1. Introduction

Tectoro Consulting Private Limited (“Tectoro,” “we,” “us,” or “our”) develops and operates halofort, a Unified Endpoint Management Extended (“UEMX”) platform (“halofort,” the “Service,” or the “Platform”). This Privacy Policy (“Policy”) explains what personal information we collect through halofort, how and why we use it, who we share it with, how long we keep it, and the rights available to you.

This Privacy Policy explains who we are, what information halofort collects, how that information is used, and the choices available to you. This Privacy Policy applies whether you access halofort as an end user of a device or account enrolled by your organization, as an IT administrator managing an organization's deployment, or otherwise interact with the halofort admin console, the halofort agent applications installed on managed devices, and any companion applications distributed under the halofort name or under an alternate name at your organization's request. Please read this Policy carefully. By enrolling a device or account in halofort, or by continuing to use halofort, you acknowledge that you have read and understood this Policy. Where required by applicable law, we will present this Policy, or a relevant summary, as a consent screen within the app before an applicable feature is activated.

2. About halofort

halofort is a Unified Endpoint Management Extended (UEMX) platform. It helps organizations manage, secure, and enforce policy across the devices, identities, and access points their employees use for work.

An organization's IT administrator enrolls devices, users, or applications into halofort and configures the policies that apply to them, based on the pricing plan and features their organization has subscribed to. halofort then works in the background to keep enrolled devices and accounts compliant with those policies, so that they remain safe and usable for work.

halofort is offered as a suite of modules, which may be licensed individually or together depending on your organization's plan:

• halo.mobil – Mobile Device Management for Android, iOS, and Android TV, including app management, restrictions, remote view and control, OS updates, location tracking and geofencing, and compliance policies.

• halo.walix – Cross-platform Unified Endpoint Management for Windows, macOS, Linux, Android, iOS, Android TV, and ChromeOS, including browser configuration, certificate management, USB and device controls, patch management, remote script execution, and device lifecycle management.

• halo.ideon – Identity & Access Management, including user directory import via LDAP, Az-ure AD, Google, and Active Directory; Single Sign-On (SAML/OIDC); Multi-Factor Authenti-cation (email, SMS, push, TOTP); SCIM-based user synchronization; and conditional access.

• halo.guard – Security & Data Protection, including WebShield content controls for Gmail, Outlook, and Chrome; a managed browser (Halo Surf); Zero Trust Network Access (ZTNA); compliance enforcement; patch management; and Web DLP controls that restrict personal account logins and attachment transfers on managed devices.

The specific data halofort collects on your device or account depends on your organization's pricing plan and which features have been enabled within that plan. Not every organization uses every feature, so the information collected can vary from one customer to another.

3. Scope of Policy

This policy applies to:

• The halofort admin console,

• The halofort agent apps installed on managed devices (desktops, mobile, or other endpoints),

• Any companion apps released under the halofort name or under a different name at your organization’s request, to which this Policy has been made to apply,Some halofort apps may be distributed under different names depending on your organization's setup; this policy still applies to them; and

• The halofort website, to the extent it collects personal information.

• This Policy does not apply to third-party websites, products, or services that may be linked from within halofort, or to any product or service that displays its own, separate privacy policy.

Where required, this policy is also presented to you directly within the app as a consent screen before any related feature is activated.

4. Definitions

“Personal information” or “personal data” means any information that identifies, relates to, or could reasonably be used to identify, directly or indirectly, a particular individual.

“Customer” means the organization that has subscribed to halofort and enrolled your device or account.

“Processing” means any operation performed on personal information, including collection, storage, use, disclosure, or deletion.

“Service provider” or “sub-processor” means a third party that processes personal information on our behalf and under our instructions.

5. Our Approach to Personal Information

Personal information is any information that can identify you, directly or indirectly. It is our policy to keep customer data confidential and to collect only what is reasonably necessary to provide and secure the Service.

We do not sell personal information to advertisers, data brokers, or any other third party, and we never will. We do not use personal information collected through halofort for advertising, and we do not build behavioral profiles of individuals for any purpose beyond keeping your organization's systems secure and compliant.

6. Information We Collect

6.1 Information You provide

halofort is designed so that little to no information needs to be entered by you directly. Most data is collected automatically once a device or account is enrolled, based on the features your IT administrator has turned on.

Where you are asked to provide information directly, such as during account setup, this is limited to what is needed to create and secure your account (for example, name, work email, and authentication details).

