Helps Privacy Policy
Version 1.4 — 22 September 2026
Current version · Stable address of this document: https://www.usehelps.com/legale/en/privacy
This is a courtesy translation of a document written in Italian. In case of any divergence between the two versions, the Italian text prevails.
This policy explains what personal data we collect when you use Helps, why we collect it, who we share it with and what rights you have.
It is written to be read, not to be impenetrable. If something is not clear, write to us.
1. Who processes your data
The data controller is Giuseppe Cristiano Assennato, Italian tax code SSNGPP07C20B429T, Contrada Canicassè, 93100 Caltanissetta (CL), Italia.
For any matter concerning your data: privacy@usehelps.com
We have not appointed a data protection officer (DPO): article 37 of the GDPR requires one when the core activity consists of processing that requires regular and systematic monitoring of data subjects on a large scale, or large-scale processing of special categories of data, and as at the date of this policy that threshold is not met.
2. What data we collect
2.1 Data you give us
| What | When |
|---|---|
| Email address | on registration |
| Password, which we store only in encrypted form | on registration, if you do not use sign-in with Google |
| Company context: product, prices, competitors, recurring objections | when you fill it in |
| Notes on deals and on individual customers | when you write them |
| Team name and email addresses of the people you invite | if you use the team features |
2.2 Data that arises from use
| What | Notes |
|---|---|
| Transcript of the calls | the text of what is said during the video calls on which you activate Helps |
| Generated suggestions and Laboratory answers | kept so that you can read them again |
| Consumption: seconds of transcription, Laboratory runs | used to count what is left of your plan |
| Technical operating data | session times, outcomes of calls to the services |
2.3 Data from the usehelps.com website
Separately from the application, the usehelps.com website collects a small amount of anonymous browsing data: which pages are opened, which channel the visit comes from and whether the download button is pressed. There are no cookies and there is no advertising, and we store no identifier that would let us recognise you from one visit to the next. Article 11 lists exactly what is recorded, what stays stored in your browser and how to avoid it.
2.4 What we do NOT keep
The audio of your calls is never saved. It is transmitted to the transcription service as it passes, converted into text, and is not recorded either on your computer or on our systems.
We never see your card details. Payments go entirely through Stripe.
3. Important: what ends up in the transcripts
This is the part that deserves the most attention of all.
When you activate Helps during a video call, the transcript contains everything that is said, including the words of the other participants and any information that emerges in the conversation.
If special data is discussed in the call — health conditions, political opinions, trade union membership, or other categories that article 9 of the GDPR protects in a reinforced way — that data ends up in the transcript.
It is you who decide on which calls to activate Helps, and it is your responsibility to inform the other participants and not to use it in contexts where this kind of data would be processed without the necessary safeguards.
If you use Helps for your company, in respect of the data of the people you talk to your company is the data controller and we are the processor: in that case the Data Processing Agreement also applies, which you can find at usehelps.com/legale/en/dpa and which forms an integral part of the Terms of Service.
4. Why we process this data
| Purpose | Legal basis |
|---|---|
| Providing you with the service: transcribing, generating suggestions, storing your deals | performance of the contract — art. 6.1.b GDPR |
| Managing your account and access | performance of the contract |
| Counting consumption and applying the plan limits | performance of the contract |
| Managing the subscription and payments | performance of the contract and legal obligations — art. 6.1.b and 6.1.c |
| Sending you service communications: email confirmation, password recovery, subscription notices | performance of the contract |
| Diagnosing faults and keeping the service working | legitimate interest — art. 6.1.f |
| Understanding which channels the website visits come from and how many become downloads | legitimate interest — art. 6.1.f |
| Recording which legal documents you accepted and when | performance of the contract and legitimate interest — art. 6.1.b and 6.1.f |
| Defending ourselves in the event of disputes | legitimate interest — art. 6.1.f |
We do not use your data for advertising and we do not sell it to anyone.
