Privacy Policy

Helm Technologies LLC (“Helm,” “we,” “us”) helps service businesses respond to missed calls and qualify incoming leads. This policy explains what we collect, why, and what you can do about it.

Account information. Business name, owner name, email address, phone number, and other details you provide at signup or in your dashboard.

Communications data. When your customers call or text your business number, we receive phone numbers, call metadata (time, duration, direction), message content, and, where applicable, voice recordings and transcripts. We also process the responses Helm generates on your behalf.

Usage and device data. Browser type, device information, IP address, pages viewed, and basic interaction events, collected when you use our dashboard or website.

Cookies. We use a small number of cookies and similar technologies for authentication, preferences, and basic analytics. You can control cookies in your browser settings.

We use the information we collect to:

• Operate, maintain, and improve the Services;
• Generate automated replies, summaries, and dashboards on your behalf;
• Monitor quality, prevent abuse, and keep the Services secure;
• Communicate with you about your account, support requests, and product updates;
• Comply with legal obligations.

Helm uses third-party AI models to draft replies, classify messages, and summarize conversations. Message content sent to these providers is processed to produce the Services. We do not train public AI models on your Customer Data, and we use providers that contractually prohibit such training.

We share data with vendors that help us deliver the Services. Current subprocessors include:

• Supabase: database and authentication
• Vercel: hosting and deployment
• Telnyx and Twilio: telephony (voice and SMS)
• OpenAI: AI inference
• Inngest: background job processing
• Upstash: rate limiting and ephemeral storage
• Analytics and error-reporting tools

We review our subprocessors for security practices and data-handling commitments.

We share information only as needed to run the Services:

• With the subprocessors described above;
• With you and people you authorize (e.g., teammates in your account);
• To comply with law, lawful requests, or to protect rights and safety;
• In connection with a business transaction (merger, acquisition, asset sale).

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.

We keep information for as long as your account is active and for a reasonable period after to meet legal, operational, and backup needs. You can request deletion of your account data by emailing us.

We use reasonable technical and organizational measures to protect information, including encryption in transit, access controls, and row-level security at the database level. No system is perfectly secure. Please keep your account credentials safe.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, email hello@helmassist.com. We’ll respond within the time required by applicable law.

California residents have rights under the CCPA/CPRA. EEA, UK, and Swiss residents have rights under the GDPR/UK GDPR. We do not discriminate against anyone for exercising these rights.

We’re based in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the U.S. and other countries where our service providers operate.

The Services are not directed to children under 13, and we don’t knowingly collect personal information from them.

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date above, and we’ll notify you by email or in-app when appropriate.

Questions, concerns, or requests? Email hello@helmassist.com.