HALCRUS AGENTS PRIVACY POLICY
Last Updated: November 11, 2026
This Privacy Policy explains how Halcrus Agents collects, processes, stores, uses, and discloses information through its AI software, white-label technology, websites, applications, hosting services, and related integrations.
Halcrus Agents is sold and operated by SuperX Labs LLC, a Delaware limited liability company.
Halcrus Ltd, located at 66 Paul Street, London, EC2A 4NA, United Kingdom, owns the underlying intellectual property. Outsource Origin LLC, a Colorado limited liability company, supports technical development and operations.
These entities are collectively referred to as the "Halcrus Group."
1. Scope
This Privacy Policy applies to information processed through Halcrus Agents and its related services.
It covers Direct Customers, White-Label Partners, authorized users, and individuals interacting with services hosted through the Platform.
White-Label Partners may operate independently branded services using Halcrus technology.
Depending on the processing activity, Halcrus may act as a controller or business for its own operations and as a processor or service provider for information processed on behalf of White-Label Partners.
White-Label Partners remain responsible for their own customer-facing privacy notices and lawful processing instructions.
2. Information We Collect
2.1 Account Information
We may collect names, email addresses, business information, account credentials, contact details, and registration information.
2.2 Customer Content
We may process prompts, conversations, uploaded documents, images, audio, videos, generated content, application files, and other materials submitted through the Platform.
2.3 White-Label Information
We may process Partner branding, custom domains, account configurations, End User information, subscription details, permissions, and usage records.
2.4 Application and Website Information
Applications and websites created or hosted through the Platform may process information submitted through forms, user accounts, databases, or other supported functionality.
The types of information collected depend on how the relevant Customer configures and operates those services.
2.5 Payment Information
We may process billing records, transaction identifiers, subscription information, payment status, and limited payment-method details provided by payment processors.
Full payment-card numbers are generally processed by payment providers rather than intentionally stored within Halcrus's own application systems.
2.6 Technical Information
We may collect IP addresses, browser information, device information, access logs, application logs, security events, storage usage, bandwidth consumption, and related technical records.
2.7 Communications
We collect information submitted through customer support, billing inquiries, technical assistance requests, and other communications.
3. How We Use Information
We process information as necessary and legally permitted to:
- Provide and operate Halcrus Agents.
- Authenticate and manage accounts.
- Deliver requested AI functionality.
- Generate and process content.
- Create and host supported applications and websites.
- Manage White-Label Partner accounts.
- Calculate AI credit consumption.
- Measure storage and bandwidth usage.
- Process subscriptions and payments.
- Provide technical support.
- Investigate errors and billing disputes.
- Detect fraud and unauthorized activity.
- Maintain Platform security.
- Comply with legal obligations.
- Improve the Platform using information we are legally and contractually permitted to use.
4. White-Label Data Processing
White-Label Partners independently operate their businesses and determine how they collect and use End User information.
Partners are responsible for providing legally required privacy notices, obtaining necessary consents, and establishing lawful grounds for their own processing activities.
Halcrus processes authorized information to provide the underlying software and related services.
Authorized Partner administrators may access End User information available through their accounts.
Partners are responsible for managing their own administrator permissions and customer-facing activities.
Halcrus remains responsible for the security and operation of its underlying infrastructure. White-Label Partners are not required to independently maintain or secure Halcrus's proprietary software infrastructure.
5. Artificial Intelligence Processing
When Customers use AI functionality, relevant inputs and supporting information may be transmitted to third-party AI providers.
The information transmitted depends on the selected feature and may include text, prompts, documents, images, audio, video, or other submitted materials.
AI processing may involve the following providers:
- OpenAI: AI conversations, image generation, content creation, application development, and speech-to-text.
- A2E: Image-to-video generation.
- ElevenLabs through fal.ai: AI voice narration.
- Hunyuan through fal.ai: Sound effects.
- Sonilo through fal.ai: Music generation.
- Tavily: Web-search and research functionality.
- Anthropic and DeepSeek: Additional AI processing where enabled.
Provider availability, processing practices, retention periods, and contractual terms may vary.
Halcrus does not authorize unrestricted use of Customer information for unrelated purposes.
Customers should not submit sensitive or regulated information requiring protections that the Platform does not expressly provide.
6. Hosting and Infrastructure Providers
Halcrus uses third-party infrastructure and technology providers to operate the Platform.
Depending on the functionality used, these may include:
- Hostinger: Virtual private server hosting.
- Neon: PostgreSQL database infrastructure.
- Redis: Caching and supporting application infrastructure.
- Supabase: Authentication, storage, and application database functionality.
- Amazon Web Services: Object storage and supporting cloud infrastructure.
- GitHub: Supported development and source-management integrations.
Additional infrastructure components may include Nginx, PM2, Let's Encrypt, and other software used for hosting, application delivery, and security.
These providers may process information necessary to perform their respective functions.
7. Payment Processing
Halcrus uses Stripe and potentially other authorized payment processors to process subscription and usage payments.
Payment providers may independently process payment credentials, transaction information, fraud signals, and related financial information.
White-Label Partners may connect their own payment accounts to collect payments from End Users.
In those circumstances, the Partner and its payment provider may independently determine certain payment-related processing activities.