We do not use your conversations to train artificial intelligence models, nor do the suppliers we use: on AssemblyAI we have activated the explicit opt-out from the model improvement programme, and Anthropic does not train on the data of commercial customers.
5. Who we share the data with
To make Helps work we rely on a number of suppliers. Each one receives only what it needs.
| Supplier | What it receives | Where | Retention | Basis of transfer |
|---|---|---|---|---|
| Supabase (on AWS infrastructure) | the database: accounts, context, transcripts, deals | European Union — Frankfurt | as long as the account is active | no transfer outside the EU |
| AssemblyAI | the audio of the call, in order to transcribe it | United States | audio and transcripts deleted within 24 hours; training opt-out active | adheres to the EU-US Data Privacy Framework |
| Anthropic | the company context and the text of the conversation, in order to generate the suggestions | United States | up to 30 days; no training on commercial data | standard contractual clauses |
| Stripe | the data needed for payment | United States and European Union | according to its own policies | adheres to the EU-US Data Privacy Framework |
| Brevo | your email address, for service communications | European Union | according to its own policies | no transfer outside the EU |
| authentication, if you choose "Continue with Google": it receives the sign-in request and returns to us your email address and your profile name | European Union — Google Ireland Limited | according to its own policies | no transfer outside the EU | |
| PostHog, Inc. — data processor under art. 28 GDPR | the website events listed in article 11. The IP address travels with the request and is discarded on receipt: it is not kept | European Union — Frankfurt | 12 months | the data stays in the European Union; PostHog, Inc. is based in the United States and standard contractual clauses apply to access by its staff |
| Vercel and Cloudflare | the website and the return pages after payment | distributed network | technical browsing data | — |
The EU-US Data Privacy Framework is the adequacy framework recognised by the European Commission in July 2023: transfers to certified suppliers do not require further safeguards. Standard contractual clauses are the instrument provided by article 46 of the GDPR for non-certified suppliers.
Google is not a supplier like the others in this table, and the difference matters. If you choose "Continue with Google" you do not hand us a password: you authenticate with Google, which for that operation processes your data as an autonomous controller, under its own terms and its own privacy policy — not on our behalf. We are not party to that relationship and cannot dispose of it.
What we receive from Google is only your email address and your profile name: the only scopes we request are "openid", "email" and "profile", and nothing else from your Google account reaches us.
The contract for the Google services we use is with Google Cloud Italy S.r.l.; whoever chooses "Continue with Google" authenticates with Google Ireland Limited. By this route we make no transfers outside the European Union. What processing Google then carries out on its own account is governed by its own privacy policy, and it is worth reading.
If you prefer that Google not know that you use Helps, register with an email address and a password: the alternative is always there, and it changes nothing about the service.
The list is up to date as at 22 September 2026. If it changes, we update this page.
6. How long we keep it
| Data | How long |
|---|---|
| Account and company context | as long as the account is active |
| Call transcripts, and the words of the people you talk to saved in your deals | From 30 to 180 days from the end of the session, 90 by default, your choice in your account settings |
| Deals, suggestions received, Laboratory answers | as long as the account is active, or until you delete them |
| Audio of the calls | never kept |
| Consumption data | as long as the account is active |
| Website browsing events | 12 months |
| Documents relating to payments | for the time required by the applicable tax and accounting obligations |
| Record of acceptances: which documents you accepted, in which version and when | also after the account is closed, so that we can prove the contract if it is disputed — art. 17.3.e GDPR |
When you close the account we delete your data, except what we are required to keep by law and the record of acceptances indicated above, which we keep because it is the proof of the contract and we need it to defend ourselves if it were disputed.
7. Your rights
At any time you may:
- know what data of yours we process and ask for a copy of it;
- correct it if it is wrong;
- delete it, except the data we are required by law to keep and the record of acceptances indicated in article 6;
- restrict its processing;
- take it elsewhere, in a readable format — from the application you can export everything whenever you want, without asking us;
- object to the processing based on legitimate interest.
