Privacy Policy

1. Introduction

Helm ("we," "us," or "our") is a software platform built for independent restaurants. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Helm, you agree to the practices described here.

We are based in Nova Scotia, Canada, and we operate in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

2. Information we collect

Information you provide

• Account information: Restaurant name, owner name, email address, phone number, and login credentials when you create an account.
• Operational data: Information you input into the platform, including staff names and roles, schedules, inventory items, par levels, and supplier names.
• Communications: Messages, feedback, or questions you send us via email, chat, or other channels.

Information collected automatically

• Usage data: Log files, IP address, browser type, pages visited, and time spent in the application.
• Cookies: Small data files stored on your device to keep you signed in and remember your preferences.

Information we do not collect

We do not collect Social Insurance Numbers (SINs), employee banking information, or any data not necessary to deliver the service. We do not process payroll, tax filings, or any financial transactions on your behalf.

3. How we use information

• To provide and operate the Helm platform.
• To generate AI-powered insights and recommendations relevant to your restaurant operations.
• To communicate with you about updates, changes, or support requests.
• To improve the platform based on aggregated usage patterns.
• To comply with legal obligations.

4. AI processing

Helm uses third-party AI services, currently Anthropic's Claude API, to power the AI assistant and analysis features. When you use these features, the relevant operational data (such as schedule details, inventory state, or your question) is sent to the AI provider for processing. Anthropic's data handling is governed by their own privacy policy and does not retain customer data for training purposes.

We do not send sensitive personal information (such as government identifiers or financial data) to any AI service.

5. Data storage and security

Helm is hosted on Netlify. Application data is stored using industry-standard infrastructure with encryption in transit (HTTPS) and encryption at rest. As Helm scales, we may migrate to additional providers (such as Supabase for database services) that maintain SOC 2 or equivalent security certifications.

While we use reasonable administrative, technical, and physical safeguards, no system is 100% secure. We cannot guarantee absolute security and you use the service at your own risk.

6. Data sharing

We do not sell your data. We share information only in these circumstances:

• Service providers: With trusted vendors (hosting, AI processing, email) who help us deliver Helm. These vendors are bound by their own privacy obligations.
• Legal compliance: When required by law, court order, or to protect our rights and the safety of users.
• Business changes: If Helm is acquired, merged, or otherwise transferred, your data may be transferred as part of that transaction. You will be notified.

7. Your rights

Under PIPEDA and applicable laws, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for our use of your information at any time.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email us at tmacdougall@helmai.ca.

8. Data retention

We retain your information for as long as your account is active or as needed to provide the service. If you cancel your account, we will delete or anonymize your data within 90 days, unless we are required to retain it for legal or accounting purposes.

9. Children's privacy

Helm is a business tool not intended for use by individuals under 18 years of age. We do not knowingly collect information from minors.

10. International users

Helm is operated from Canada. If you access the service from outside Canada, you understand that your information may be transferred to, stored in, and processed in Canada or other countries where our service providers operate.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and, for material changes, notify you by email or through the platform.

12. Contact us

For any questions about this Privacy Policy or how Helm handles your information:

Ty MacDougall, Founder
Email: tmacdougall@helmai.ca
Helm — Halifax, Nova Scotia, Canada