Last updated: 2026-02-22
Operator: Eidolon Publishing
Service: Helm
Contact: contact@eidolonpublishing.com
This Privacy Policy explains how Eidolon Publishing ("Eidolon," "we," "us," or "our") collects, uses, shares, and protects information when you use the Helm website, web application, APIs, and related services (collectively, the "Service").
This Privacy Policy should be read together with our Terms of Use at Terms of Use, Licenses & Attributions at Licenses & Attributions, and DMCA Notice and Takedown Policy at DMCA Notice and Takedown Policy.
1. Scope
This Privacy Policy applies to personal information we process through the Service, including:
- Helm frontend experiences
- API requests and backend services
- account access and workspace collaboration features
- support, security, and operational communications
This Privacy Policy does not apply to third-party websites or services that are not operated by Eidolon, even if linked from the Service.
2. Information We Collect
We collect information you provide directly, information generated through your use of the Service, and information collected automatically.
2.1 Information You Provide
Depending on how you use the Service, this may include:
- account details such as email address, username/display name, and account credentials
- profile details you choose to provide
- support and feedback communications
- invitation and collaboration details for shared workspaces
Helm may introduce paid features in the future. At this time, Helm does not process in-app payments or collect payment card details directly through the Service.
2.2 User Content and Collaboration Data
Helm supports user-submitted content and collaborative editing. We may process:
- content you create, upload, edit, or publish
- collaboration and permission metadata (such as membership, roles, and timestamps)
- activity records and revision history used for service operation, integrity, and moderation
- visibility and publishing settings you choose
If you include personal information in User Content, that information may be visible based on your sharing and publication choices.
2.3 Information Collected Automatically
When you use the Service, we may collect:
- device and browser data (for example browser type, OS, language, and client identifiers)
- usage events (for example pages viewed, features used, and interaction timestamps)
- technical logs (for example IP address, request IDs, and diagnostic data)
- approximate location derived from IP address
2.4 Cookies, Local Storage, and Similar Technologies
Helm uses server-managed session authentication with secure HTTP-only session cookies. Helm may use browser local storage for UI preferences and workspace state, but not as the primary store for authentication credentials.
We use cookies and similar technologies for:
- authentication and session continuity
- security and abuse prevention
- preferences and UI/workspace persistence
- performance and service analytics
See Section 6 for choices and controls.
2.5 Information from Other Sources
We may receive information from:
- collaborators who invite you to shared workspaces
- service providers that support hosting, communications, and operations
- legal claims and reports (for example copyright or abuse complaints)
3. How We Use Information
We use personal information to:
- provide, operate, maintain, and improve the Service
- authenticate users and protect account security
- enable collaboration, publishing, and visibility controls
- detect and prevent fraud, abuse, and policy violations
- troubleshoot reliability issues and monitor performance
- communicate service updates, security notices, and support responses
- comply with legal obligations and enforce our Terms
If we send marketing communications, users can opt out using the unsubscribe mechanism provided in those messages.
4. How We Share Information
We do not share personal information except as described in this policy.
4.1 With Other Users
Information may be visible to other users based on product behavior and your sharing choices, including:
- profile/display information you choose to provide
- published User Content
- collaboration metadata in shared workspaces
4.2 With Service Providers
We may share information with service providers processing data on our behalf for business purposes, such as:
- infrastructure and hosting
- content delivery and caching
- email and transactional messaging
- observability, diagnostics, and incident response
- support tooling
Providers are expected to process information under confidentiality and data protection obligations.
Helm does not currently publish a public subprocessor list.
4.3 Legal and Safety Disclosures
We may disclose information when reasonably necessary to:
- comply with applicable law or legal process
- respond to lawful government requests
- protect rights, safety, and security of users or the public
- investigate violations of our Terms or policies
4.4 Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.
4.5 De-Identified or Aggregated Information
We may use and share aggregated or de-identified information that cannot reasonably be used to identify an individual.
5. User Content and Public Visibility
5.1 Public Content
If you publish User Content publicly, it may be accessible to other users and non-users. Public content may be copied, shared, archived, and indexed by search engines.
5.2 Shared Workspaces
When you share content with collaborators, those collaborators may be able to view, copy, edit, or re-share content according to workspace permissions and product features.
5.3 Content Deletion and Persistence
Deleting content or closing an account may not remove all copies immediately. Data may persist where:
- another user has copied or republished content
- operational backups have not yet cycled out
- records are retained for legal, security, or dispute resolution purposes
6. Cookies and Similar Technologies
6.1 Purposes
Cookies and related storage technologies support essential operation, security, preferences, and analytics.
6.2 Browser Controls
Most browsers allow cookie controls and deletion. Restricting cookies may affect Service functionality (for example, login persistence).
6.3 DNT and GPC
Helm does not currently respond to browser Do Not Track (DNT) signals as a universal opt-out mechanism.
For Global Privacy Control (GPC) and similar preference signals, we process opt-out requests as required by applicable law. You may also submit privacy requests directly at contact@eidolonpublishing.com.
7. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this policy, including service delivery, security, legal compliance, and dispute resolution.
Retention periods vary by data type, context, and legal requirements. When feasible and appropriate, we delete or de-identify information after retention needs expire.
8. Security
We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, and alteration.
No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and protecting devices used to access the Service.
9. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information in violation of this policy, contact contact@eidolonpublishing.com and we will investigate and take appropriate action.
10. International Data Transfers
Helm is a U.S.-focused service. Information may be processed in countries other than your country of residence, including the United States, where data protection laws may differ.
11. Your Privacy Choices and Rights
11.1 Account and Content Controls
Depending on available product features, you may be able to:
- update account/profile details
- manage sharing and visibility settings
- delete content you control
- close your account
11.2 Communications
You can opt out of non-essential promotional emails where available. We may still send service and security communications when necessary.
11.3 U.S. State Privacy Rights
Depending on your location and applicable law, you may have rights to request access, deletion, correction, and portability of your personal information, and to opt out of certain processing activities.
Helm does not sell personal information and does not share personal information for cross-context behavioral advertising.
To submit a privacy rights request, email contact@eidolonpublishing.com and include:
- the email tied to your account
- your request type (for example access, deletion, correction)
- enough detail for us to locate relevant records
We may verify your identity before fulfilling requests, and we do not discriminate against users for exercising applicable privacy rights.
11.4 EEA/UK Rights (If Applicable)
If EEA/UK laws apply, processing may rely on legal bases such as contract necessity, legitimate interests, consent, and legal obligation.
Where applicable, users may have rights including access, correction, deletion, restriction, objection, portability, and complaint to a supervisory authority.
12. Third-Party Services and Links
The Service may include links to third-party websites or services. Their privacy practices are governed by their own policies, not this Privacy Policy.
13. Contact Us
For privacy questions or rights requests, contact:
Eidolon Publishing
Email: contact@eidolonpublishing.com
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date above and may provide additional notice for material changes.