Privacy Policy

Last updated: October 3, 2026

This policy describes what information Helm ("the Service", available at he-lm.com) collects, how it is used, and the choices you have. The short version: Helm stores only what you put into it, uses it only to run the Service for you, and never sells it. The only others who handle it are the few service providers listed below, each for one job.

Information we collect

• Account information. When you create an account we store your name, email address, and a cryptographically hashed password. Passwords are never stored in plain text.
• Content you create. The people, projects, tasks, notes, meeting records, and log entries you enter into Helm are stored so the Service can function. This content may include names of your colleagues and notes about your work.
• Meeting recordings. If you record a meeting, the audio is sent to our transcription provider and deleted as soon as the transcript comes back. Helm keeps the transcript, the speaker names you add, and any notes written from it. Recording other people may require their consent where you are; Helm asks you to let everyone know before you start.
• Technical data. Standard web server logs (IP address, request time, user agent) may be retained by our hosting provider for security and operations.

What we do not collect

• No advertising or marketing trackers
• No third-party analytics scripts
• No selling or renting of personal data, and no sharing beyond the service providers below
• No third-party cookies — Helm keeps you signed in using a token stored locally in your own browser

How your information is used

Your data is used solely to provide the Service to you: authenticating your sign-in, displaying your own content back to you, and maintaining the Service's security and reliability. Each account's data is isolated — other users of Helm cannot see your content.

Service providers

• DreamHost hosts the Service and its database.
• Anthropic (Claude) generates the AI features you ask for, such as meeting summaries, notes from a recording, and review narratives. Only the content needed for that request is sent.
• AssemblyAI transcribes recorded meetings. Helm deletes the audio and transcript from AssemblyAI once the transcript is back.
• Stripe processes payments. Helm never sees your card number.
• SendGrid sends sign-in codes and the reminder emails you turn on.

Storage and security

Data is stored in a managed database at our hosting provider and is transmitted only over encrypted HTTPS connections. Access to the production database is restricted to the operator of the Service.

Data retention and deletion

Your content is retained for as long as your account exists. To delete your account and all associated data, email hugo.bucci@gmail.com and the data will be permanently removed.

Children

Helm is a workplace tool intended for adults and is not directed at children under 16.

Changes to this policy

If this policy changes materially, the "last updated" date above will change with it.

Contact

Privacy questions: hugo.bucci@gmail.com.