Privacy | Helm

1. Overview

Helm ("the Service") is operated by Atlas ("we", "us", "our"). This Privacy Policy describes how we collect, use, and protect your data when you use the Service. We take the privacy of your financial and business data seriously and are committed to transparency about our practices.

2. Data We Collect

We collect the following categories of data:

Account data: Your name, email address, and authentication credentials when you register.
Business profile: Company name, industry, revenue band, and branding preferences you provide during onboarding.
Financial data: Cash flow data, P&L figures, receivables, payables, and other financial records you upload or enter.
Operational data: Team capacity, process documentation, and risk register items you create.
Usage data: How you interact with the Service, including pages visited and features used, to improve the product.
Lead data: Contact information submitted through our diagnostic tool or inquiry forms.

3. How We Use Your Data

We use your data to:

Provide dashboards, forecasts, and AI-generated insights based on your financial data.
Authenticate your account and secure access to your data.
Respond to your inquiries and provide customer support.
Improve the Service through aggregated, anonymized analytics.
Notify you of important account or Service changes.

We do not sell your data to third parties. We do not use your financial data to train AI models — AI-generated insights are produced in real time using your data and are not stored beyond your account.

4. Data Sharing

Your data is shared only in the following circumstances: with cloud infrastructure providers that host and process your data to deliver the Service; with AI model providers that generate insights from your data in real time (your data is sent to generate a response and is not stored by the provider beyond the request); when required by law or legal process; and with members of your advisory team if your account is managed by an authorized Helm partner. All third-party providers are contractually bound to protect your data.

5. Data Security

We protect your data with industry-standard security measures including encrypted data transmission (TLS), secure token-based authentication, row-level security that isolates each customer's data, and access controls that restrict administrative access. Despite these measures, no system is perfectly secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your financial and business data after a 30-day grace period. Lead data submitted through inquiry forms is retained for up to 24 months unless you request deletion.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data and account.
Export your data in a portable format.
Withdraw consent for data processing at any time.

To exercise any of these rights, contact us through the inquiry form on our website.

8. International Data Transfers

Your data may be processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for international data transfers, in compliance with applicable data protection laws.

9. Cookies

The Service uses essential cookies and local storage to maintain your authentication session and remember preferences. We do not use advertising or tracking cookies.

10. Children's Privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or your data, please contact us through the inquiry form on our website.