Privacy
Privacy notice
This notice describes how data is handled on the youhavethehelm.com website, in the early-access sign-up and in the Helm app, including connected Microsoft 365 accounts.
1. Controller
Mesterséges Intelligencia Központ Kft. · registered office: 1172 Budapest, VIII. utca 2., Hungary · company registration number: 01-09-447309 · tax number: 32876585-2-42 · email: hello@youhavethehelm.com
2. The website
The website uses no cookies, no analytics and no advertising trackers, and stores nothing in the browser. It is delivered by Cloudflare, Inc., which processes technical request data, such as the IP address and the requested page, to deliver and protect the site.
Email sent to hello@youhavethehelm.com is forwarded by Cloudflare to Mesterséges Intelligencia Központ Kft.'s Gmail mailbox (Google LLC).
3. Early-access sign-up
| Data | name and email address; if given, company and note; the page language, the time of sign-up and the version of this notice accepted. The abuse limit counts sign-ups by the request's IP address (at most five a minute); the IP address is not stored in the database. |
|---|---|
| Purpose | contacting the person about early access. |
| Legal basis | consent (GDPR Article 6(1)(a)). It can be withdrawn at any time by email to the address above; withdrawal does not affect the lawfulness of earlier processing. |
| Retention | until early access ends, at most two years from sign-up, or until consent is withdrawn. |
| Storage | a Cloudflare D1 database in the European Union. |
| Recipients | Cloudflare, Inc. (hosting and storage). |
4. The Helm app and its Microsoft 365 connection
Helm runs in an organisation's own installation. When a user connects their Microsoft 365 mailbox and calendar, Helm handles the data as follows:
- Whose data: the installation's users, and the people in the connected mailboxes and calendars (correspondents, attendees).
- What data: the signed-in user's name and email address; message envelopes (sender, recipients, subject, date, flags) and first lines, by default from the last 90 days, and older messages only when a search in Helm brings them up; a message's full text once it has been opened in Helm; an attachment of at most 2 MB once it has been downloaded; the full text of messages sent from Helm; calendar events (subject, short description, time, place, organiser, attendees, Teams link) by default from 90 days back to 365 days ahead; access tokens, encrypted.
- Purpose: CRM features for the user and organisation that connected the account: messages and events next to the customers, and, on the customer's timeline, the subject and first lines of messages exchanged with CRM customers and the title and place of meetings held with them.
- Legal basis and roles: in Mesterséges Intelligencia Központ Kft.'s own installations, its legitimate interest in running its own business tools (GDPR Article 6(1)(f)). In a partner company's installation the partner is the controller, and Mesterséges Intelligencia Központ Kft. acts as its processor under their agreement.
- Storage: the installation's database in Railway Corporation's cloud, in the European Union (the Netherlands).
- AI: mail or calendar content reaches an AI provider when a user opens an incoming message (Helm then requests reply suggestions by itself, if the user holds the AI and send permissions), or when a user explicitly asks for something: a summary, a translation, a draft email, or an answer from the assistant about the calendar. There is no scheduled or background AI processing. The provider is Anthropic, PBC (Claude), through the developer's own gateway. For help asked in the mailbox, Helm stores neither the request nor the answer (the first 300 characters of an answer that cannot be processed may go to the error log); a customer-timeline summary stays on the timeline, and the log of its request and answer is kept for 180 days by default.
- Retention and deletion: Helm does not delete messages by itself. Disconnecting the mailbox deletes the tokens and stops synchronisation; the data already copied is deleted by the developer on request.
5. Transfers outside the EU
Cloudflare, Inc., Railway Corporation, Anthropic, PBC and Google LLC are United States companies. The basis of the transfer to Cloudflare, Railway and Google is the EU-U.S. Data Privacy Framework.
6. Your rights
You may ask for access to your personal data, its rectification or erasure, or the restriction of its processing; object to processing based on legitimate interest; ask for your data in a portable format; and withdraw your consent at any time. Requests go to hello@youhavethehelm.com; the answer arrives within one month at the latest.
7. Complaints
Complaints can be lodged with the Hungarian data protection authority, Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; ugyfelszolgalat@naih.hu; www.naih.hu. You may also go to court.