Privacy Policy — HALO SEO: AI & LLM Page Analyser

Privacy Policy — HALO SEO: AI & LLM Page Analyser

Effective: 26 June 2026

Last updated: 26 June 2026

Your privacy is important to us. It is our policy to respect your privacy and to comply with any applicable law and regulation regarding personal information we may handle in connection with our browser extension, HALO SEO — AI & LLM Page Analyser ("the Extension"), and its associated services.

The Extension is a productivity tool that analyses the web page you are currently viewing for SEO, technical, E-E-A-T and LLM-visibility signals, and can generate AI-powered recommendations. It is developed and published by A Latty, trading as humwhistle (humwhistle.com), United Kingdom. For privacy questions, contact dev@humwhistle.com.

This policy explains what data the Extension handles, how it is used, where it is stored, who it is shared with, and your rights.


1. How the Extension Handles Your Data (Summary)

This section sets out, plainly, exactly what the Extension does with data. The more detailed sections below expand on it.

Data the Extension accesses

The Extension only accesses data when you actively run a scan, or when you enter information into its settings. Specifically:

  • Your Anthropic API key. If you choose to use the AI features, you enter your own Anthropic API key into the Extension's settings.
  • Content of the page you choose to analyse. When you run a scan, the Extension reads information from the active browser tab. This may include the page URL and title; meta tags (description, robots, viewport, author, keywords); Open Graph and Twitter card tags; canonical tags; heading text (H1–H4); image alt attributes and source URLs; links and link attributes; structured data (JSON-LD schema); author and publication dates; and the page's text content for word-count and readability analysis.
  • Scan results. The analysis the Extension produces for each scan, including any AI-generated recommendations.

The Extension does not collect your name, email address, postal address, date of birth, device identifiers, location, payment details, or browsing history. It contains no analytics, telemetry, tracking, or advertising, and does not track you across websites.

How the data is used

  • Page content collected during a scan is used solely to produce the on-screen analysis for that page.
  • If you have enabled AI features, the relevant page content is included in a request to the Anthropic API so that Claude can generate written recommendations. This happens only when you run a scan, and only for the page you are analysing.
  • Your API key is used solely to authenticate those requests to Anthropic.
  • Nothing is processed in the background; the Extension does nothing with your data unless you start a scan.

Where the data is stored

  • Your API key and your scan history are stored locally on your own device, using the browser's chrome.storage.local mechanism. They are not transmitted to us and we have no access to them.
  • Scan history is kept per website (most recent scans only) and expires automatically after 7 days, or sooner if local storage approaches its limit.
  • We operate no servers and maintain no database for the Extension. As the developer, we do not receive, store, or have access to your API key, the pages you scan, or your scan results.
  • You can clear all locally stored data at any time using the "Delete all" option in the Extension's history panel, or by uninstalling the Extension.

Who the data is shared with

The Extension shares data with one third party, and only when you use the AI features:

  • Anthropic (the Anthropic API / Claude). When you run a scan with AI features enabled, the page content described above is transmitted, over an encrypted HTTPS connection, to the Anthropic API to generate recommendations. This is governed by Anthropic's own privacy policy: https://privacy.claude.com/en/. Under Anthropic's commercial terms, data submitted through the API is not used to train Anthropic's models by default.

We do not sell your data, share it for advertising, or transmit it to any other third party. No data is sent to us (the developer) or to humwhistle.com.


2. Information We Collect

Information we handle falls into two categories: "voluntarily provided" and "collected during use."

Voluntarily provided information is anything you knowingly and actively provide, such as:

  • your Anthropic API key (entered in the Extension's settings), and
  • any details you include if you contact us by email (e.g. your name and email address).

Collected during use refers to the page content read on the active tab when you choose to run a scan, as described in Section 1.

The Extension does not automatically collect device information, usage statistics, or analytics.


3. Security of Your Information

We protect information within commercially acceptable means to prevent loss, theft, and unauthorised access, disclosure, copying, use, or modification. Your API key is held in your browser's local extension storage and is not transmitted to us. All requests to the Anthropic API are made over encrypted HTTPS connections.

