Privacy Policy

Privacy Policy

Helm is an AI safety company working to build reliable interfaces for AI agents.

This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website and other places where Helm acts as a data controller—for example, when you interact with Helm App or other products as a consumer for personal use ("Services").

This Privacy Policy also describes your privacy rights. More information about your rights, and how to exercise them, is set out in Section 4 (“Rights and Choices”).

1. Collection of Personal Data

We collect the following categories of personal data:

Personal data you provide to us directly

• Identity and Contact Data: Helm collects identifiers, including your name and email when you sign up for a Helm account, or to receive information on our Services. We may also collect or generate indirect identifiers (e.g., “USER12345”).
• Payment Information: We shall collect your payment information if you choose to purchase access to Helm’s products and services.
• Inputs and Outputs: You are able to interact with our Services in a variety of formats, including but not limited to chat and agentic sessions (“Prompts” or "Inputs"), which generate responses and actions (“Outputs”) based on your Inputs. This includes third-party applications you choose to integrate with our Services. If you include personal data or reference external content in your Inputs, we will collect that information and this information may be reproduced in your Outputs.
• Feedback on your use of our Services: We appreciate feedback, including ideas and suggestions for improvement through the contact page on our website.
• Communication Information: If you communicate with us, including via our website, we collect your name, contact information, and the contents of any messages you send.

Personal data we receive automatically from your use of the Services

When you use the Services, we also receive certain technical data automatically (described below, collectively “Technical Information”). This includes:

• Device and Connection Information. Consistent with your device permissions, your device automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, time zone setting, IP address (including information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers), and device location.
• Usage Information. We collect information about your use of the Services, such as the dates and times of access and other information about how you use the Services, and technology on the devices you use to access the Services.
• Log and Troubleshooting Information. We collect information about how our Services are performing when you use them. This information includes log files. If you or your device experiences an error, we may collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred.
• Cookies & Similar Technologies. We and our service providers use cookies, scripts, or similar technologies (“Cookies”) to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Services to make them safer and more useful to you.

2. Uses of Personal Data Permitted Under Applicable Data Protection Laws

We use your personal data for the following purposes:

• To provide, maintain and facilitate any products and services offered to you with respect to your Helm account, which are governed by our Terms of Service;
• To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience;
• To communicate with you, including to send you information about our Services and events;
• To create and administer your Helm account;
• To facilitate payments for products and services provided by Helm;
• To prevent and investigate fraud, abuse, and violations of app usage, unlawful or criminal activity, unauthorized access to or use of personal data or Helm systems and networks, to protect our rights and the rights of others, and to meet legal, governmental and institutional policy obligations;
• To investigate and resolve disputes;
• To investigate and resolve security issues;
• To debug and to identify and repair errors that impair existing functionality; and
• To improve the Services and conduct research, including training our models

3. How We Disclose Personal Data

Helm will disclose personal data to the following categories of third parties for the purposes explained in this Policy:

• Affiliates & corporate partners. Helm discloses the categories of personal data described above between and among its affiliates and related entities.
• Service providers & business partners. Helm may disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, data processing, and providing you with the services.

Helm may also disclose personal data in the following circumstances:

• As part of a significant corporate event. If Helm is involved in a merger, corporate transaction, bankruptcy, or other situation involving the transfer of business assets, Helm will disclose your personal data as part of these corporate transactions.
• Third-Party Websites and Services: Our Services may involve integrations with, or may direct you to, websites, apps, and services managed by third parties. By interacting with these third parties, you are providing information directly to the third party and not Helm and subject to the third party’s privacy policy. If you access third-party services, such as social media sites or other sites linked through the Services (e.g., if you follow a link to our Twitter account), these third-party services will be able to collect personal data about you, including information about your activity on the Services. If we link to a site or service via our Services, you should read their data usage policies or other documentation. Our linking to another site or service doesn’t mean we endorse it or speak for that third party.
• Pursuant to regulatory or legal requirements, safety, rights of others, and to enforce our rights or our terms. We may disclose personal data to governmental regulatory authorities as required by law, including for legal, tax or accounting purposes, in response to their requests for such information or to assist in investigations. We may also disclose personal data to third parties in connection with claims, disputes or litigation, when otherwise permitted or required by law, or if we determine its disclosure is necessary to protect the health and safety of you or any other person, to protect against fraud or credit risk, to enforce our legal rights or the legal rights of others, to enforce contractual commitments that you have made, or as otherwise permitted or required by applicable law.
• With an individual's consent. Helm will otherwise disclose personal data when an individual gives us permission or directs us to disclose this information, including as a part of our Services.

4. Rights and Choices

Depending on where you live and the laws that apply in your country of residence, you may enjoy certain rights regarding your personal data, as described further below. However, please be aware that these rights are limited, and that the process by which we may need to action your requests regarding our training dataset are complex. We may also decline a request if we have a lawful reason for doing so. That said, we strive to prioritize the protection of personal data, and comply with all applicable privacy laws.

To exercise your rights, you or an authorized agent may submit a request by contacting us at our website. After we receive your request, we may verify it by requesting information sufficient to confirm your identity. You may also have the right to appeal requests that we deny by contacting us at our website. Helm will not discriminate based on the exercising of privacy rights you may have. Set out below is a summary of the rights which you may enjoy, depending on the laws that apply in your country of residence.

• Right to know: the right to know what personal data Helm processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.
• Access & data portability: the right to request a copy of the personal data Helm processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information.
• Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions.
• Correction: the right to request that we correct inaccurate personal data Helm retains about you, subject to certain exceptions. Please note that we cannot guarantee the factual accuracy of Outputs. If Outputs contain factually inaccurate personal data relating to you, you can submit a correction request and we will make a reasonable effort to correct this information.
• Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications.
• Restriction: the right to restrict our processing of your personal data in certain circumstances.
• Withdrawal of consent. Where Helm’s processing of your personal data is based on consent, you have the right to withdraw your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• Automated decision-making: Helm does not engage in decision making based solely on automated processing or profiling in a manner which produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services).
• Sale & targeted Helm marketing of its products and services. Helm does not “sell” your personal data as that term is defined by applicable laws and regulations. You can opt-out of sharing your personal data for targeted advertising to promote our products and services, and we will honor global privacy controls. 

6. Data Retention, Data Lifecycle, and Security Controls

Helm retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy.

When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.

Aggregated or De-Identified Information

We may process personal data in an aggregated or de-identified form to analyze the effectiveness of our Services, conduct research, study user behavior, and train our AI models as permitted under applicable laws. For instance:

• When you submit Feedback, we disassociate Inputs and Outputs from your user ID to use them for training and improving our models.
• If our systems flag Inputs or Outputs for potentially violating our usage, we disassociate the content from your user ID to train our trust and safety internal classification and generative models. However, we may re-identify the Inputs or Outputs to enforce our Usage Policy with the responsible user if necessary.
• To improve user experience, we may analyze and aggregate general user behavior and usage data. This information does not identify individual users.

Security Controls Relating to our Processing of Personal Data

We implement appropriate technical and organizational security measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

7. Children

Our Services are not directed towards, and we do not knowingly collect, use, disclose, sell, or share any information from children under the age of 18. If you become aware that a child under the age of 18 has provided any personal data to us while using our Services, please contact us via our website and we will investigate the matter and, if appropriate, delete the personal data.

8. Changes to Our Privacy Policy

Helm may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy, as appropriate.