6.2 Information collected automatically

The exact data collected depends on your organization's pricing plan and which features are enabled within that plan for your account. Not all of the following is collected at once; your IT administrator's plan and enabled features determine what is actually collected on your device or account.

Broadly, this can include:

Device information

• Device hardware and operating system details

• Installed applications and app usage details

• Battery, Wi-Fi, and other device settings

• Usage logs and network logs

• SIM details

• Call logs

• Location, used for features like geofencing device tracking
  
  

Identity and access information

• Login and authentication activity

• Single sign-on session details

• Directory attributes such as name, email, job title, and group membership

• Multi-factor authentication status
  
  

Security and network information

• Network connection and access logs

• Device compliance and posture signals used to grant or deny access

• Threat and anomaly detection signals
  
  

Support and remote access

• Screen content, captured only during an active remote support session, to help our support team see and resolve the issue

• Camera images, only if a session requires visual troubleshooting and only with your consent
  
  

Communication features

• Messages sent to you by your IT administrator through halofort's messaging feature

• Files and multimedia content distributed to you by your organizationh

• Chat content, if your organization has enabled secure chat between employees

None of the above is collected all at once. Your IT administrator's plan and enabled features determine what is actually collected on your device or account.

6.3 Images and videos

halofort's apps and website may collect images or videos for specific app functions, such as profile pictures or content you choose to submit. Any images or videos you submit are:

• Stored on our servers only for the purpose they were submitted for

• Never shared with third parties

• Used only internally, such as to improve our services

By submitting an image or video, you consent to its collection and storage as described above.

6.4 Screen content and camera images

Some halofort features, such as remote support sessions, involve capturing what is on your screen so our support team can see the issue you are facing, or your camera image if a session requires visual troubleshooting. This is:

• Only active during a live support session, and only with your consent

• Transmitted directly to the authorized support device using encrypted protocols

• Not stored on any server or within the app

• Access ends as soon as the support session ends
  
  

6.5 Browser and productivity tool protection

If your organization uses halofort's web filtering feature for Chrome, we may look at the pages you visit, page titles, and timestamps to apply content filtering rules.

Some organizations also use a halofort extension that restricts copying, cutting, pasting, printing, or inspecting content within Gmail, Google Docs, Google Drive, and Google Forms, as a data-loss-prevention measure. This extension does not read or store the content itself; it only enforces the restriction your IT administrator has configured.

6.6 Permissions Halofort May Request

Depending on which features your organization enables, halofort apps may request permissions such as: storage access, notifications, Wi-Fi state, call logs, location, battery optimization exceptions, device identifiers, app usage access, and phone state. Not every app requests every permission; the list above broadly reflects the full set across all halofort apps combined.

7. How We Use Your Information

Information collected through halofort is used to help your IT administrator keep your device or account compliant with your organization's policies, and to let halofort respond automatically when something falls out of compliance.

For example:

• Location data supports geofencing, so a device can be automatically locked if it leaves an approved area.

• Login and session data supports single sign-on and access decisions, where that feature is enabled.

• Device posture data supports Zero Trust access checks, where that feature is enabled.

• Screen and camera data, when used, supports live troubleshooting during a support session.

We may also use information to: provide, operate, and maintain the Service; monitor and improve platform security, reliability, and performance; investigate and prevent fraud, abuse, or unauthorized access; communicate with Customers and administrators about the Service; and comply with our legal obligations.

We do not use your personal information for advertising, and we do not build profiles of you for any purpose beyond keeping your organization's systems secure and compliant.

8.What Your IT Administrator Can Control

Because halofort is a workplace management tool, your organization's IT administrator has meaningful control over enrolled devices and accounts, depending on the pricing plan and features enabled. Depending on what is active, this can include installed apps, security settings, wallpaper and boot screens, automatic updates, kiosk mode, geofencing and auto-lock, single sign-on policies, and network access rules.

9. How We Share Your Information

We share personal Information collected by halofort only in the following circumstances:

With your organization's IT administrator through the halofort admin console, since that is the whole point of the platform: helping them keep your device and account secure and compliant.

• With service providers and sub-processors who perform services on our behalf, such as cloud hosting, infrastructure, customer support tooling, and analytics, under contractual ob-ligations of confidentiality and data protection consistent with this Policy.
  
  

• For legal reasons, where we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or a valid governmental request, or to protect the rights, property, or safety of Tectoro, our Customers, or others.

