Privacy policy

Policies for the controlled Helix beta and planned commercial service. Paid enrollment is not open. Features described as planned or unavailable are not offered as completed services.

Scope and responsibility

HELIX INDUSTRIES LLC provides operations and logistics software for authorized organizations and employees. Organizations retain ownership and control of their operational data, subject to individual privacy rights. Helix processes that data to provide authorized services and owns its software, brand and technology. Customer authorization does not override individual privacy rights.

Account, employee and operational information

Firebase Authentication manages sign-in credentials and sessions. Helix uses account email, profile, identifiers and location membership for access. Customer contacts, fields, gates, acreage, assignments, inspection and maintenance records, activity history and selected maps, documents and photos support location operations. Authorized members see information permitted by their roles. Creating an account alone does not grant location access. Work activity can be attributed to the employee who performed it.

Location, files and local storage

Map features request device location when needed; you can decline permission and enter a location manually. The Android app does not request background location access. Selected uploads are stored with location records. Device preferences and cached work support continuity. Removing access cannot reliably recall information already downloaded, exported or seen. Local equipment provisioning may send configuration over the equipment Wi-Fi connection; it is not a promise that every local transmission uses TLS.

Intelligence and Google processing

When you open Intelligence and allow the microphone, voice is streamed to Google Gemini through Firebase AI Logic for spoken responses and transcripts. The microphone stays active during the conversation, including while Helix speaks, to allow interruption. Closing Intelligence or backgrounding the app stops capture. The app does not save raw audio files locally or persist conversation transcripts in its operational database. This does not establish how long Google or separately configured logging services retain information.

Information used by Intelligence

Authorized lookup and dispatch tools provide relevant customer and applicator names, record identifiers, field and entrance labels, acres, instructions and approved map names to Gemini. These draft tools do not provide uploaded map contents or private storage paths. Voice can save and edit drafts attributed to your account; closing a conversation does not delete a saved draft. Review and publish through Daily Dispatch. Names, instructions and AI results can be wrong. Location-owner processing consent and individual capability controls are approved requirements whose complete rollout is still being prepared; spending authorization alone is not processing consent.

Website visits and support

Firebase Hosting processes connection information, such as IP addresses, to serve this website. The marketing pages do not include advertising trackers or a connection to operational customer records. Support email and contact information are processed to handle requests. Do not send passwords, verification codes or unnecessary private customer records by email.

Payments

Paid enrollment is not open. Current billing uses Stripe test mode and Stripe-hosted payment interfaces. Helix records provider identifiers, subscription state, purchased seats and invoice/payment information. Helix does not store card numbers, CVVs or bank login credentials. Stripe processes payment information under its own applicable terms and privacy notice. An accounting email address alone grants no operational access.

Requests and choices

Contact support@helixindustries.io for access, correction, export or deletion requests. An account-deletion request can be initiated in User Settings near Sign Out and through our public contact page without logging in. The current request flow composes an email; opening a draft does not submit a request or delete data. Identity and authority must be verified. Removing a location member is distinct from deleting a global account. Shared records require review; they are not a blanket exception to personal-data rights.

Retention and publication status

Cancellation or nonpayment alone does not delete accounts or records. The approved commercial policy preserves location data for 90 days after the verified paid service period ends, with reactivation and authorized-owner export without repurchasing. The complete export, notice and retention workflow is not yet available for paid enrollment. Ninety days does not define provider, backup, accounting, security or legally required retention. Those periods and exceptions still require verification and approval. No automatic deletion occurs merely because that window ends. See the retention and deletion/export sections below.

Contact and changes

Support is email-only at support@helixindustries.io. No phone, round-the-clock coverage or guaranteed general response time is offered. Legally required privacy-request deadlines still apply. Material policy changes are intended to receive 30 days advance notice whenever reasonably possible, with urgent legal/security exceptions; required consent or reacceptance remains separate from notice.

Intelligence processing disclosure

Approved opt-in model — not yet fully available

New locations must start with Intelligence disabled. Only the primary location owner may initially enable it after explicit disclosure consent recorded with version, user, location and time. The owner controls each employee’s AI capability. The complete location-consent/capability gate is not yet implemented; broader rollout remains gated. No current spending-preference checkbox substitutes for this consent.

