Privacy Policy
This Privacy Policy explains how Helm (“Helm”, “we”, “us”) collects, uses, stores and shares information when you use Helm (the “Service”), a keyboard-first command center for Gmail and Google Calendar. By using the Service you agree to this Policy.
1. Information we collect
- Account information. When you connect your Google account, we receive your email address and basic profile information through Google’s OAuth consent screen.
- Your Gmail and Google Calendar data. To provide the Service, we access your messages, threads, labels, drafts and calendar events through Google’s APIs. This data is used only to power the features you ask for (reading, searching, triaging, drafting, sending, and scheduling) and a cached copy may be stored to make the app fast.
- Payment information. Paid plans are processed by our payment partner, Razorpay. We do not store your full card or banking details; we receive only a transaction reference and status from Razorpay.
- Usage and technical data. Standard logs such as IP address, device/browser type and timestamps, used for security, abuse prevention and reliability.
- Cookies. A signed session cookie keeps you logged in. We do not use third-party advertising cookies.
2. How we use your information
- To provide, maintain and improve the Service.
- To perform the actions you initiate on your Gmail and Calendar, and to power features such as AI-assisted triage and the agent.
- To process payments and manage your subscription.
- To secure the Service, prevent abuse and comply with the law.
We do not sell your personal information, and we do not use your Gmail or Calendar content for advertising or to train generalized AI/ML models.
3. Google API Services — Limited Use
Helm’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We only request the scopes needed to run the features you use, we use Google user data solely to provide and improve those user-facing features, and we do not transfer or sell that data except as required to operate the Service or by law.
4. How we share information
We share information only with:
- Service providers that help us operate the Service — for example our integration layer (Corsair), AI model providers used to power assistant features, payment processing (Razorpay), bot protection (Cloudflare Turnstile) and hosting. They may process data only on our instructions.
- Legal and safety reasons — where required by law or to protect the rights, property or safety of users and the Service.
5. Data retention
We keep your information for as long as your account is active. When you disconnect an account or delete your Helm account, we revoke the relevant Google authorization and delete the associated cached mail, calendar and derived data, except where we must retain limited records to meet legal, tax or security obligations.
6. Security
We protect your data with industry-standard measures, including encryption in transit (HTTPS), signed sessions and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and limit access to it.
7. Your rights and choices
- Disconnect at any time. You can remove any connected Google account from within Helm, which revokes our access and deletes its cached data. You can also revoke access from your Google Account permissions.
- Access and deletion. You may request a copy of, or deletion of, the personal data we hold about you by contacting us.
8. Children
The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.
9. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you.
10. Contact us
Questions about this Policy? Email us at support@houndcode.com or see our Contact page.