Privacy Policy
Last Updated: January 27, 2025
At Helmly, your privacy matters. This policy explains what data we collect, how we use it, and your rights.
1. Information We Collect
What we collect:
- Email address (required to create your account)
- Name (first and last name)
- Organization and role (optional)
- Meeting notes and tasks (you create these)
- Usage data (which features you use, when you log in)
What we DON'T collect:
- We don't track your browsing outside Helmly
- We don't sell your data to anyone
- We don't share your notes with third parties
2. How We Use Your Information
We use your information to:
- Provide the Helmly service
- Improve the product based on usage patterns
- Send you important account updates (like password resets)
- Provide customer support
We will NEVER:
- Sell your data to advertisers or third parties
- Share your meeting notes with anyone
- Send you marketing emails (unless you opt in)
3. Data Security
How we protect your data:
- All connections use HTTPS/TLS encryption
- Passwords are hashed (never stored in plain text)
- Data stored on secure servers (Vercel and Supabase)
- Regular security updates
- Access controls (only you can see your data)
Note: While we implement industry-standard security practices, no system is 100% secure. We take security seriously and will notify you immediately if any breach occurs.
4. Your Rights
You have the right to:
- Access your data (view everything in your account)
- Delete your data (delete your account in Settings)
- Correct your data (edit your profile in Settings)
- Opt out of emails (click unsubscribe)
To exercise these rights, go to Settings or email: privacy@helmly.io
5. Third-Party Services
We use these services:
- Vercel: Website and application hosting
- Supabase: Database and authentication
- Stripe: Payment processing (when implemented)
These services have their own privacy policies. We only share data necessary for them to provide their services.
6. Cookies
We use cookies for:
- Keeping you logged in (session cookies)
- Remembering your preferences (like language style)
We do NOT use:
- Advertising cookies
- Third-party tracking cookies
7. Data Retention
- Active accounts: Data stored as long as your account exists
- Deleted accounts: Data deleted within 30 days of account deletion
- We may keep anonymized usage data for analytics
8. Children's Privacy
- Helmly is not intended for anyone under 18
- We don't knowingly collect data from children
- If we learn we've collected data from a child, we'll delete it
9. International Users
- Data is stored on servers in the United States
- By using Helmly, you consent to data transfer to the US
10. Changes to Privacy Policy
- We may update this policy from time to time
- Major changes will be announced via email
- Continued use after changes means you accept them