Halcrus does not assume responsibility for a Partner's independent billing disclosures, customer refunds, or payment-related privacy obligations.
8. Third-Party Integrations
The Platform may support integrations involving email, social media, content libraries, development tools, and other third-party services.
These may include SMTP providers, Gmail, Bundle Social, GitHub, Unsplash, Openverse, and other supported integrations.
Information may be transmitted to these services when Customers enable or use the relevant functionality.
Third-party providers may operate under their own privacy policies and contractual terms.
9. Customer Content and Intellectual Property
Customers retain the rights they lawfully possess in submitted content and materials.
Halcrus does not acquire ownership of Customer Materials merely because those materials are processed through the Platform.
Halcrus and its licensors retain ownership of proprietary software, source code, algorithms, models, databases, infrastructure, and related intellectual property.
Information is processed according to applicable contractual permissions, privacy laws, and third-party provider restrictions.
10. Hosted Websites and Applications
Customers may create and publish websites or applications using Halcrus Agents.
These services may collect information from visitors and users through forms, accounts, databases, analytics tools, or other enabled functionality.
Customers are responsible for configuring their applications lawfully and providing required privacy notices.
Publicly published content may be accessible to third parties and search engines.
Customers should not publish information intended to remain private.
Halcrus provides underlying hosting and platform functionality but does not independently determine every Customer's website content or data-collection practices.
11. Cookies and Similar Technologies
Halcrus may use cookies, local storage, and similar technologies for authentication, security, session management, preferences, and Platform functionality.
Additional analytics or tracking technologies may be used where appropriately disclosed and legally permitted.
White-Label Partners and Customers may independently configure tracking technologies within their own websites or applications.
They remain responsible for applicable notices and consent requirements relating to those technologies.
12. Data Security
Halcrus implements reasonable technical, administrative, and organizational measures designed to protect information against unauthorized access, misuse, loss, and disclosure.
Security measures may include access controls, credential protections, infrastructure safeguards, and monitoring appropriate to the services provided.
No internet-connected service can be guaranteed completely secure.
Customers are responsible for protecting their credentials, managing authorized users, and maintaining appropriate account permissions.
Halcrus will investigate security incidents affecting systems under its control and provide notifications where required by applicable law.
13. Data Retention
We retain information for as long as reasonably necessary to provide services, maintain security, satisfy legal obligations, and resolve legitimate disputes.
Following account closure, Customer content is ordinarily retained for a recovery or export period of up to 30 days.
After this period, content may be scheduled for deletion.
Some information may be retained longer where necessary for:
- Financial and accounting obligations.
- Tax compliance.
- Fraud prevention.
- Security investigations.
- Legal disputes or preservation requirements.
- Ordinary backup retention cycles.
- Applicable third-party provider requirements.
Customers should request available data exports before the recovery period expires.
14. International Processing
Halcrus initially offers the Platform to customers in the United States.
Information may nevertheless be processed in the United States or other jurisdictions where Halcrus Group entities and authorized service providers operate.
Where applicable law requires safeguards for international data transfers, appropriate transfer mechanisms or other legally recognized safeguards must be used.
Halcrus does not currently represent the Platform as GDPR-compliant.
Customers must not use the Platform for activities requiring regulatory assurances that Halcrus has not expressly agreed to provide.
15. Restricted Information and HIPAA
HALCRUS AGENTS IS NOT OFFERED AS A HIPAA-COMPLIANT PLATFORM.
Customers must not submit protected health information where HIPAA compliance is required.
The Platform must not be used for regulated activities requiring security certifications, contractual protections, or specialized compliance arrangements that Halcrus has not expressly provided.
Customers remain responsible for determining whether their intended use is legally permissible.
16. Privacy Rights
Depending on applicable law, individuals may have rights to access, correct, delete, export, or restrict processing of their personal information.
Requests may be submitted to [email protected].
Halcrus may verify identity or authority before fulfilling requests.
Where Halcrus processes information on behalf of a White-Label Partner, requests may be referred to the Partner or handled with the Partner's assistance as legally required.
Individuals may also have rights under applicable US state privacy laws.
Nothing in this Policy limits non-waivable privacy rights.
17. Information Sharing
Halcrus may disclose information to authorized service providers where reasonably necessary to operate the Platform.
Information may also be disclosed where required by law, necessary to investigate security incidents, or appropriate to protect legal rights.
Information may be transferred in connection with a lawful merger, acquisition, restructuring, or business transaction, subject to applicable privacy obligations.
Halcrus does not sell personal information for monetary consideration.
18. Children
Halcrus Agents is intended for business users aged 18 or older.
We do not knowingly collect personal information directly from children through the Platform's account registration services.
Customers must not knowingly use the Platform to process children's information in violation of applicable law or Platform restrictions.
19. Changes to This Policy
Halcrus may update this Privacy Policy to reflect changes in technology, services, processing activities, or legal obligations.
Material changes will be communicated where required by applicable law.
We will not rely on retroactive changes to authorize materially different processing where additional notice or consent is legally required.
20. Contact
Halcrus Agents
Operated by SuperX Labs LLC
8 The Green, Suite A
Dover, DE 19901
United States
Intellectual Property Owner:
Halcrus Ltd
66 Paul Street
London, EC2A 4NA
United Kingdom
Email: [email protected]