Privacy Policy

Personal data we collect

The personal data we collect depends on how you interact with us, the services you use, and the choices you make. We collect information you provide directly, information collected automatically, information from third-party sources, and data we infer from other data.

Information you provide directly may include:

• Name and contact information, including name, username, email address, and phone number.
• Account credentials, including one-time passwords sent to your mobile number or email.
• Brand and store information, such as a store URL, brand name, catalog content, and assets you upload so we can generate creatives.
• Payment information when you make a purchase. We do not store full credit card numbers in our own environment. We process payments through a secure processor (for example, Stripe).
• Content and communications, including files you upload and messages you send to support.

Information we collect automatically may include:

• Identifiers and device information, such as IP address, browser type, device type, operating system, and similar technical data.
• Usage data, such as pages viewed, features used, referral URLs, and timestamps.

We may infer general location (such as city, state, or country) from IP address, and generate other inferences to operate and improve the services.

We may also receive information from service providers, authentication partners, payment processors, and publicly available sources. You may decline to provide personal data, but some features will not work without it — for example, WhatsApp login requires a mobile number.

How we use mobile numbers and authentication messages

Helium offers mobile-number signup and login at https://app.gethelium.co through WhatsApp one-time passwords. After you submit your number, we send a WhatsApp message so you can complete authentication.

Message frequency varies. Message and data rates may apply if a message is delivered over SMS. Carriers are not liable for delayed or undelivered messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We may use a messaging service provider solely to deliver the authentication messages you requested. That provider may process your number only to send those messages.

Stop requesting codes to end WhatsApp authentication messages. If a message arrives by SMS, reply STOP to opt out. For help, reply HELP or contact hello@gethelium.co. After you opt out we will not send further SMS messages unless you opt in again by submitting your number on our login or signup flow.

Cookies, mobile IDs, and similar technologies

We use cookies, pixels, and similar technologies to operate the services, keep you signed in, remember preferences, measure performance, and detect fraud. A cookie is a small file stored by your browser. Analytics partners may collect identifiers, device information, and usage data through these technologies.

You can control cookies through your browser settings. Blocking some cookies may limit how the services work. We may use tools such as Google Analytics to understand how people use the site. Google’s practices are described at policies.google.com/privacy.

How we use personal data

We use personal data to:

• Provide, operate, secure, and personalize the services, including sending WhatsApp one-time passwords when you request them.
• Create marketing creatives and related outputs from the brand and store information you provide.
• Process payments, prevent fraud, and meet legal obligations.
• Improve the product, develop features, and conduct research.
• Provide customer support and respond to requests.
• Send service communications such as confirmations, security alerts, and account notices.
• Send product updates or marketing where permitted by law. You can opt out of promotional email. WhatsApp and SMS are used for authentication, not promotional marketing.

How we disclose personal data

We disclose personal data with your consent, to complete a transaction you request, or as described in this statement. Recipients may include:

• Service providers that host infrastructure, authenticate users, send WhatsApp one-time passwords, process payments, provide support, or help us secure the services.
• Payment processors and financial institutions as needed to complete a purchase and prevent fraud.
• Affiliates that help us operate Helium, subject to this statement. Affiliates do not receive mobile numbers for marketing or promotional purposes.
• Professional advisors and authorities when we believe disclosure is required by law, to protect rights and safety, or in connection with a merger, financing, acquisition, or similar transaction.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

Some services link to third-party sites with their own privacy practices. If you provide data to those parties, their statements govern that data. We may also disclose de-identified information where permitted by law.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct or delete personal data
• Restrict or object to certain processing
• Receive a copy of personal data you provided to us

You can often review account details by signing in. To make a request, email hello@gethelium.co. We will respond as required by applicable law. We may need to verify your identity before completing a request.

European data protection rights

If European Union, United Kingdom, or Swiss data protection law applies, you may also request erasure, withdraw consent for future processing where processing is based on consent, object to or restrict certain processing, and lodge a complaint with a supervisory authority. We encourage you to contact us first.

We process personal data with your consent, to provide the services you request, to meet legal obligations, and for legitimate interests such as securing our systems and improving the product.

Retention of personal data

We keep personal data only as long as needed for the purposes described in this statement, including to provide the services, meet legal and accounting requirements, and resolve disputes. After an account is deleted we generally retain residual data for up to six months unless a longer or shorter period is required by law.

Location of personal data

Personal data may be stored and processed in the United States and in other countries where we or our service providers operate. Those countries may have privacy laws that differ from the laws in your country. When we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as standard contractual clauses where required.

Security of personal data

We take reasonable and appropriate steps to protect personal data from unauthorized access, use, disclosure, alteration, and destruction. No method of transmission or storage is completely secure. Please use a strong password where applicable and do not share one-time codes or passwords with anyone.

Children

The services are not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

Changes to this privacy statement

We will update this statement when our practices or the law change. The “Last updated” date at the top will change when we post a revision. If a change is material, we will provide additional notice or obtain consent as required by law.

How to contact us

For privacy questions, authentication-message help, or data requests, email hello@gethelium.co.

Privacy Policy: https://app.gethelium.co/privacy-policy
Terms and Conditions: https://app.gethelium.co/terms-and-conditions