  
  

• With your consent, where you have separately agreed to a specific disclosure

Sensitive and personal information is encrypted end-to-end, meaning it is protected both while it is being transmitted and while it is stored. This limits access to your organization's authorized administrators and our authorized personnel on a need-to-know basis.

We do not sell or rent your personal information to third parties. We do not share it with advertisers.

10. Data Security

We apply security practices consistent with recognized industry standards to protect your data, including:
End-to-end encryption for sensitive and personal data, both in transit and at rest

• Encrypted transmission for any live screen-sharing sessions

• Access controls that limit who can view collected data

• Session-based handling for remote support, so screen data is not retained beyond the session

11. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service to the Customer, fulfil the purposes described in this Policy, and comply with our legal, accounting, or reporting obligations.

• Device, identity, and security telemetry is generally retained for the duration of enrollment plus a limited period thereafter to support security investigations and compliance report-ing, as configured by the Customer's plan.
  
  

• Screen content and camera images captured during remote support sessions are not stored and are not retained beyond the live session (see Section 6.4).
  
  

• Account and directory information is retained for as long as your account remains active, and for a limited period after deactivation as required for legal, audit, or dispute-resolution purposes.

Specific retention periods may vary by Customer configuration. Your organization's IT administrator can provide details on the retention settings that apply to your device or account, and Tectoro deletes or anonymizes personal information when it is no longer needed for these purposes, subject to legal retention requirements.

12. Your Data Protection Rights

Depending on your location, you may have some or all of the rights described below. Because your organization typically controls the halofort account associated with your device, we ask that you route these requests through your organization's IT administrator in the first instance; we will support your organization in responding to your request.

12.1 Rights Under the GDPR (EEA / UK) and Similar Laws

If applicable data protection laws such as the GDPR apply to you, you have the right to:

• Access your personal data we hold about you

• Correct inaccurate or incomplete information, subject to certain exceptions

• Request erasure of your personal information,

• Restrict how it is processed, andpersonal data (see Section 19, Grievance Officer).

• Receive a copy of it in a portable format.

12.2 Rights Under India's Digital Personal Data Protection Act, 2023

If you are located in India, you have the right to:

• Obtain a summary of the personal data we process about you and the processing activities carried out;

• Request correction, completion, updating, and erasure of your personal data;

• Nominate another individual to exercise your rights in the event of your death or incapacity; and

• Have readily available means to register a grievance with us regarding our processing of your personal data (see Section 19, Grievance Officer).

12.3 How to Exercise Your Rights

To exercise any of these rights described above, please first contact your organization's IT administrator, since they control the halofort account associated with your device and can action most requests directly. If you are unable to resolve your request through your organization, you may contact us using the details in Section 21, and we will respond within the timeframes required by applicable law. We may need to verify your identity, and the identity of your organization's authorization, before fulfilling certain requests.

13. Consent for Sensitive Features

Features that involve more sensitive data, such as screen sharing or camera access during remote support, are only activated with your explicit consent at the time of use. You will be shown what is being accessed and why before it happens, and you can end the session or revoke the permission at any time.

14. Data Breach Notification

If we become aware of a security incident that results in the unauthorized access, disclosure, alteration, or loss of personal information we process, we will investigate the incident and notify affected Customers, and, where required by applicable law, affected individuals and regulators, without undue delay and in accordance with the timeframes required by applicable law.

15 .Grievance Officer/ Data Protection Contact

In accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made thereunder, we have designated a Grievance Officer to address complaints regarding the processing of your personal data:

Email: privacy@halofort.com

Address: Tectoro Consulting Private Limited, Block D, 8th Floor, i-Labs Center, Opp. to Inorbit Mall, Madhapur, Hyderabad, Telangana – 500081, India

The Grievance Officer will acknowledge your complaint and aim to resolve it within the timeframe prescribed by applicable law.

16 .Grievance Officer/ Data Protection Contact

We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the date below. Continuing to use halofort after an update means you accept the revised policy.

Last updated: 23/07/2026

17 Governing Law and Dispute Resolution

This Policy is governed by the laws of India, without regard to conflict-of-laws principles, except where applicable local data protection law requires otherwise for individuals located outside India. Any dispute arising out of or relating to this Policy that is not otherwise resolved through our grievance process will be subject to the exclusive jurisdiction of the courts of Hyderabad, Telangana, India, unless applicable law provides you with a mandatory right to bring proceedings elsewhere.

18. Contact Us

For questions about your own data, please contact your organization's IT administrator. For technical or product questions,
reach out to our support team at support@halofort.com.