1. Introduction
This Privacy Policy explains how Helmi Technologies, Inc. ("Helmi", "we", "us", or "our"), a Delaware corporation, collects, uses, shares, and protects information in connection with the Helmi platform and related products and services (the "Service"). It applies to information we process when you access or use the Service through app.helmi.com and related domains.
By using the Service, you acknowledge that you have read and understood this Privacy Policy. Your use of the Service is also governed by our Terms of Use.
2. Information We Collect
We collect the following categories of information:
- Account information. Your name, email address, password, and profile details. If you sign in through a third-party authentication provider (Google, LinkedIn, or Microsoft), we receive basic profile information from that provider.
- Organization information. Details about the companies or investor groups you create or join, including membership, roles, and organization settings.
- User Content. Content you upload or create, including documents, meeting recordings and transcripts, contacts, notes, investor updates, and portfolio data.
- Connected third-party data. When you connect an external account (such as Google, Microsoft, LinkedIn, or Notion), we access and process data from that service that you authorize — for example, emails, calendar events, contacts, or pages and documents you select to sync into your vault.
- Usage and device data. Information about how you interact with the Service, including log data, device and browser information, IP address, and analytics events used to operate and improve the Service.
3. How We Use Information
We use the information we collect to:
- Provide, maintain, secure, and improve the Service and its features;
- Authenticate users, manage accounts and organizations, and enforce our Terms;
- Deliver the features you request, including document sharing, meeting transcription, investor communications, and synchronization of content from connected services;
- Provide customer support and respond to your requests;
- Monitor usage, prevent fraud and abuse, and protect the security of the Service;
- Comply with legal obligations and enforce our agreements.
4. AI and Machine Learning
The Service uses artificial intelligence and machine learning to provide features such as meeting transcription, document text extraction, content summarization, content generation, and semantic search. Where we use User Content to develop, train, or enhance models, we use commercially reasonable efforts to aggregate and de-identify that content first, and we apply data-protection safeguards consistent with applicable law. Some AI features rely on third-party processors that act on our behalf under contractual confidentiality and data-protection commitments.
5. How We Share Information
We do not sell your personal information. We share information only as follows:
- Within your organization. Content and activity are visible to other members of your organization according to their roles and permissions.
- Service providers. With vendors and sub-processors who host infrastructure, process data, or provide functionality (such as AI processing) on our behalf, bound by confidentiality and data-protection obligations.
- At your direction. When you create shareable links or otherwise choose to share content, we make that content available to the recipients you designate.
- Legal and safety. When required by a legally binding government order or applicable law, or to protect the rights, property, or safety of Helmi, our users, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.
6. Third-Party Integrations
You may connect third-party accounts — including Google, Microsoft, LinkedIn, and Notion — to enable features such as email, calendar, and contact synchronization, and syncing pages or documents into your vault. We access only the data necessary to provide the features you enable, and only the items you authorize or select.
For our Notion integration, we request read-only access and use the content you choose to sync solely to provide the document-vault and AI-search features you enable. We do not use Notion data for advertising, and our use of information received from Notion APIs adheres to Notion's developer terms and applicable API policies. You can disconnect a third-party integration at any time from your account settings, which revokes our ongoing access. Your use of third-party services also remains subject to those services' own privacy policies.
7. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service. When you delete User Content or your account, we will delete the associated content within a reasonable period (and, upon request, within 60 days), except where we are required or permitted to retain it for legal, security, or legitimate business purposes.
8. Data Security
We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and limits on internal access to your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing. Many of these actions can be taken directly within your account settings. To exercise other rights, contact us using the details below. We will respond consistent with applicable data protection laws, including the GDPR and CCPA where they apply.
10. International Data Transfers
We are based in the United States and may process and store information in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers of personal information.
11. Children's Privacy
The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify affected users via email or through the Service and update the "Last updated" date at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].