1. Privacy commitment

HaltState is operated by HIT Equipment International Pty Ltd, trading as Krystal Unity, an Australian company. We use HaltState data to provide AI governance, runtime policy enforcement, approval workflows, and audit evidence for our customers.

The umbrella Krystal Unity Privacy Policy describes the shared privacy framework, including GDPR and UK GDPR, the California Consumer Privacy Act, Australian Privacy Principles, data protection addendum availability, and group-wide contact paths.

2. What we collect

HaltState collects the information needed to run an AI governance control plane:

Policy configuration data, including customer-defined rules, enforcement thresholds, approval routing, and agent registrations.
Runtime agent telemetry, including which actions were attempted, allowed, blocked, escalated, or approved.
Proof Packs, including cryptographic attestations of policy evaluation events and related audit evidence.
Sentinel-style governance state, including who approved an action, when approval occurred, and which policy applied.
Operator account information, including name, email address, organisation, role, and authentication metadata.
Billing information, processed through Stripe. We do not store full card numbers.

New accounts default to recording supported connected activity, with 90-day content retention and account or per-agent opt-out. This can include customer messages and business events captured by supported integrations. Existing saved recording choices are preserved. Owners can choose 30-, 90- or 365-day content retention or disable new content capture. Retained content is encrypted and stored separately from audit metadata; credentials, hidden model reasoning and unrelated traffic are excluded. See recording, retention and access responsibilities.

The HaltState public site and account app load KrystalView diagnostics automatically. Form inputs remain masked; API keys, support-message bodies and retained evidence content are excluded from account-app replay. HaltState does not load X or Google Ads measurement on public pages.

3. How we use data

We use HaltState data to deliver and improve the governance product, enforce customer-defined policies, generate Proof Packs, operate approval and escalation workflows, send service notices, process subscriptions, respond to support requests, and investigate security incidents or abuse.

We may use aggregated or de-identified operational metrics to understand reliability, latency, and product quality. We do not sell HaltState customer data.

The public site and signed-in app load KrystalView automatically for usage analytics, session diagnostics, error investigation, and performance analysis. KrystalView records page interactions and technical events; form inputs remain masked. Signed-in diagnostic sessions can be linked to your account so support can inspect your recent steps, failed requests and browser errors. Relevant diagnostics may accompany a support case; they do not authorize automatic changes to your account or agents.

HaltState does not load X or Google Ads measurement on public pages. Optional advertising preferences are stored separately from essential product and first-party analytics data.

HaltState videos use local poster images. YouTube receives no request from the page until a visitor activates a video. Playback then uses YouTube's privacy-enhanced youtube-nocookie.com embed, with a normal YouTube link available as a fallback.

Optional advertising measurement

Google Analytics measures visits to our public pages automatically, without an Accept prompt. It receives the public page path and normal browser connection information, but our configuration omits URL queries and fragments and the referring URL, and disables Google advertising signals and ad personalization. This tag is not installed on signed-in account pages. You can opt out using the Ad preferences footer link. Existing opt-outs, Global Privacy Control and Do Not Track prevent it loading; withdrawal disables future collection in this browser. Google Analytics is separate from Google Ads.

With your permission, HaltState sends limited signup conversion signals to Reddit, LinkedIn and OpenAI to measure our advertising. These signals contain an event identifier, the time of a completed signup and, when available, the advertising click reference. LinkedIn receives a browser image request, which also exposes normal connection information such as your IP address. We do not send your signup form fields, email address, hashed email address, account identifier, API keys or recorded session content to these advertising services.

Open Ad preferences in the footer to select Accept or Decline; no preference popup opens automatically. Advertising conversion signals still require Accept, separately from default-on public Google Analytics. Global Privacy Control and Do Not Track disable optional measurement. Declining does not affect signup or product access. OpenAI and Reddit conversion signals are sent from our server; their advertising scripts do not inspect signup or onboarding forms. First agent registration is measured only in our first-party analytics.

We retain the campaign touch and consented click references for up to 30 days, and deduplicated first-party conversion facts for up to 90 days. Attribution may be unavailable if collection is blocked or the original campaign visit cannot be confirmed. Withdrawal stops future optional signals; it does not retract signals already delivered.

4. Sub-processors

HaltState uses a focused subset of Krystal Unity sub-processors:

Hetzner Online GmbH for primary hosting and storage.
Stripe for billing, subscriptions, payment processing, and tax workflows.
Anthropic and OpenAI for selected inference and policy-reasoning workflows.
Postmark for transactional email and service notices.
Sentry for error tracking and production reliability diagnostics.
KrystalView for public-site and account-app usage analytics, masked session replay, browser error diagnostics and customer-scoped support investigation. Diagnostic replay follows the site's 90-day retention; short recent-step summaries are retained for up to 24 hours, while relevant case evidence follows support-case retention.

The master policy at krystalunity.com/privacy maintains the broader Krystal Unity sub-processor disclosure.

5. Data retention

Proof Packs are retained according to the customer policy selected for the workspace. The default retention period is 7 years to support compliance evidence, incident reconstruction, and auditability.

Operator account records are retained for the life of the subscription and a reasonable post-termination period for billing, support, security, and legal recordkeeping. Customers may request deletion or export subject to contractual, legal, and security obligations.

6. Security and data location

HaltState is primarily hosted with Hetzner in Germany. EU data residency is available for eligible customer deployments. We use TLS 1.2 or newer in transit, encryption at rest for production data stores, and multi-factor authentication for production access.

Access to production systems is limited to authorised personnel with a service need. Security events may be reviewed using governance telemetry, error logs, and audit evidence.

7. Your rights and contact

The master Krystal Unity Privacy Policy explains rights under GDPR and UK GDPR, the CCPA, and the Australian Privacy Principles. It also explains how to request access, correction, deletion, portability, restriction, objection, or a data protection addendum.

For HaltState privacy requests, contact info@krystalunity.com and include your organisation name and workspace details where relevant.

8. Changes

We may update this HaltState addendum as the product, legal requirements, or sub-processor set changes. Material changes will be reflected on this page and, where appropriate, communicated through service notices.

Last updated: 8 October 2026.