Skip to content
Legal

Privacy Policy

Last updated:

OpenHelm ("we," "our," or "the Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our software and services.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

  • Account information: name, email address, and company name when you register for Business or Cloud tiers.
  • Payment information: processed by our payment processor (Stripe). We do not store full card numbers.
  • Communications: messages you send to our support team or post in our community channels.

1.2 Information Collected Automatically

When you use OpenHelm software or visit our website, we may collect:

  • Software usage: feature use and job status, according to the mode and services you enable. The website controls below affect this site’s analytics only.
  • Error reports: diagnostics such as stack traces help us fix failures. Feedback you choose to send may include the details you provide.
  • Optional website analytics: Google Analytics loads only after you allow it. It measures page views and active returns using first-party analytics cookies. Website URL queries, fragments and referrers are excluded; no form input, account identity or advertising signals are sent by this integration.

Optional Google Analytics helps us understand visits and active returns. It stays off unless you allow it.

Turning analytics off stops collection and removes this browser’s website analytics cookies and return history.

1.3 Local and Cloud Workspaces

Local mode keeps workspace and job history on your device. In Cloud mode, the hosted workspace stores configuration, goals, run history, logs and results so you can use them after a job finishes. Connected services process the inputs you choose to send them, using the credentials configured for those connections.

This website’s analytics integration does not receive project files, goals, job outputs or connection credentials.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain our services
  • Process transactions and send related information
  • Respond to support requests and feedback
  • Send product updates, release notes, and security notices (you can unsubscribe at any time)
  • Improve the software based on anonymous usage patterns
  • Detect and prevent abuse or unauthorized use
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising.

3. Data Storage & Security

Account and billing data is stored on servers located in the European Union and/or the United States. We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest) for all stored data.

We retain your data for as long as your account is active. If you delete your account:

  • Account data is deleted within 30 days
  • Anonymized, aggregated usage data may be retained indefinitely (it cannot be traced back to you)
  • Payment records are retained for 7 years as required by financial regulations

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please email , we have a responsible disclosure program and appreciate reports.

4. Third-Party Services

We use a small number of third-party services:

  • Stripe, payment processing. Subject to Stripe's Privacy Policy.
  • GitHub, for repository access in Cloud tier (only repos you explicitly authorize).
  • Google Analytics, optional website measurement after you allow it. See Google’s Privacy Policy.
  • Resend, for this website’s configured email features.

The optional website integration disables advertising features and automatic link, form, scroll, search, video and download measurement. Declining analytics leaves Google’s tag unloaded.

5. Your Rights

Depending on your location, you may have rights including:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate data
  • Deletion: request deletion of your personal data
  • Portability: receive your data in a machine-readable format
  • Objection: object to certain processing of your data

To exercise these rights, email . We will respond within 30 days.

GDPR: If you are in the EU/EEA, our lawful basis for processing is contract performance (for providing services), legitimate interests (for improving the product), and your consent (for marketing communications).

CCPA: California residents have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

6. Children's Privacy

OpenHelm is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify registered users by email. Your continued use of OpenHelm after changes constitutes acceptance of the updated policy.

8. Contact Us

For privacy questions or to exercise your rights: