Privacy Policy
Effective September 20, 2026
HALO is a service provided by Orrery Systems LLC (“Orrery,” “we,” “us”). This policy explains what information we collect through HALO and the website at orrerysystems.app, how we use and protect it, who we share it with, and the choices and rights available to you.
HALO is used by organizations such as businesses, schools, and nonprofits (“Customers”). Most information in HALO belongs to a Customer and is processed on that Customer’s instructions. In those cases the Customer decides what is collected, and we act as its service provider.
Summary
We do not sell personal information and do not share it for advertising. The table below summarizes the categories of personal information we have collected and disclosed in the last twelve months.
| Category | Collected | Disclosed for a business purpose | Sold or shared for advertising |
|---|---|---|---|
| IdentifiersName, work email address, account and device identifiers, IP address | Yes | Yes, to service providers | No |
| Commercial informationBilling contact name, email, and address; quotes, invoices, payment status, and the last four digits of the payment method | Yes | Yes, to Stripe, our payment processor | No |
| Internet or network activitySign-in and administrative activity within HALO; network status measurements from customer sites | Yes, within HALO only | Yes, to service providers | No |
| Professional or employment informationGroup memberships, license assignments, and role attributes from a customer’s directory | Yes | Yes, to service providers | No |
| Education records (FERPA)Student names and school email addresses, only when a school connects its directory | Yes, on the school’s behalf | Yes, to our hosting provider only | No |
| Precise geolocation | No | No | No |
| Biometric information | No | No | No |
| Audio, visual, or similar information | No | No | No |
| Protected classifications | No | No | No |
| Inferences or profiles | No | No | No |
Information we collect
From people who use HALO. When someone signs in, we receive their name, work email address, and an account identifier from their organization’s identity provider. We keep records of sign-ins and administrative actions for security and audit purposes.
From systems a Customer connects. Depending on what a Customer connects, HALO processes:
- Directory information from services such as Microsoft 365: names, work email addresses, group memberships, account status, and license assignments.
- Device and network information: device names, models, and identifiers, network equipment status, and internet connection measurements such as latency and packet loss.
HALO does not collect the content of email, files, chats, or documents.
For billing. We keep billing contact details, quotes, invoices, and payment status. Payment details are handled by Stripe, as described in the next section.
When you contact us. If you email us, we keep your message and contact details so we can respond.
Payments and Stripe
Payments for HALO are processed by Stripe, Inc. When a Customer pays an invoice, the billing contact’s name, email address, billing address, and card or bank account details are entered on a payment page hosted by Stripe and go directly to Stripe.
- What we can see. Payment status, the card brand or bank name, the last four digits, and the card’s expiration date. We never see or store full card numbers, security codes, or bank account numbers.
- Fraud prevention. Stripe uses payment information, and may share it with fraud-prevention and risk partners, to authorize payments and protect buyers. Stripe does this under its own privacy policy. We do not control, see, or take part in those decisions.
- Who at Orrery has access. Only authorized personnel who need billing information to issue invoices and resolve payment questions.
- Deleting billing information. On request, we delete billing information from our systems and ask Stripe to delete the associated customer record. Both we and Stripe keep records that tax, accounting, and anti-fraud laws require, and we cannot remove information that Stripe or its risk partners hold under their own legal obligations.
How we collect it
- Directly from you, when you request a quote, contact support, or pay an invoice.
- From the systems a Customer authorizes HALO to connect to, using read-only access wherever possible.
- From small collector devices a Customer places at its sites, which send network status to HALO over an outbound encrypted connection.
- Automatically, through the sign-in session and security logs described below.
How we use it
We use information only to:
- provide, maintain, and support HALO for the Customer that contracted for it;
- send the alerts and notifications a Customer has configured;
- bill Customers and process payments;
- secure the service, investigate misuse, and keep audit records;
- respond to questions and requests; and
- meet legal, tax, and accounting obligations.
We do not use Customer data to build advertising profiles, and we do not use it to train generalized artificial intelligence or machine learning models. We may use aggregated information that does not identify any person or Customer to understand and improve the service.
Schools and student information
When a school connects its directory, HALO may process basic account information for students, such as names and school email addresses. We process this information as a school official with a legitimate educational interest under the Family Educational Rights and Privacy Act, only on the school’s behalf and under its direction. We do not use student information for advertising, do not build profiles of students for any other purpose, do not sell it, and delete it when the school asks or when its subscription ends. Questions from students or families about their information should go to the school, which controls it; we will support the school in responding.
Who we share it with
We disclose personal information only in the following situations:
- Service providers. Companies that run parts of our service, currently Amazon Web Services (application hosting and storage), Stripe (payments), Cloudflare (website hosting), and Google (email). The current list is on our subprocessors page. They process information only on our instructions, under written confidentiality and security obligations.
- The Customer and its authorized users. Information in a Customer’s HALO account is visible to the people that Customer authorizes.
- Legal requirements. When we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the safety of any person or the security of the service. Unless we are legally prohibited, we notify the affected Customer before disclosing its data.
- Business transfers. If Orrery is involved in a merger, acquisition, or sale of assets, information may transfer to the successor, which will be bound by this policy. We will notify Customers before that happens.
Information passes to service providers only over encrypted connections.
Cookies and logs
This website sets no cookies and uses no analytics, advertising, or tracking tools. Fonts and all other files are served from our own domain. Our hosting provider records standard request logs, such as IP address and browser type, to operate and secure the site.
The HALO application uses a strictly necessary session cookie to keep you signed in. It is not used for tracking or advertising, and the application does not work without it.
Because we do not track visitors across other websites, we do not respond differently to Do Not Track signals.
How we protect it
- Access to HALO requires the Customer’s single sign-on.
- Information is encrypted in transit and at rest.
- Credentials and keys are stored in an access-controlled vault, never in application code.
- Each integration is granted the narrowest permissions it needs, and administrative actions are logged.
- Collector devices make outbound connections only, so no Customer network is exposed to the internet.
No system is perfectly secure. If a security incident affects personal information we hold, we will notify affected Customers without undue delay and within the time the law requires.
Where it is stored
Information is stored and processed in the United States. HALO is intended for organizations located in the United States.
How long we keep it
We keep Customer information for the length of the subscription. After a subscription ends, a Customer may request an export within 30 days; we then delete its information from active systems, and backups age out on a routine schedule. We keep billing records for as long as tax and accounting law requires.
Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and learn how it is used and disclosed;
- Correct information that is inaccurate;
- Delete information we no longer need;
- Receive a copy of your information in a portable format; and
- Object to or restrict certain uses of your information.
We honor these requests for everyone, wherever you live, and we will not treat you differently for making one.
How to make a request. Email support@orrerysystems.app. If your information is in HALO because your organization uses it, we may refer your request to that organization, since it controls the data, and we will help it respond. We may need to verify your identity before acting, and an authorized agent may make a request on your behalf with proof of authorization. We respond within 45 days; if we need more time, we will tell you why and respond within 90 days. Requests are free unless they are excessive or repetitive, in which case we will explain any fee before acting.
Children
HALO is used by the staff of Customer organizations and is not directed to children. We do not knowingly collect personal information directly from children. Student information reaches HALO only through a school’s own directory, as described above.
Changes to this policy
We will post any change here with a new effective date. If a change materially affects how we handle personal information, we will also notify Customers by email before it takes effect.
Contact
Questions about this policy or requests about your information:
Orrery Systems LLC
Attn: Privacy
522 W Riverside Ave, Ste N
Spokane, WA 99201
support@orrerysystems.app