Privacy Policy

Company Information

NEDTECH.AI LIMITED. Company number: 16639591. Registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ.

Who We Are

HELM is operated by NEDTECH.AI LIMITED, a company registered in England and Wales.

HELM provides AI-powered operational support tools designed to help businesses coordinate workflows, manage information, and improve operational efficiency.

Information We Collect

We may collect and process the following types of information:

Account Information

• Name
• Business name
• Email address
• Billing information
• Account credentials
• Team member information

Platform Usage Information

• User activity within HELM
• Workflow interactions
• Feature usage
• System logs
• Device and browser information
• IP address

Uploaded or Connected Business Data

Depending on how HELM is used, users may upload or connect:

• Documents
• Notes
• Tasks
• Customer communications
• Operational information
• Marketing content
• Internal business workflows

Communications

We may collect information when users contact us via:

• Email
• Support requests
• Forms
• Surveys
• Community channels

Analytics and Cookies

We may use analytics tools and cookies to improve performance, monitor usage, and understand how users interact with the platform.

How We Use Information

We use information to:

• Provide and operate HELM
• Support workflow coordination and automation features
• Publish and schedule content to connected social media accounts on your behalf
• Provide engagement analytics and insights for content you publish
• Improve platform performance and reliability
• Provide customer support
• Maintain security and prevent misuse
• Develop new features and functionality
• Analyse platform usage trends
• Communicate important service updates

We may also use aggregated and anonymised information to improve our systems and services. This does not apply to data we receive from any account you connect to HELM. Data from connected social media accounts (“Platform Data”) is handled only as described in the “Social Media Integrations” section below, and data received from Google APIs is handled only as described in the “Google Workspace Integration” section below. We do not use that data - raw, aggregated, anonymised, or derived - to train or improve any generalised artificial intelligence or machine learning model.

Founding 50 and Beta Access

HELM is currently operating within a limited early-access phase known as the Founding 50 programme.

Certain features, workflows, integrations, and AI capabilities may be experimental, evolving, or subject to change as the platform develops.

Features may be modified, expanded, restricted, or removed over time.

AI Processing and Automation

HELM uses AI systems to support operational coordination, workflow generation, content assistance, and business productivity. This may involve automated processing of user-provided information.

HELM is designed to assist operational workflows and business execution. AI-generated outputs may not always be accurate, complete, or appropriate for every use case.

Users remain responsible for reviewing and validating outputs before relying on them for business, financial, legal, compliance, operational, customer-facing, or strategic decisions.

HELM may automate workflows, content generation, communications, and publishing actions connected to third-party accounts authorised by users. Users remain solely responsible for configuring automation settings, reviewing outputs where appropriate, and ensuring the suitability of automated actions.

HELM does not provide legal, financial, regulatory, compliance, accounting, employment, or professional advice. HELM is intended to augment human decision-making, not replace it.

AI Providers and Infrastructure

HELM currently uses AI models provided by OpenAI, accessed directly through OpenAI’s API from our own servers. We do not route model requests through any third-party aggregator, gateway, or model hub. Additional providers may be introduced over time as the platform evolves; where a new provider would process data from a connected account, we will update this policy before doing so.

Information is sent to our AI provider only at the moment a feature runs, only in the minimum amount needed to deliver that feature, and only for that purpose. Under OpenAI’s API terms, data submitted through the API is not used to train or improve OpenAI’s models unless the customer explicitly opts in to share it. We have not opted in, and data sharing for model improvement is disabled on our OpenAI organisation. OpenAI retains API inputs and outputs for up to 30 days for abuse monitoring only, after which they are deleted.

HELM infrastructure currently uses cloud hosting and database services including Hostinger and MongoDB Atlas.

Social Media Integrations

HELM allows you to connect third-party social media accounts so that you can publish content, manage interactions, and view performance from within the platform. We access only the data permitted by the connection you authorise, and only to provide the features you request.

Facebook

With your authorisation, we access your public profile, the list of Facebook Pages you manage, the ability to publish posts to Pages you select, and engagement metrics for those posts (such as reactions, comments, shares, and impressions). We use this to schedule and publish content on your behalf and to provide analytics.

Instagram

With your authorisation, we access your Instagram Business or Creator account information, publish content you create, manage comments on your posts, and read insights and performance metrics. We use this to publish content on your behalf, support engagement, and provide analytics.

