Privacy Policy
This Privacy Policy explains how Helicon Solutions LLC (“Helicon Solutions”, “we”, “us”) collects, uses, stores, shares and protects information when you visit heliconsolutions.net (the “Website”) and when you use our software applications, including our AI email assistant and other applications that integrate with Google services (together, the “Applications”).
1. Who we are
Helicon Solutions LLCWyoming, USA
Email: [email protected]
2. Google user data
Some of our Applications let you connect a Google account through Google OAuth so that an AI assistant can help you manage your email. This section describes exactly what we do with data obtained through Google APIs (“Google user data”).
2.1 Data we access
Depending on the permissions (scopes) you grant on Google’s consent screen, the Applications may access:
- Your basic Google account profile (name, email address, profile picture) to identify your account;
- Gmail messages and threads, including headers (sender, recipients, subject, date), message bodies and attachments;
- Gmail labels, drafts and settings needed to organize your mailbox;
- The ability to compose, send, label, archive or delete messages on your behalf.
We only request the scopes required for the features you use, and you can review them on Google’s consent screen before granting access.
2.2 How we use Google user data
Google user data is used solely to provide and improve user-facing features of the Applications that you have requested, namely to:
- Read, search, summarize and categorize your emails;
- Draft replies and, when you instruct or authorize it, send emails on your behalf;
- Apply labels, archive, mark as read or otherwise organize messages in your mailbox;
- Surface emails that need your attention.
To perform these tasks, the content of relevant emails may be processed by a third-party large language model (AI) provider acting on our behalf. Such providers process the data only to return a result to the Application and are contractually prohibited from using it to train their models.
2.3 Limited Use disclosure
Helicon Solutions’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide or improve user-facing features that are prominent in the Application’s user interface;
- We do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you;
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized or interest-based advertising;
- We do not sell Google user data, and we do not use it to determine creditworthiness or for lending purposes;
- We do not allow humans to read Google user data unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations;
- We do not use Google user data, including Google Workspace API data, to develop, improve or train generalized or non-personalized AI and/or machine-learning models.
2.4 Storage and retention
OAuth access and refresh tokens are stored encrypted and are used only to call Google APIs on your behalf. Email content is fetched on demand and processed transiently; we do not maintain a separate copy of your mailbox. Limited derived information (for example, a short summary or processing status of a message) may be stored for as long as needed to provide the feature and is deleted when you disconnect your account or request deletion.
2.5 Revoking access and deleting your data
You can revoke the Applications’ access to your Google account at any time at myaccount.google.com/permissions. After revocation, we can no longer access your Google data. You can also request deletion of all data we hold about you, including stored tokens and derived information, by emailing [email protected]. We will complete deletion within 30 days.
3. Website data
3.1 Hosting and server logs
The Website is hosted by Cloudflare, Inc. (USA). When you visit it, technical information transmitted by your browser — such as IP address, date and time of access, browser and operating system — is processed to deliver the Website securely and reliably.
3.2 Contact form
When you submit the contact form, we process the information you provide (such as name, email address, company and project details) to respond to your inquiry. The form is protected by Cloudflare Turnstile to prevent spam, and notifications are delivered via Resend, Inc. (USA).
3.3 Fonts
The Website loads fonts from Google Fonts (Google LLC, USA), which means your IP address is transmitted to Google when a page is loaded.
We do not use advertising cookies or third-party tracking on the Website.
4. Sharing of information
We do not sell personal information. We share information only:
- With service providers that process data on our behalf (hosting, email delivery, AI processing) and are bound by confidentiality and data-protection obligations;
- When required by law or to protect our rights, users or the public;
- In connection with a merger, acquisition or sale of assets, subject to this Policy.
5. Security
We protect information using industry-standard measures, including encryption in transit (TLS), encryption of stored credentials, access restricted to authorized personnel, and the principle of least privilege. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of any breach as required by law.
6. International transfers
Helicon Solutions and its service providers are based in the United States. If you access our services from outside the US, your information will be transferred to and processed in the US, relying on appropriate safeguards such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework where applicable.
7. Your rights
Depending on where you live (for example under the GDPR, the Swiss FADP or US state privacy laws), you may have the right to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to withdraw consent at any time. To exercise these rights, contact us at [email protected]. You may also lodge a complaint with your local data protection authority.
8. Children
Our services are not directed to children under 16, and we do not knowingly collect their personal information.
9. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes affecting Google user data will be communicated before they take effect.
10. Contact
Questions about this Privacy Policy can be sent to [email protected].