Who we are

helohi.io is operated by Algo and Art LLC, a US limited liability company doing business as helohi.io (“helohi”, “we”, “us”, or “our”). We provide AI voice and chat agents to small businesses. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have.

Information we collect

Information you provide directly

• Account information: name, email address, phone number, business name, business address.
• Business details: services offered, business hours, pricing, calendar system, website platform.
• Form submissions: information you submit through our Get Started form or contact forms.
• Communications: emails, support requests, and feedback you send us.

Information collected through the Services

• Call data: caller phone numbers, call duration, call recordings (if enabled), transcripts, and call summaries.
• Chat data: messages exchanged between your website visitors and your helohi agent.
• Booking data: appointment details, calendar entries, confirmation messages.
• SMS data: phone numbers and transactional text messages sent on your behalf.

Information collected automatically

We use Cloudflare Web Analytics, which is cookieless and does not collect personally identifiable information. helohi.io does not set tracking or advertising cookies. We may log basic technical data (IP address, user agent, request paths) for security and error monitoring.

How we use information

• Build, train, and operate your helohi agent.
• Book appointments and send confirmation or reminder messages on your behalf.
• Provide customer support and respond to inquiries.
• Improve our services, debug issues, and develop new features.
• Communicate with you about your account, billing, and service updates.
• Comply with legal obligations and enforce our terms.

How we share information

We do not sell your personal information or your customers' personal information.

• Service providers (sub-processors): vendors that help us operate the platform. See the list below.
• Billing (Paddle, Merchant of Record): when you purchase a subscription, payment is processed by Paddle.com Market Limited. Paddle collects your billing information (name, billing address, payment method details, purchase history) directly and acts as a separate data controller for that data under its own privacy notice. We do not store credit card or bank account details. See Paddle's privacy notice at paddle.com/legal/privacy.
• At your direction: when you instruct your agent to send SMS messages, book calendar appointments, or share information with your customers.
• Legal requirements: when required by law, regulation, legal process, or a valid governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to affected users.

Service providers and sub-processors

We engage vetted third-party providers to deliver the Services. Each receives only the data it needs to perform its function, and only for the purpose we engage it for.

The categories of providers we use include:

• Billing and payments: our Merchant of Record (Paddle), as described in our Terms of Service. Paddle acts as a separate data controller for payment information.
• Cloud hosting and infrastructure: for running the application, content delivery, and DNS.
• Voice AI and large language model providers: to power the conversational agent.
• SMS and telephony providers: to send appointment confirmations and route inbound calls.
• Transactional email provider: for confirmations, alerts, and account-related messages.
• Error and performance monitoring: to keep the Services reliable.
• Calendar integrations (such as Google Calendar, Microsoft Outlook, Calendly, Square): connected only at your direction to read or write appointments.

A current, named list of our sub-processors is available on request. Email privacy@helohi.io and we will share the list along with a Data Processing Addendum (DPA) where applicable. Paying customers receive a copy as part of their account documentation.

Data ownership

Your data belongs to you. Customer data, call logs, transcripts, recordings, and booking information collected through your helohi agent are owned by you. We do not use your business data to train models for other clients.

Data retention

• Active accounts: we retain your data while your account is active.
• After cancellation: account data is retained for 30 days to allow reactivation, then permanently deleted.
• Call recordings: retained per your account settings. You can delete recordings at any time from your dashboard.
• Legal holds: we may retain data longer where required by law.

Data security

• Encryption in transit (TLS / HTTPS).
• Encryption at rest.
• Access controls, authentication, and least-privilege principles.
• Regular security reviews and monitoring.

No system is perfectly secure. You are responsible for keeping your account credentials safe.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your data, subject to legal retention requirements.
• Export your data in a portable format.
• Opt out of non-essential communications.

To exercise these rights, email privacy@helohi.io.

California privacy rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the CPRA:

• Right to know what personal information we collect, use, and disclose.
• Right to delete personal information we have collected about you.
• Right to correct inaccurate personal information.
• Right to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA.
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising any of these rights.

To exercise these rights, email privacy@helohi.io. We will verify your request using account information on file.

European and UK privacy rights (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our lawful bases for processing your personal data are:

• Performance of a contract (to provide the Services you signed up for).
• Legitimate interests (to secure, improve, and operate the Services).
• Consent (where required, for example for optional communications).
• Legal obligation (to comply with applicable law).

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.

Our EU / UK representative and Data Protection Officer contact: privacy@helohi.io (a named representative will be appointed before EU launch).

International data transfers

helohi is operated from the United States. If you access the Services from outside the US, your information will be transferred to, stored, and processed in the US and other countries where our sub-processors operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Children's privacy

helohi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

Cookies and tracking

helohi.io does not use tracking or advertising cookies. We use Cloudflare Web Analytics, which is cookieless. Logged-in product surfaces (app.helohi.io, admin.helohi.io) use strictly necessary cookies for authentication and session management.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes that affect how we use your data, we will provide additional notice (for example, by email).

Contact

Privacy questions or requests: privacy@helohi.io.

Legal entity: Algo and Art LLC d/b/a helohi.io.
Mailing address: [Algo and Art LLC mailing address — to be added before launch].