Helm | Privacy Policy

Last updated: 2026-02-22

Operator: Eidolon Publishing

Service: Helm

This Privacy Policy explains how Eidolon Publishing ("Eidolon," "we," "us," or "our") collects, uses, shares, and protects information when you use the Helm website, web application, APIs, and related services (collectively, the "Service").

This Privacy Policy should be read together with our Terms of Use at Terms of Use, Licenses & Attributions at Licenses & Attributions, and DMCA Notice and Takedown Policy at DMCA Notice and Takedown Policy.

1. Scope

This Privacy Policy applies to personal information we process through the Service, including:

Helm frontend experiences
API requests and backend services
account access and workspace collaboration features
support, security, and operational communications

This Privacy Policy does not apply to third-party websites or services that are not operated by Eidolon, even if linked from the Service.

2. Information We Collect

We collect information you provide directly, information generated through your use of the Service, and information collected automatically.

2.1 Information You Provide

Depending on how you use the Service, this may include:

account details such as email address, username/display name, and account credentials
profile details you choose to provide
support and feedback communications
invitation and collaboration details for shared workspaces

Helm may introduce paid features in the future. At this time, Helm does not process in-app payments or collect payment card details directly through the Service.

2.2 User Content and Collaboration Data

Helm supports user-submitted content and collaborative editing. We may process:

content you create, upload, edit, or publish
collaboration and permission metadata (such as membership, roles, and timestamps)
activity records and revision history used for service operation, integrity, and moderation
visibility and publishing settings you choose

If you include personal information in User Content, that information may be visible based on your sharing and publication choices.

2.3 Information Collected Automatically

When you use the Service, we may collect:

device and browser data (for example browser type, OS, language, and client identifiers)
usage events (for example pages viewed, features used, and interaction timestamps)
technical logs (for example IP address, request IDs, and diagnostic data)
approximate location derived from IP address

2.4 Cookies, Local Storage, and Similar Technologies

Helm uses server-managed session authentication with secure HTTP-only session cookies. Helm may use browser local storage for UI preferences and workspace state, but not as the primary store for authentication credentials.

We use cookies and similar technologies for:

authentication and session continuity
security and abuse prevention
preferences and UI/workspace persistence
performance and service analytics

See Section 6 for choices and controls.

2.5 Information from Other Sources

We may receive information from:

collaborators who invite you to shared workspaces
service providers that support hosting, communications, and operations
legal claims and reports (for example copyright or abuse complaints)

3. How We Use Information

We use personal information to:

provide, operate, maintain, and improve the Service
authenticate users and protect account security
enable collaboration, publishing, and visibility controls
detect and prevent fraud, abuse, and policy violations
troubleshoot reliability issues and monitor performance
communicate service updates, security notices, and support responses
comply with legal obligations and enforce our Terms

If we send marketing communications, users can opt out using the unsubscribe mechanism provided in those messages.

4. How We Share Information

We do not share personal information except as described in this policy.

4.1 With Other Users

Information may be visible to other users based on product behavior and your sharing choices, including:

profile/display information you choose to provide
published User Content
collaboration metadata in shared workspaces

4.2 With Service Providers

We may share information with service providers processing data on our behalf for business purposes, such as:

infrastructure and hosting
content delivery and caching
email and transactional messaging
observability, diagnostics, and incident response
support tooling

Providers are expected to process information under confidentiality and data protection obligations.

Helm does not currently publish a public subprocessor list.

4.3 Legal and Safety Disclosures

We may disclose information when reasonably necessary to:

comply with applicable law or legal process
respond to lawful government requests
protect rights, safety, and security of users or the public
investigate violations of our Terms or policies

4.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

4.5 De-Identified or Aggregated Information

We may use and share aggregated or de-identified information that cannot reasonably be used to identify an individual.

5. User Content and Public Visibility

5.1 Public Content

If you publish User Content publicly, it may be accessible to other users and non-users. Public content may be copied, shared, archived, and indexed by search engines.

5.2 Shared Workspaces

When you share content with collaborators, those collaborators may be able to view, copy, edit, or re-share content according to workspace permissions and product features.

5.3 Content Deletion and Persistence

Deleting content or closing an account may not remove all copies immediately. Data may persist where:

another user has copied or republished content
operational backups have not yet cycled out
records are retained for legal, security, or dispute resolution purposes

6. Cookies and Similar Technologies

6.1 Purposes

Cookies and related storage technologies support essential operation, security, preferences, and analytics.

6.2 Browser Controls

Most browsers allow cookie controls and deletion. Restricting cookies may affect Service functionality (for example, login persistence).

6.3 DNT and GPC

Helm does not currently respond to browser Do Not Track (DNT) signals as a universal opt-out mechanism.

For Global Privacy Control (GPC) and similar preference signals, we process opt-out requests as required by applicable law. You may also submit privacy requests directly at contact@eidolonpublishing.com.

7. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including service delivery, security, legal compliance, and dispute resolution.

Retention periods vary by data type, context, and legal requirements. When feasible and appropriate, we delete or de-identify information after retention needs expire.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, and alteration.

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and protecting devices used to access the Service.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information in violation of this policy, contact contact@eidolonpublishing.com and we will investigate and take appropriate action.

10. International Data Transfers

Helm is a U.S.-focused service. Information may be processed in countries other than your country of residence, including the United States, where data protection laws may differ.

11. Your Privacy Choices and Rights

11.1 Account and Content Controls

Depending on available product features, you may be able to:

update account/profile details
manage sharing and visibility settings
delete content you control
close your account

11.2 Communications

You can opt out of non-essential promotional emails where available. We may still send service and security communications when necessary.

11.3 U.S. State Privacy Rights

Depending on your location and applicable law, you may have rights to request access, deletion, correction, and portability of your personal information, and to opt out of certain processing activities.

Helm does not sell personal information and does not share personal information for cross-context behavioral advertising.

To submit a privacy rights request, email contact@eidolonpublishing.com and include:

the email tied to your account
your request type (for example access, deletion, correction)
enough detail for us to locate relevant records

We may verify your identity before fulfilling requests, and we do not discriminate against users for exercising applicable privacy rights.

11.4 EEA/UK Rights (If Applicable)

If EEA/UK laws apply, processing may rely on legal bases such as contract necessity, legitimate interests, consent, and legal obligation.

Where applicable, users may have rights including access, correction, deletion, restriction, objection, portability, and complaint to a supervisory authority.

12. Third-Party Services and Links

The Service may include links to third-party websites or services. Their privacy practices are governed by their own policies, not this Privacy Policy.

13. Contact Us

For privacy questions or rights requests, contact:

Eidolon Publishing

Email: contact@eidolonpublishing.com

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above and may provide additional notice for material changes.