Privacy Policy

1. Who we are

This policy explains how Helm Intelligence Inc., a Delaware corporation (“Helm,” “we” or “us”), handles personal data collected through thehelm.ai (the “site”). We are the controller of that data for the purposes of the EU General Data Protection Regulation (“GDPR”) and the UK GDPR. You can contact us about privacy at privacy@thehelm.ai.

2. What we collect

Demo requests. Your name, work email, company and role, and anything you choose to write in the note.

Booking a call. When you pick a time, you are taken to our scheduling provider, which collects your name, email and chosen time and passes the booking to us. That provider also applies its own privacy policy to its pages.

Technical data. Our hosting provider processes request data, such as IP address, browser type and the pages requested, to deliver and protect the site, and keeps it in short-lived logs.

Analytics. We use Vercel Web Analytics to count page views and a few actions, such as a demo request, in aggregate. It does not use cookies or track you across other sites. It tells visits apart using a scrambled value derived from the request that resets every day, and it records the page, referring site, country, browser, operating system and device type.

Cookies. The site does not set its own cookies and does not use advertising cookies. Our scheduling provider may set cookies on its own pages.

Please don't send us special categories of personal data (such as health information) through the site.

3. How we use it and our legal bases

• To reply to your request, arrange and hold a call: to take steps you ask for before entering into a contract (GDPR Article 6(1)(b)) and our legitimate interest in responding to business enquiries (Article 6(1)(f)).
• To follow up with you about Helm after you contact us: our legitimate interest in developing business relationships (Article 6(1)(f)). You can opt out at any time and we will stop. We don't add you to a newsletter without your consent.
• To operate, secure and improve the site, measure how it is used in aggregate, and prevent misuse: our legitimate interests (Article 6(1)(f)).
• To meet legal obligations and to establish or defend legal claims: Article 6(1)(c) and 6(1)(f).

We don't sell personal data, share it for cross-context behavioral advertising, or make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share it with

We share personal data with service providers who process it on our instructions under written data processing terms: Vercel (hosting and analytics), Resend (email delivery), Cal.com (scheduling), Google (business email). We may also share it with professional advisers, with authorities where the law requires it, and with a buyer or successor if Helm is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply.

5. International transfers

Helm is based in the United States and our service providers process data there. Where we transfer personal data from the European Economic Area, the UK or Switzerland, we rely on the EU-U.S. Data Privacy Framework (and its UK Extension and the Swiss-U.S. framework) where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses, with the UK Addendum where relevant. You can ask us for a copy of the safeguards we use.

6. How long we keep it

• Demo requests and related correspondence: for as long as needed to handle your request and any relationship that follows, and no longer than 24 months after our last contact unless we enter into a contract with you or your company.
• Hosting logs: for the short period set by our hosting provider.
• Analytics: aggregate reports kept for up to 12 months.

7. Your rights

If you are in the EEA or the UK, you have the right to access your personal data, to have it corrected or erased, to restrict or object to our processing of it, and to receive it in a portable format. You can object to direct marketing at any time, and where we rely on consent you can withdraw it at any time. To use these rights, email privacy@thehelm.ai. We will reply within one month and may need to confirm your identity first. You also have the right to complain to the data protection authority in the country where you live or work, or in the UK to the Information Commissioner's Office.

If you are in California or another U.S. state with a consumer privacy law, you may have similar rights to know, access, correct and delete your personal information. We will not discriminate against you for using them.

8. Security

The site is served over an encrypted connection, access to personal data is limited to people who need it, and our providers apply their own safeguards. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

9. Children

The site is meant for businesses. It is not directed at children under 16 and we don't knowingly collect their personal data.

10. Changes

We may update this policy. We will change the date at the top when we do, and where a change is significant we will tell you through the site or by email.

11. Contact

Questions or requests about this policy: privacy@thehelm.ai.