What leaves the app

Microphone audio, transcripts and relevant authorized operational context can be processed by Google Gemini through Firebase AI Logic. Context can include customer/applicator names, record identifiers, field/entrance labels, acres, job instructions and approved map names. Draft-tool responses exclude map file contents and private storage paths. Saved drafts persist separately from the temporary conversation. Employees must review results and use normal dispatch publishing.

Rights, provider settings and spending

Location-owner consent does not replace required employee notice, employer authorization, individual privacy rights or provider agreements. Google processing, possible logging and retention require verification; no provider zero-retention or training-use guarantee is made. One shared monthly location cap and user/location attribution are approved requirements. Paid usage must remain disabled until metering and a reliable hard stop are proven.

Data-retention schedule — approved rule and open dependencies

Active location data

Preserve operational records while authorized service is active, subject to verified individual deletion requests, lawful exceptions and customer instructions. This is not an indefinite-storage promise or a substitute for a defined category-specific schedule.

After verified paid service expires

The approved commercial location-data window is 90 days, measured from the verified paid service period end, not the cancellation click, invoice creation, a failed attempt or an unverified client date. During that window permit reactivation and authorized-owner export without another purchase. Send advance deletion notice. After 90 days, perform a controlled eligibility review; never automatically destroy data solely because a timer elapsed. The complete workflow is a paid-launch prerequisite.

Exceptions and separate schedules

Personal-data rights and justified legal holds require separate review. Accounting/tax records, security/audit records, backups, support messages and provider-side copies each need a documented purpose, verified applicable obligations and an approved retention/expiry period. These durations are not yet finalized; the 90-day location rule must not be applied to them as an assumed legal requirement.

Backups and existing copies

Automated production operational-data backups, protected access, defined backup expiry and periodic restore tests are required but not yet verified active. Activation and costs require approval. Deleted data in expiring backups needs a restoration procedure that reapplies approved deletions. Already downloaded, exported or viewed information cannot reliably be recalled.

Third-party provider inventory — verification pending

Google Firebase and Cloud

Firebase Authentication handles credentials/sessions; Firestore, Realtime Database, Storage and Functions support operational data/files/backend workflows; Hosting serves web content. App Check and platform attestation process security information. Verify enabled services, identifiers, logs, access, region, backups, applicable agreements and retention rather than assuming every SDK collects nothing.

Google Gemini / Firebase AI Logic

Voice, transcripts and selected authorized operational context are processed for Intelligence. The app uses Gemini Live. Firebase currently documents that its AI monitoring dashboard does not support Gemini Live API calls; enabling that dashboard is not proof of voice logging or zero retention. Verify the selected API’s terms and actual logging/processing settings. No training-use or provider-retention guarantee is made.

Stripe

Test-mode hosted payment, subscription and original invoice/receipt services process payment/customer information and location billing identifiers. Helix stores billing state and references, not card numbers, CVVs or bank login credentials. Stripe’s separate processing/retention obligations require review; Helix account deletion does not establish immediate removal of every Stripe record. Live activation remains closed.

Email providers

SendGrid supports backend invitations and a separately gated test billing-notification transport. Firebase Authentication sends account emails. Support-domain forwarding and the receiving mailbox also process correspondence; confirm current forwarding/mailbox providers, access and retention before publication. A successful send API response is not inbox delivery evidence.

Maps, directions and weather

Google Maps and the external directions provider receive information for maps and routes. Open-Meteo receives selected forecast coordinates/place queries. National Weather Service/NOAA, Iowa State Mesonet radar and OpenStreetMap tile services are also present in the weather/radar implementation and receive requests needed to serve those features, including network information. Verify each active flow and applicable provider terms; do not promise no collection or a uniform retention period.

Unresolved provider checks

Before broader rollout, verify actual configuration, processing agreements, retention/deletion, support access, data locations/transfers and appropriate employee/customer disclosures for every active provider. Do not claim certifications, universal encryption, regulatory compliance or security-review completion without supporting evidence.

Contact: support@helixindustries.io.

Account and data requests · Terms of service

Prepared October 14, 2026. Version owner-2026-10-14.