Last updated: June 2026
We collect your email address, name, and OAuth tokens needed to connect your Gmail and Google Calendar. We also store the emails and calendar events you access through Helm, along with usage data to improve the product.
Your data is used solely to power Helm features — reading and sending email, managing calendar events, and running automations you configure. We do not sell your data or use it to train AI models without your explicit consent.
We use Google APIs to access your Gmail and Calendar. Your data is subject to Google's privacy policy in addition to ours. We use Vercel for hosting and a managed database provider for storage — both operate under strict data processing agreements.
We retain your data for as long as your account is active. You can delete your account at any time from Settings, which permanently removes all your data within 30 days.
All data is encrypted in transit (TLS) and at rest. OAuth tokens are stored encrypted and never exposed in plaintext. We follow industry-standard security practices and review them regularly.
You have the right to access, export, or delete your personal data at any time. To exercise these rights, go to Settings or contact us at the address below.
Questions about this policy? Email us at privacy@helm.app.