HELM OS is an AI-powered revenue operating system for field sales teams and business owners. We help you manage leads, tasks, pipelines, team communication, and AI-assisted outreach from one platform.
Controller: HELM OS ("we", "us", "our")
Contact: privacy@helmos.io
Platform: helmos.ie
| Data | Source | Purpose |
|---|---|---|
| Email address | Registration | Authentication, account management, billing |
| Display name | Profile setup | Showing your identity to teammates |
| Role and industry | Onboarding | Personalising AI recommendations |
| Revenue goal and ICP | Onboarding | Building your revenue plan and AI context |
| Data | Source | Purpose |
|---|---|---|
| Lead records (names, companies, phone numbers, emails) | You enter or import | CRM core functionality |
| Call logs, notes, follow-up dates | You enter | Sales activity tracking |
| Pipeline stages and deal values | You enter | Revenue forecasting |
| Tasks and priorities | You create | Task management |
| Imported CSV or spreadsheet data | You upload | Bulk lead import |
HELM's AI brain builds a persistent memory of your business to improve recommendations over time. This includes:
| Integration | Data Accessed | Stored? |
|---|---|---|
| Gmail | Email subject lines and thread context linked to leads | Metadata only — no email body stored server-side |
| Google Calendar | Event titles, times, and attendees linked to follow-ups | Metadata only |
| Google Sheets | Lead data you explicitly import | Imported into your CRM only |
| Airtable | Lead data you explicitly import | Imported into your CRM only |
All OAuth tokens are stored encrypted. We request the minimum permissions necessary and never read data you have not explicitly connected.
We collect anonymised usage events (e.g. "dashboard viewed", "AI chat used") to improve product features. This data contains no personal information about your leads or prospects.
Payments are processed by Stripe. We store only your subscription status, plan tier, and Stripe customer ID — never your card number or payment details.
We do not use your lead data, call logs, or AI conversations to train shared AI models. Your business data stays in your workspace.
HELM Brain uses the Anthropic Claude API to generate responses, recommendations, and actions. When you chat with HELM or trigger an AI action:
We never sell your data. We share data only with the following categories of recipients, all bound by data processing agreements:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Supabase | Database and authentication infrastructure | All app data (encrypted at rest) |
| Anthropic | AI inference (HELM Brain) | Workspace context included in prompts |
| Stripe | Payment processing | Email, subscription metadata |
| Netlify | App hosting and CDN | Web traffic only (no app data) |
| Google APIs | Gmail and Calendar integrations (optional) | Only if you connect your Google account |
If we are required by law or legal process to disclose your data, we will notify you where permitted.
When you connect external services, those services own privacy policies apply to data held on their platforms. HELM only accesses data from these services when you initiate an action (e.g. "read my inbox"). Relevant links:
| Data Type | Retention Period |
|---|---|
| Account and CRM data | Duration of account + 30 days after deletion request |
| AI conversation memory | Short-term: 7 days · Long-term business memory: until you delete it |
| Billing records | 7 years (legal requirement) |
| Anonymised usage analytics | 24 months |
| OAuth tokens | Until you disconnect the integration |
| Error logs | 30 days |
If you are located in the EU/EEA or UK, you have the following rights under the General Data Protection Regulation:
To exercise any right, email privacy@helmos.io. We respond to all requests within 30 days.
HELM OS uses minimal cookies for authentication session management only (Supabase Auth). We do not use tracking cookies, advertising cookies, or third-party analytics cookies that follow you across sites.
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token | Authentication session | Session / 1 hour |
| sb-refresh-token | Session refresh | 7 days |
HELM OS is a professional business tool not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact privacy@helmos.io.
We may update this policy as we add features. Material changes will be notified by email to registered users at least 14 days before they take effect. The current version is always at helmos.ie/privacy.html.
For privacy questions, data requests, or to request account deletion: