Halfspace ("we") makes Facet, at facet.halfspacelabs.com, and this site, halfspacelabs.com. This policy says what we collect, why, who helps us process it, and what you can do about it. If something here is unclear, write to privacy@halfspacelabs.com.
The short version
- Your tasks are yours. We use what you put into Facet only to build, check and run your specialists.
- We never use your data to train models for anyone else, and we don't sell it.
- When your app calls a specialist, our database keeps only the call's metadata (which version, which key, token counts, latency and a request ID), never the inputs or outputs. Our GPU provider holds them for up to 7 days, then deletes them.
- This site sets no cookies and has no analytics or ads.
What we collect
Your account
Your name, email address and profile picture, from the sign-in provider you choose (Google, GitHub or your company's single sign-on). We also keep the workspaces you belong to, your role in each, invitations you send, and the API keys you create (we store only a hash of each key).
What you put into Facet
Task descriptions, instructions, examples, Expectations, the requests you file (Asks) and anything you attach to them, files you upload, and the specialists Facet builds from them. Some examples are held out: Facet's agent never sees them and they never train a specialist. Only Facet's checks read them, and a task's owners can see what a check missed.
When you call a specialist
For each call: the version that answered, the key used, token counts, latency, time and a request ID. We use these to bill you, enforce your spending limit and show you usage. Your inputs and the specialist's outputs pass through to answer the call. We don't store them; Modal, which runs the call, keeps them for up to 7 days and then deletes them.
When you use the app
A session cookie that keeps you signed in, and a short-lived cookie used during sign-in. Both are needed for the app to work. We also keep a record of the changes made in your workspace and who made them, which you can see in the app, and standard server logs (IP address, browser, time, the page or API route) for security and debugging.
We send account email: sign-in, invitations, approvals and notices about your tasks. We don't send marketing email without asking.
How we use it
- To provide Facet: build and check your specialists, serve them, and show you their results.
- To bill you and enforce the limits you set.
- To keep Facet secure, prevent abuse and fix problems.
- To answer you when you contact us.
- To meet legal obligations.
We don't use your task data to improve Facet for other customers, and we don't use it to train our own or anyone else's general models.
Who processes it for us
We use these providers to run Facet. Each gets only what it needs for its part, under a contract that limits it to that purpose.
| Provider | What it does | What it sees |
|---|---|---|
| Google Cloud (US) | Runs the Facet app and API | Everything that passes through the app |
| Neon (US) | Database | Account, workspace and task records, call metadata |
| Cloudflare (R2, DNS) | File storage, this site, network | Uploaded files, examples and built specialists; site visits |
| Modal | GPUs that train, check and serve specialists | The task data a job needs; call inputs and outputs, for up to 7 days |
| OpenRouter | Sends work to open-weight models (such as DeepSeek) that write training examples and check answers, and screens what you send in against our acceptable use policy, using TypeSafe's Jev model, only on hosts that keep nothing | Task instructions, examples and answers a training run or check sends, held-out examples included; task descriptions, instructions, examples and requests for screening |
| Anthropic | Runs Facet's agent (Claude), which plans and carries out changes to your tasks | The task data the agent works on, except held-out examples |
| WorkOS | Sign-in | Your name, email and sign-in details |
| Resend | Sends account email | Your email address and the email's content |
We may also share data if the law requires it, to protect people or Facet from harm, or as part of a merger or sale of Halfspace, in which case this policy keeps applying to it.
Where it lives and how long
Facet stores data in the United States. We keep account and task data while your account is open. Versions you stop using move to cold storage rather than being deleted, so you can roll back. Some data has a fixed, shorter life:
- Call metadata: 90 days.
- Call inputs and outputs at Modal: up to 7 days.
- Ended sign-in sessions and accepted invitations: 30 days.
- Examples sent through OpenRouter for training, checks and screening: not kept. Every request goes only to a host with zero data retention, which keeps nothing once it answers.
- Flags our screening raises: 90 days after a person at Halfspace reviews them.
- Database backups: 7 days.
When you delete a workspace or your account, you have 7 days to undo it. After that we delete its data from our systems, and the last backups expire within 7 more days, so it is gone within 14 days. Requests by email are handled within 30 days. We keep only what the law requires, such as billing totals.
Your choices
- See and edit your tasks, examples and Expectations in the app at any time.
- Export a task (its specialist, instructions, examples and Expectations) from the app or through your agent.
- Delete a workspace you own, or your account, from the app, with 7 days to undo.
- Ask us for a copy of your personal data, to correct it, or to delete a single task.
- Revoke API keys and remove members from your workspace.
Write to privacy@halfspacelabs.com and we'll answer within 30 days. Depending on where you live (for example the EU, the UK or California), you may have further rights, such as to object to processing or to complain to your data protection authority; we honor them. We don't sell or share personal data for targeted advertising.
Security
Data is encrypted in transit and at rest. Access inside Halfspace is limited to the people who need it to run Facet, and they read your content only when needed to enforce our acceptable use policy, investigate a report, fix a problem you raised, or as the law requires. Held-out examples are sealed so Facet's agent never reads them, and each time an owner views what a check missed is recorded. To report a vulnerability, see our security policy.
Children
Facet is for people 18 and older, and we don't knowingly collect data from children.
Changes
When we change this policy we update the date above, and for changes that matter we tell you by email or in the app before they take effect.
Contact
Halfspace, privacy@halfspacelabs.com.