LinkedIn

With your authorisation, we access your name, profile, and email address, and publish posts on your behalf. We use this to identify your account and to schedule and publish content you create.

Data we receive from these connected accounts (“Platform Data”) is processed only to provide the features described above. We do not sell Platform Data, and we do not use it to train or improve generalised artificial intelligence models. Where AI features process Platform Data (for example, generating content or assisting with comment replies), it is processed solely to deliver the feature you requested. You can revoke access at any time as described in “Data Deletion and Disconnecting Accounts”.

Google Workspace Integration

HELM allows you to connect a Google account so that customer correspondence can be surfaced, organised, and replied to from within the platform. We access only the data permitted by the connection you authorise, and only to provide the features you request.

What we access

With your authorisation, HELM requests the following Google API scopes:

• gmail.readonly - to read the messages in your mailbox so we can identify who you are corresponding with, build a timeline of each customer relationship, and draft replies grounded in the conversation.
• gmail.send - to send a reply that you have reviewed and approved in HELM.
• userinfo.email and userinfo.profile - to identify which mailbox you have connected and display it in your account settings.

We do not modify, label, archive, or delete any message in your mailbox, and we do not download attachments. HELM never sends an email without your approval.

How AI is used with your Google data

Message content is processed by AI to identify customers, extract what has been agreed, and draft replies for you to review. This processing uses OpenAI’s API as a subprocessor, as described in “AI Providers and Infrastructure” above. Content is sent only at the moment a feature runs, only in the minimum amount required, and attachments are never sent.

Neither HELM nor our AI provider uses your Google user data - raw, aggregated, anonymised, or derived - to create, train, or improve any generalised or foundational artificial intelligence or machine learning model. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Limited Use

HELM’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data, and we do not transfer it to third parties except to the service providers needed to operate the features described above. You can revoke HELM’s access at any time, as described in “Data Deletion and Disconnecting Accounts” below.

Data Sharing and Third Parties

We may share information with trusted third-party providers who help us operate HELM, including:

• Cloud infrastructure providers
• Authentication providers
• Analytics providers
• Payment processors
• AI model providers
• Customer support tools

We do not sell personal data.

Customer data remains the property of the customer or user who uploaded or connected the information to HELM.

We require service providers to process information securely and in accordance with applicable data protection laws.

International Data Transfers

Some of our service providers may process data outside the United Kingdom or European Economic Area.

Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place.

Data Security

We take reasonable technical and organisational measures to protect information against unauthorised access, misuse, loss, or disclosure.

These measures may include:

• Encryption
• Access controls
• Secure hosting infrastructure
• Monitoring and logging
• Authentication protections

No system can guarantee absolute security.

Data Retention

We retain information only for as long as necessary to:

• Provide services
• Meet legal obligations
• Resolve disputes
• Maintain security and operational integrity

Users may request deletion of their account and associated data, subject to applicable legal or operational requirements.

Data Deletion and Disconnecting Accounts

You can disconnect any connected social media account at any time from the Integrations page within HELM. Disconnecting an account revokes the access tokens we hold, asks the provider to revoke our grant where it supports that, and deletes the Platform Data associated with that connection.

You can disconnect a connected Google account from the same screen. Disconnecting stops HELM from reading any further mail and from sending on your behalf. To have correspondence already ingested from that mailbox erased from HELM, email us using the address below and we will delete it within 30 days.

You can also revoke HELM’s access directly with each provider:

• Facebook and Instagram: Settings & Privacy → Settings → Business Integrations
• LinkedIn: Settings & Privacy → Data Privacy → Permitted Services
• Google: myaccount.google.com/permissions

To request deletion of your HELM account and all associated data, email [email protected]. We will process verified deletion requests within 30 days, subject to any legal or operational retention requirements.

Your Rights

Depending on your location and applicable law, you may have rights to:

• Access your data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Request data portability

Requests may be submitted using the contact information below.

Cookies

HELM may use cookies and similar technologies to:

• Maintain login sessions
• Improve functionality
• Analyse website usage
• Monitor performance

Users may manage cookie settings through their browser.

Changes to This Policy

We may update this Privacy Policy from time to time.

Where appropriate, we will notify users of material changes.

Contact

If you have questions regarding this Privacy Policy or data handling practices, please contact NedTech.ai Ltd at [email protected].