Privacy Policy

Website visitors who browse helmpro.io, submit demo or contact forms, or create an account.

Business customers and their authorized users who use the Helm Pro product to manage leads, messaging, scheduling, and operations.

End customers of our business customers (for example, homeowners who text or call a Helm Pro-powered business). Their information is processed on behalf of our business customer, who is the data controller for that relationship.

Account information: name, work email, password (stored by our authentication provider), company name, role, and onboarding details you provide.

Business and operational data: customer contact details, conversation history, call and SMS metadata, job details, scheduling information, notes, and configuration you enter into Helm Pro.

Communications content: SMS messages, call-related events, and AI-generated drafts or replies processed through the Services when you enable those features.

Website and product usage: pages viewed, feature usage, device/browser type, IP address, timestamps, and diagnostic logs used to secure and improve the Services.

Marketing form data: information you submit on demo or contact forms (name, email, company, phone, message).

Payment information: if you purchase paid plans in the future, payment details are processed by our payment processor; we do not store full card numbers on our servers.

Payment instrument images: where a business customer uses our check-capture feature, we process photographs of checks their customer has given them. These contain the bank routing number, account number and signature printed on the check. Retention and minimization are described in section 7.

Provide, operate, maintain, and improve the Services, including AI-assisted messaging, booking, CRM, dispatch, and analytics.

Authenticate users, secure accounts, prevent fraud and abuse, and enforce our Terms of Service.

Respond to demo requests, sales inquiries, and support requests.

Send service-related notices (for example, account verification, security alerts, and product updates).

Analyze aggregated or de-identified usage to improve reliability and product design.

Comply with law, respond to lawful requests, and protect the rights, safety, and property of Helm Pro, our customers, and others.

Helm Pro uses automated systems, including AI models, to draft responses, qualify leads, suggest bookings, and assist with operational workflows based on configuration you provide.

AI outputs may be inaccurate or incomplete. You are responsible for reviewing AI actions, enabling draft-only or human-approval modes where appropriate, and ensuring communications comply with your policies and applicable law.

We do not use your confidential business data to train public third-party foundation models unless we explicitly tell you otherwise and you opt in.

Subprocessors performing AI inference on our behalf do not train foundation models on your Customer Data.

If you give us your mobile number and opt in, we send you account, onboarding, and support messages about your Helm Pro setup, and replies to questions you send us. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. Consent to receive text messages is not a condition of purchase.

We record each opt-in with a timestamp, the originating IP address, and the exact disclosure text shown at the time, so we can demonstrate consent on request. Opt-outs are recorded the same way and honored immediately.

Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

If you use Helm Pro to send SMS or place calls to your own customers, you are responsible for obtaining and documenting legally required consent from those recipients, honoring opt-out requests, and complying with applicable laws and carrier rules (including TCPA, CAN-SPAM where applicable, and industry messaging requirements).

We process messages and related metadata solely to provide the Services you configure. Message content may transit through telecommunications providers and messaging platforms.

Full messaging program details are set out at helmpro.io/legal/sms-terms.

We do not sell your personal information.

We share information with service providers that help us run the Services, such as cloud hosting, database, authentication, email delivery, analytics, telecommunications, and AI infrastructure providers. These providers are authorized to use data only as needed to perform services for us.

We may share information if required by law, in connection with a merger or acquisition, or to protect Helm Pro, our users, or the public.

Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Each business customer's data is logically isolated from other customers using access controls and database security measures.

We retain information for as long as your account is active and for as long as needed to provide the Services, meet our legal and regulatory obligations, resolve disputes, and enforce our agreements.

Active account and business data: retained for the duration of your subscription term and for a limited period afterward to meet legal, accounting, and security obligations, unless a longer period is required by law or legal hold.

Consent records (including SMS opt-in and opt-out): retained for as long as required to demonstrate compliance with applicable messaging and consumer-protection laws.

Database backups and operational or diagnostic logs: retained on a rolling short-term basis and overwritten in the ordinary course of operations, unless a longer period is required for security investigations or legal holds.

Check images: where a business customer's technician photographs a check, the images are retained for 90 days from capture and then automatically and permanently deleted. The financial record of the payment and its audit history are kept for the periods described above; the images are not. We do not store complete bank account numbers at any point — we keep only the last four digits and a one-way cryptographic fingerprint used to detect the same check being recorded twice.

When information is no longer needed for these purposes, we delete or de-identify it. You may request deletion of personal data subject to legal, security, billing, and the retention purposes described above.

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and tenant isolation in our product database.

No method of transmission or storage is completely secure. You are responsible for safeguarding your account credentials and configuring Helm Pro appropriately for your business.

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing.

To exercise these rights, submit a request at helmpro.io/legal/privacy-request, or contact us at privacy@helmpro.io. We may need to verify your identity before responding, and we will not use the information you give us for verification for any other purpose.

We will acknowledge your request and respond within 45 days of receiving it. Where the law allows and your request is complex, we may extend that period once by a further 45 days and will tell you why before the first period ends.

See Section 10 for additional rights that may apply to U.S. residents under state privacy laws.

If you are a resident of a U.S. state with a comprehensive privacy law, you may have the right to access, correct, delete, or obtain a copy of personal information we hold about you, and to opt out of the "sale" or "sharing" of personal information as those terms are defined by applicable state law.

Helm Pro does not sell your personal information, and we do not share personal information for cross-context behavioral advertising.

To exercise your state privacy rights — including access, correction, deletion, portability, or opt-out of sale/sharing — submit a request at helmpro.io/legal/privacy-request, or email support@helmpro.io with the subject line "Privacy Rights Request". You may use an authorized agent where your state's law permits it.

GLOBAL PRIVACY CONTROL. We honor the Global Privacy Control (GPC) and other recognized universal opt-out signals. If your browser or extension sends a GPC signal, we treat it as an opt-out of the sale or sharing of personal information and of targeted advertising, and we disable non-essential analytics for that browser automatically — you do not need to contact us.

We will respond to verifiable requests within 45 days, extendable once by a further 45 days where the law permits; we will tell you before the first period ends if we need the extension.

APPEALS. If we deny your request, we will explain why. You may appeal by replying to our decision or emailing privacy@helmpro.io with the subject line "Privacy Appeal" within a reasonable time. We will review the appeal and respond in writing with our decision and reasons within 45 days (60 days in some states). If we deny your appeal, we will give you a method to contact your state Attorney General to submit a complaint.

Specific rights depend on your state of residence and applicable law. For homeowner/end-customer data processed on behalf of a business customer, that business (the controller) directs the request; we assist them under our DPA. If you contact us about data we process for one of our business customers, we will forward your request to them and help them respond.

Helm Pro is operated from the United States. If you access the Services from outside the U.S., you understand that information may be processed in the U.S. and other countries where our providers operate.

The Services are a business tool intended for use by businesses and their staff. They are not directed to consumers generally, and are not directed to children.

We do not knowingly collect personal information from anyone under 16. This is deliberately stricter than the 13-year threshold in the federal Children's Online Privacy Protection Act, and matches the higher standard several U.S. states apply.

If you believe a child under 16 has provided us personal information, contact privacy@helmpro.io and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Material changes may also be communicated by email or in-product notice.

Questions about this Privacy Policy or our data practices: privacy@helmpro.io.

Data controller for our own website and account data: Helm Pro LLC.

Mailing address: 6701 Corporate Dr, Ste N, Johnston, IA 50131.