Data Processing Addendum
Last updated: July 25, 2026
This Data Processing Addendum ("DPA") supplements the Terms of Service between you ("Customer") and Helm Pro ("Processor") when Helm Pro processes personal data on your behalf through the Helm Pro platform.
This DPA is offered on request for pilot and enterprise customers. It incorporates the subprocessors listed at /legal/subprocessors.
1. Roles
Customer is the data controller for end-customer (homeowner) personal data submitted to the Services.
Helm Pro acts as data processor, processing such data only on documented instructions from Customer via the Services configuration and account settings.
2. Processing scope
Categories: contact details, message content, appointment details, and operational metadata necessary to provide AI-assisted SMS, booking, CRM, and dispatch features.
Duration: for the subscription term plus retention periods described in the Privacy Policy.
Subprocessors: listed at /legal/subprocessors; Helm Pro will provide notice of material changes.
3. Security
Helm Pro implements technical and organizational measures including encryption in transit, row-level tenant isolation, access controls, audit logging, and least-privilege service credentials.
Customer is responsible for securing account credentials, configuring appropriate AI autonomy levels, and maintaining accurate knowledge-base content.
4. Data subject requests
Helm Pro will assist Customer, to the extent technically feasible, in responding to data subject access, correction, and deletion requests via in-product tools (e.g., contact management and GDPR forget flows).
5. Breach notification
Helm Pro will notify Customer without undue delay after becoming aware of a confirmed personal data breach affecting Customer data, with information reasonably available to support Customer's regulatory obligations.
6. Contact
DPA requests and processor contact: legal@helmpro.io.
Security inquiries: security@helmpro.io. Privacy questions: privacy@helmpro.io.