Legal
Privacy Policy
Last updated 2026-10-25
[DATA CONTROLLER]) mark details that must be finalized before this becomes binding.The short version
Behalf manages limited grants and records requested actions, approvals, and outcomes. Hosted Anchor OmniConnect manages your connected account sign-in, including credentials when required by your sign-in method. Behalf stores identity references and encrypted browser capabilities; agents receive a limited Behalf token.
What we collect
- Account information — your email address and name when you register.
- Audit logs — a record of grants, actions, approvals, and revocations so you can see exactly what was done on your behalf.
- Delegated-session metadata — which account a session targeted, the policy in force, timestamps, and status. We also retain the target and content of pending actions so the owner can review the exact request. Configured content caches are encrypted; read conversation bodies are not copied into action receipts.
- Billing data — subscription and payment status, processed by our payment processor (we do not store full card numbers).
Connected account sign-in
Your connected account sign-in takes place through hosted Anchor OmniConnect. Anchor manages the saved identity and browser profile. Behalf retains server-side identity references and encrypted capabilities needed for managed execution. Your Behalf account password is separately stored as a password hash.
Subprocessors
We rely on the following subprocessors to operate the Service. Each processes data only as needed to provide its function:
Data retention
- Audit logs — retained for approximately 365 days, then purged.
- Thread cache — transient cached content is encrypted at rest (AES-256-GCM) and expires after roughly 24 hours.
- Account data — retained while your account is active and deleted on request (see below).
Your rights (GDPR & similar)
Depending on where you live, you have rights to access, correct, export, and delete your personal data, and to object to or restrict certain processing. [DATA CONTROLLER] is the controller of your personal data.
You can export or delete your data directly from your account page, or by emailing us at the address below. We respond to verified requests within the timeframe required by applicable law.
Cookies
We use strictly necessary cookies to keep you signed in and to secure the Service. Where enabled, we use first-party product analytics to understand usage and improve the product; you can control non-essential cookies through your browser settings.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.
Contact
Privacy questions or data requests? Contact us at support@behalf.work.
See also our Terms of Service and Security page.