Privacy policy

Helixoy (“Helixoy”, “we”, “us”) is a company established in Spain and operates the website helixoy.com and the Helixoy platform (together, the “Services”). This policy explains what personal data we collect, why, and the rights you have under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Spanish data-protection law.

1. Data controller

The controller for personal data processed through the Services is Helixoy, Spain. You can reach us at privacy@helixoy.com.

2. Data we collect

• Contact and account data — name, work email, company, role and login credentials when you contact us, request a demo or create an account.
• Usage data — how you use the Services, including pages visited, features used, device and browser information, IP address and approximate location derived from it.
• Customer content — data you connect to or upload into the platform. We process this only on your instructions as a processor under our customer agreement.
• Communications — messages you send us and support requests.
• Cookies — see our cookie policy.

3. Why we process it and on what legal basis

• To provide, secure and support the Services — performance of a contract (Art. 6(1)(b) GDPR).
• To respond to enquiries and demo requests — our legitimate interest in communicating with prospective customers (Art. 6(1)(f)), or your consent where requested.
• To improve the Services and understand usage — legitimate interest (Art. 6(1)(f)); analytics cookies are used only with your consent.
• To send product updates and marketing — consent (Art. 6(1)(a)), which you can withdraw at any time.
• To comply with legal obligations — Art. 6(1)(c).

4. Sharing

We share personal data only with service providers acting on our instructions (hosting, email delivery, analytics, support tooling), with professional advisers, where required by law, or in connection with a merger or acquisition. We do not sell personal data.

5. International transfers

Our Services are hosted in the European Union by default. Where data is transferred outside the EEA, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses with additional safeguards.

6. Retention

We keep personal data for as long as necessary for the purposes above: account data for the life of the account plus a limited period for legal and security purposes; enquiry data for up to 24 months; usage logs for up to 12 months unless needed for security investigations.

7. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, email privacy@helixoy.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or your local supervisory authority.

8. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit and at rest, role-based access control, logging and regular review of access.

9. Children

The Services are intended for business use and are not directed at children under 16. We do not knowingly collect their data.

10. Changes

We may update this policy from time to time. The date at the top shows the latest version. Material changes will be communicated through the Services or by email.

11. Contact

Helixoy, Spain · privacy@helixoy.com