No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute data security. You are responsible for keeping your own API key confidential and for the security of any device on which the Extension is installed.


4. How Long We Keep Your Information

Because the Extension stores data locally on your device, retention is under your control: scan history auto-expires after 7 days, and your API key remains stored locally until you remove it or uninstall the Extension. We, as the developer, retain nothing from your use of the Extension.

If you contact us by email, we may retain that correspondence for the duration of your enquiry and for our records, after which we delete it or make it anonymous, unless we are required to retain it for a legal, accounting, or reporting obligation.


5. Children's Privacy

The Extension is a professional SEO tool. We do not aim it at children under the age of 13 and do not knowingly collect personal information about children under 13.


6. Disclosure of Information to Third Parties

We may disclose information to:

  • Anthropic, as described in Section 1, when you use the AI features (the only third-party service the Extension transmits data to);
  • our contractors or related entities who assist us in operating the Extension, where applicable;
  • courts, tribunals, regulatory authorities, and law enforcement, as required by law or to establish, exercise, or defend our legal rights; and
  • an entity that acquires all or substantially all of our assets and business (see Section 9).

We do not disclose information to advertisers, credit-reporting agencies, or data brokers, and we do not sell personal information.


7. International Transfers of Information

We, the developer, are based in the United Kingdom and operate no servers; data handled by the Extension is stored locally on your own device.

When you use the AI features, page content is transmitted to Anthropic, which processes it in the United States and other locations where it or its providers operate. Where personal information is transferred internationally in this way, we rely on appropriate safeguards as required by the UK GDPR (Article 45/46) and the Data Protection Act 2018, such as standard contractual clauses. Anthropic's handling of that data is governed by its own privacy policy (https://privacy.claude.com/en/).


8. Your Rights and Controlling Your Information

Your choice: You do not have to provide information to us; however, if you do not provide an API key, the AI features of the Extension will not function.

Access, correction, and other rights: Because we hold no personal information about you on our own systems, in most cases there is no stored personal data for us to access, correct, or erase. Where we do hold correspondence you have sent us, the rights below apply.

Non-discrimination: We will not discriminate against you for exercising any of your rights.


9. Business Transfers

If we are acquired, or in the unlikely event we cease trading, data we hold (which, for the Extension, is minimal and stored on your device rather than ours) may be among assets transferred. Any acquiring party may continue to use information in accordance with this policy.


10. Limits of Our Policy & Changes

The Extension analyses pages and may reference external sites we do not operate; we are not responsible for their content or privacy practices. We may update this policy to reflect changes to the Extension or to legal requirements, and will post any changes at this same URL with an updated "Last updated" date.


11. UK GDPR Disclosures

Data Controller

We, A Latty, trading as humwhistle (United Kingdom), are the Data Controller with respect to any personal information you provide to us directly (for example, by email).

Legal Bases for Processing

Our lawful bases depend on how you use the Extension and include:

  • Consent — where you provide your API key and run a scan, you consent to the described processing, including transmission of page content to Anthropic. You may withdraw consent at any time by ceasing to use the AI features, removing your API key, or uninstalling the Extension.
  • Legitimate interests — to provide, operate, and improve the Extension and to respond to enquiries.
  • Compliance with the law — where we have a legal obligation to retain or disclose information.

We do not send marketing communications and do not market to anyone under 18.

Your Data Subject Rights

Subject to the limits of UK data protection law, you have the right to be informed; the right of access; the right to rectification; the right to erasure; the right to restrict processing; the right to object; and the right to data portability. As noted in Section 8, because we hold almost no personal information about Extension users on our own systems, these rights will in practice apply mainly to any correspondence you send us. The statutory deadline for a Data Subject Access Request is 30 calendar days.

Complaints to the ICO

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority. We would appreciate the chance to address your concern first (see Contact below).

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — Tel: 0303 123 1113 — www.ico.org.uk


Contact Us

For any questions or concerns about this privacy policy or how the Extension handles data:

A Latty — humwhistle
Email: dev@humwhistle.com

Website: https://humwhistle.com