows, nor the machine's network name. The software does not attach your IP address to the report; like any server, however, our provider sees the IP address of the connection that sends it. Nothing is sent outside an error or a report you choose to send: no session tracking, no usage measurement. A report may, however, mention the path of a file involved: this path may contain the name of your user session on the computer or the name of a show file.
• Legal basis: our legitimate interest in keeping the software working and secure (article 6.1.f GDPR). You can object at any time by turning the reports off.

“Report a problem”. When you choose to send a report (Settings, or the screen shown after a crash), your message is sent with the same technical information, even if automatic reports are turned off. Nothing is sent without your action. Legal basis: your consent, given by sending it (article 6.1.a GDPR).

Errors in our online services. When an error occurs in an operation related to your account (activation, payment, deletion…), our online services report it with the account identifier and the technical description of the error, after the same removal of email addresses, IP addresses and tokens. These reports do not depend on your setting, because they read nothing on your machine and serve the security of the service. Legal basis: our legitimate interest (article 6.1.f GDPR) in providing a reliable and secure service.

4.9 Newsletter

We do not send a newsletter. If we create one, sign-up will only be with your prior consent, and this policy will be updated beforehand.

4.10 Monitoring our business

• Why: to know the number of accounts, trials and subscribers per plan, revenue and cancellations.
• Data: aggregated figures derived from the data above.
• Legal basis: our legitimate interest (article 6.1.f GDPR) in managing our business.

4.11 What we do not do

• We do not sell or rent your data.
• We do not do targeted advertising and do not use trackers.
• We do not take any decision producing legal effects concerning you based solely on automated processing, apart from the licence rules described in point 4.7, which you can challenge with us.

4.12 Your fixture profiles

• Why: to find on every machine of your account the fixture profiles you create in the Halyx editor. When you are signed in to your account, each profile created, changed or deleted on one machine is also created, changed or deleted on the others.
• Data: the content of each profile (manufacturer, model, DMX modes and channels, dimensions), its modification date and its fingerprint; a deleted profile leaves a trace without content, so the deletion reaches your other machines.
• Legal basis: performance of the contract (article 6.1.b GDPR).
• Your shows, your patch and the profiles built into Halyx are not sent. Without a signed-in account, nothing is sent: your profiles stay on the machine.

5. How long do we keep your data?

The end of your contracts is the end of your last subscription; deleting the account ends them. As long as a subscription is in force, none of this evidence is erased.

When you delete your account, the erased data may remain in our host's backups until they are automatically replaced, according to the host's backup cycle. These backups are used only to restore the service in the event of an incident.

6. Who receives your data?

Internally, only the controller has access to your data. We use the following service providers. They act on our instructions, unless stated otherwise. Supabase, Stripe, Resend and Vercel are bound by the data processing agreement (article 28 GDPR) built into their terms of service. Sentry processes error reports under its terms of service.

Emails: the emails we send go out from contact@halyxapp.com through Resend, from its servers in the European Union. Messages you write to us arrive in our mailbox, hosted in France by OVHcloud.

Stripe acts in part as an independent controller. This is the case for fraud prevention, compliance with its own legal obligations (anti-money laundering, payments regulation) and the management of its services. For these processing operations, Stripe's privacy policy applies: stripe.com/privacy.

We may also disclose data to an authority that legally requires it (tax authorities, courts), and to our accountant for keeping the accounts.

7. Transfers outside the European Union

Our main data is hosted in the European Union. Some providers are established outside the European Union (United States, Singapore) or belong to US groups. Their teams or their own sub-processors may access the data from the United States or other countries.

Each transfer is covered by the safeguard indicated for that provider in the table in section 6:

• the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914), included in our providers' data processing agreements;
• the EU–US Data Privacy Framework, recognised by the European Commission's adequacy decision of 10 July 2023, for certified providers.

You can obtain a copy of these safeguards by writing to us.

