How we keep your logins safe

Short, in plain words. The long version is in our terms.

Where a login goes

You type it once, on a page that lasts 15 minutes and works once. It is encrypted on the way in with a key that exists only for your business, and stored in a separate vault that the rest of Hal cannot read. The page forgets it the moment you save. It is never shown again, to anyone, including you.

Who can open the vault

Only the part of Hal that does the work for you: the one that signs into your Instagram as the salon. Every time it opens your login, that is written down with the time and the reason. The part of Hal you talk to cannot open it at all; it can only ask for it to be destroyed.

What Hal may do with it

What you chose on the page: read only (Hal reads and tells you; it never writes), or read and reply (Hal answers and books as the salon). "Disconnect Instagram" destroys the login and ends the session the same minute; connect again to choose differently.

Codes and two-step checks

If a service asks for a code when Hal signs in, Hal asks you for it in the chat, uses it once, and forgets it. Hal never stores authenticator secrets, never solves CAPTCHAs, and stops on any block or warning from the service. If something looks off, it stops and tells you.

What Hal never does

Never uses your logins or your clients' messages to train models. Never shares them with anyone. Never sends a message you didn't allow. Never keeps a login you asked it to destroy.

The honest part

Hal signs in as you, the way an employee with your login would. Some services' terms frown on that; you decide whether to allow it for yours, and our terms say so plainly. If a service objects, Hal stops using it.

Questions: hal@hirehal.ai