Privacy Policy

1.

Information We Collect

When you create a Helmsway account, we collect your name and email address. If you join the waitlist before subscribing, we collect your email address only.

We collect usage and telemetry data about how you interact with the service — which features you use, error events, and performance timings. This data is aggregated and used only to operate and improve the service.

Payment is processed by our payment processor (Stripe). We do not store your card number, CVC, or any other raw payment instrument. We retain a record of subscription status, billing period, and transaction identifiers so we can support your account.

2.

How We Use It

We use your account information to operate the service: authenticate your session, display your name in the dashboard, and contact you about your account.

We use your email address to send transactional messages (receipts, password resets, service notices) and lifecycle messages (onboarding, renewal reminders). You can opt out of non-transactional email at any time by replying to any message or emailing us directly.

We use aggregated telemetry to diagnose errors, measure performance, and prioritize product improvements. This data is never sold or shared with advertisers.

3.

Third-Party Processors

Stripe processes all payments on our behalf. Your payment data is governed by Stripe's privacy policy. We interact with Stripe only through hosted checkout pages — your card details never touch our servers.

Transactional and lifecycle emails are delivered through Polsia's email proxy. Your email address is transmitted to this proxy only to send messages you would expect to receive (receipts, resets, account notices).

Build artifacts and user-uploaded assets are stored in Polsia's object-storage proxy (backed by Cloudflare R2). Files are stored in a private bucket accessible only through authenticated API requests; they are not publicly indexed.

4.

Cookies & Analytics

We set a single session cookie when you sign in. It is a secure, HTTP-only cookie scoped to this domain; it expires when you sign out or after a period of inactivity. We do not set third-party advertising or tracking cookies.

We use first-party telemetry (event counts and timing recorded against your session) for analytics. No third-party analytics script (Google Analytics, Mixpanel, Segment) is loaded by this site.

5.

Your Rights & Choices

You may request a copy of the personal data we hold about you, or ask us to correct inaccurate data, by emailing us at the address below. We will respond within thirty days.

You may request deletion of your account and associated personal data at any time. Cancelling your subscription ends ongoing processing; we will delete your personal data within thirty days of the end of your billing period, except where retention is required by law (for example, financial records we are obligated to keep for tax purposes).

If you are in the European Economic Area or the United Kingdom, you have additional rights under the GDPR and UK GDPR, including the right to data portability, the right to object to processing, and the right to lodge a complaint with a supervisory authority.

6.

Contact

Questions about this policy or requests to exercise your rights should be sent to helmsway-5@polsia.app. We treat all privacy-related requests as confidential.