8. How do we protect your data?

• All exchanges between Halyx and our providers are encrypted (HTTPS).
• Passwords are hashed by our host. We do not know them.
• On your machine, the account session is kept encrypted. Halyx refuses to let a password travel in plain text over your network from another device.
• Our databases can only be accessed by our online services, using a secret key that is not included in the software.
• Messages received from Stripe are verified by signature.
• Repeated sign-in attempts and repeated requests for codes by email are rate-limited.
• The machine fingerprint is hashed. Confirmation codes expire after one hour.
• The administration tool is restricted to a single account. Permissions are checked by our servers for every action. Viewing an account (its record, its log or its errors) and changes to licences and machines made by the administrator are logged. In lists, email addresses are masked.

No measure offers absolute security. In the event of a personal data breach presenting a risk to you, we will notify the CNIL (the French data protection authority) and, if the risk is high, we will inform you, as provided for by articles 33 and 34 GDPR.

9. Your rights

You have the following rights over your data (articles 15 to 22 GDPR):

• Access: to know what data we hold about you and obtain a copy.
• Portability: to receive the data you have provided to us in a machine-readable format. In the software: Account → “My account” → “Download my data” (JSON file: account, licences, machines, gift codes, events, acceptances, trial machines, emails sent, payment customer record with the list of your invoices). You can also ask us by email.
• Rectification: to correct inaccurate data. You can change your email address in Account → “My account”; your payment customer record at Stripe receives it too (for later invoices and receipts).
• Erasure: to request the deletion of your data. In the software: Account → “My account” → “Delete account…”. This action immediately cancels any active subscription and erases the account, its licences and its machines. The time remaining in the paid period is not refunded, except where you exercise the right of withdrawal or a legal guarantee applies (general terms and conditions of sale, clause 11.2). To use the paid period to the end, cancel your subscription first, then delete the account at the end of the period. We keep only what the law requires (invoices) and what is described in section 5.
• Restriction: to request the temporary freezing of a processing operation, for example while a disputed piece of data is being checked.
• Objection: to object to processing based on our legitimate interest, on grounds relating to your particular situation.
• Error reports: you can turn them off at any time in Settings → “Send error reports”.
• Instructions after death: to set out what happens to your data after your death (article 85 of the French Data Protection Act, loi Informatique et Libertés). Write to us to communicate them.

How? Use the features of the software or write to contact@halyxapp.com, preferably from your account's email address. If we have reasonable doubts about your identity, we may ask you to confirm it. We reply within one month. This period may be extended by two months for a complex request; we will then let you know.

Complaint. If you believe that your rights have not been respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr. If you live in another European Union country, you may also contact the authority of your country.

10. Cookies and local storage

The Halyx interface is served by the software installed on your computer, including when you control it from another device on your network. It uses:

• a single cookie, named “halyx”, set by your own installation of Halyx. It recognises a device that you have authorised to control Halyx. It is strictly necessary for this service. It lasts one year at most, or until you remove the device in Outputs → “Devices and codes”. It is never sent to us;
• the browser's local storage, to remember your display preferences on that device (language, screen, layout), and a cache that allows the interface to open offline. This data stays on the device.

These items are exempt from consent, because they are strictly necessary for the service you request (article 82 of the French Data Protection Act).

Error reports (point 4.8) read, when an error occurs, technical information about your device (system, version, program state). They are used only to detect and fix errors in the software you are using. Halyx tells you about them on first launch, and you can turn them off at any time in Settings → “Send error reports”.

The Halyx website sets no cookies and uses no trackers. Its Account area keeps the sign-in session and the country chosen for prices in the browser's local storage, which is strictly necessary for the service requested; signing out of the site erases the session.

The payment pages and the customer portal are hosted by Stripe, on its own domain. Stripe may use its own cookies there, in particular to prevent fraud, under its own policy.

11. Minors

Halyx is intended for adults and professionals. To create an account or buy a licence, you must be 18 or have the consent of a holder of parental authority. If a processing operation based on consent concerns a minor under 15, that consent is obtained jointly from the minor and from a holder of parental authority (article 45 of the French Data Protection Act). If we learn that an account has been created without the required consent, we will delete it.

12. Changes to this policy

We may change this policy, for example to add a provider or a feature. The version in force, with its date, is always available in the software (Settings › Legal documents) and when creating an account. In the event of a significant change, we will notify you by email or in the software before it applies. A new version is offered to you in the software, on the Account screen, so that you can read it; not accepting it does not block the software.

13. History