Privacy Policy
This Privacy Policy explains how HelmSwarm ("HelmSwarm", "we", "us") collects, uses, and protects personal data when you use our platform, agent, and websites (the "Service"). We act as the data controller for the personal data described here. We comply with the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK) where applicable.
1. Data we collect
| Category | Examples |
|---|---|
| Account data | Name, email, organization, password (hashed), team members. |
| Usage data | Log-ins, actions in the panel, automation runs, connect tokens, timestamps, IP address, device/browser type. |
| Agent & device metadata | Connected device identifiers, model, OS version, status — used to operate the Service. |
| Billing data | Subscription plan and payment status. Card details are handled by our payment processor, not stored by us. |
| Support & communications | Messages you send us and marketing-email engagement (opens/clicks), where applicable. |
We do not intentionally collect special-category data. Content and data you process through the Service (e.g. on third-party platforms) are under your control and your responsibility as described in our Acceptable Use Policy.
2. How and why we use data
- To provide, operate, secure, and improve the Service.
- To authenticate you and manage your account and subscription.
- To process payments (via our payment processor).
- To communicate with you about the Service, and — with your consent or where permitted — to send product or marketing emails (you can opt out at any time).
- To detect, prevent, and address fraud, abuse, security, and technical issues.
- To comply with legal obligations and enforce our terms.
3. Legal bases (GDPR)
- Contract — to provide the Service you signed up for.
- Legitimate interests — to secure, improve, and promote the Service, balanced against your rights.
- Consent — for optional marketing communications and non-essential cookies.
- Legal obligation — for accounting, tax, and lawful requests.
4. Service providers (processors)
We share data only as needed with providers who process it on our behalf under appropriate agreements, including:
- Hosting & infrastructure — to run the platform and store data;
- Email delivery — to send transactional and marketing emails;
- Payment processing — to handle subscriptions and payments;
- Content delivery & security — to serve and protect our websites.
We do not sell your personal data.
5. International transfers
Your data may be processed in countries outside your own, including within and outside the EU/EEA and Türkiye. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
6. Retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, tax, and accounting obligations or to resolve disputes. We delete or anonymize data when it is no longer needed.
7. Your rights
Subject to applicable law (GDPR / KVKK), you have the right to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data-protection authority. To exercise your rights, contact us at hello@helmswarm.com.
8. Cookies
We use strictly necessary cookies to operate the Service (e.g. authentication and security). Where we use optional analytics or preference cookies, we do so based on your consent, which you can manage or withdraw. You can also control cookies through your browser settings; blocking essential cookies may affect functionality.
9. Security
We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and credential hashing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect data from children.
11. Changes
We may update this Policy from time to time. We will indicate changes by updating the "Last updated" date and, for material changes, by additional notice.
12. Contact
For privacy questions or to exercise your rights: hello@helmswarm.com.