To exercise them write to privacy@usehelps.com. We reply within one month.
If you believe we are processing your data improperly, you can turn to the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or to the authority of the country where you live.
8. Security
The data travels encrypted and is stored on Supabase infrastructure in the European Union, with row-level access controls that restrict each account to its own data.
The audio of the calls is never kept.
Administrative access to the database is restricted to the controller, with two-factor authentication on the services that support it. The credentials for access to third-party services are kept in a secret store and rotated periodically.
No system is impenetrable. If a breach were to occur that involves a risk to your rights, we will tell you and will inform the Garante within the 72 hours provided for by article 33 of the GDPR.
9. Minors
Helps is a work tool and is not intended for people under 18. Article 4 of the Terms of Service requires you to be at least 18 years old, and by accepting them you declare that you are.
We do not knowingly collect data of minors. If we learn that an account has been opened by a minor, we close it and delete the associated data, except what we are required to keep by law.
10. Changes to this policy, and change of controller
If we change something substantial — a new supplier, a different purpose — we update this page and tell you by email.
If the data controller changes — typically because the activity continues in corporate form, or because it is transferred — we tell you with at least 30 days' notice, saying who is taking over and at what address. Your data passes to whoever takes over on the conditions described here, and the rights in article 7 remain the same. The corresponding clause of the Terms of Service is article 14.
11. Website statistics
The previous articles concern the application. This one concerns the website, which collects far less and for one reason only: to understand whether the people who arrive from social media actually download Helps.
There are no cookies on the website and there is no advertising. We do not profile you, we do not follow what you do on other websites and we do not pass browsing data on to anyone.
The statistics are collected on our behalf by PostHog, Inc., acting as a data processor under article 28 of the GDPR: the data is stored in the European Union, is not used for the supplier's own purposes and is not combined with data collected on other websites.
11.1 What we store in your browser
One value only, in the browser's local storage (localStorage).
| Value | What it contains |
|---|---|
| helps_src | the channel you first arrived from, read from the src parameter of the address — for example tt, ig, li, yt. If there was none, it is "diretto" (direct) |
It is not a cookie, it cannot be read by other websites, and it stays until you clear the site data in your browser.
Nor is it an identifier: it is one of a handful of values, the same for everyone who arrives from the same channel, and it does not tell you apart from anyone else.
Nothing else is stored. In particular we store no number, code or identifier that would let us recognise you from one visit to the next: the code that holds together the events of a single screen is generated on the spot, stays in the browser's memory and disappears when you reload the page.
11.2 What we record
| Event | When | What it contains |
|---|---|---|
| sito_visita | when a page of the website is opened | the page opened, the channel of origin, whether the device is a phone or a computer, the operating system |
| download_click | when you press a download button | the channel of origin, the type of device, the operating system, the place on the page you pressed from |
| download_avviato | when the request for the installer reaches our server | the channel of origin and the operating system |
Your IP address travels with the request, as it does with any request to any website, but it is discarded on receipt: it is not kept and it does not enter the statistics.
This data is kept for 12 months.
The legal basis for this processing is our legitimate interest in knowing whether what we publish works — article 6.1.f of the GDPR. The interest is in measuring a channel, not in following a person: this is why we use no cookies, keep no identifiers and pass this data to no one for advertising purposes.
11.3 How to avoid it
You can object at any time by writing to privacy@usehelps.com. You can also do it yourself: blocking site data for usehelps.com in your browser settings, or using an extension that blocks measurement tools, stops sito_visita and download_click. The website still works and the download still starts.
One more thing has to be said about download_avviato, because it is not obvious. That event does not arise in your browser but on our server, at the moment you ask it for the file: blocking scripts does not stop it, and there is no way to download the installer without the request reaching us. What we can tell you is exactly what it contains, and that is written in the table in article 11.2.
The date at the top indicates the last update.