Skip to content
helping.io
Sign up

Legal

GDPR / UK GDPR Summary

A plain-English summary of how helping.io approaches GDPR and UK GDPR.

Last updated

This page is a plain-English summary of how Helping.io approaches GDPR/UK GDPR topics. It does not replace our Privacy Policy.

What personal data we process (high level)

Depending on how you use the Service, we may process:

  • Account information (for example, name, email address, and password, stored hashed)
  • API keys you create
  • Subscription and billing metadata (payments are processed by Stripe)
  • Service content you submit (messages, prompts, code snippets, tool inputs/outputs you choose to store)
  • File paths from your editor (workspace root prefixes removed where they can be matched)
  • Error logs and stack traces (workspace root prefixes removed from editor file paths where they can be matched)
  • Security and authentication audit logs, including IP address and browser details on sign-in and security records
  • Bug reports you send from the VS Code extension

We use Axiom for logs and error monitoring. Those logs contain request/error metadata; as configured, they do not contain prompt content or tool outputs. See Section 1.5 of the Privacy Policy for how we describe that.

Lawful bases (EEA/UK)

For EEA/UK users, our typical lawful bases are:

  • Contract: to provide the Service you request
  • Legitimate interests: to secure the Service, prevent abuse, and maintain reliability
  • Consent: for marketing communications and any non-essential cookies if we add them in the future

See our EEA/UK Privacy Notice for details.

Your rights (EEA/UK)

If you are in the EEA/UK, you may have rights such as access, correction, deletion, restriction, objection, portability, and the right to lodge a complaint with your supervisory authority (or the UK ICO).

To submit a request, contact support@helping.io or see our Privacy Rights Requests page. For a deletion request, we delete or anonymize your personal data within 30 days. We keep billing records and the security audit log, as the law and security require.

International transfers

We and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (and the UK addendum where applicable).

Subprocessors

We use subprocessors to operate the Service (for example hosting, database, billing, email, logging, and AI model inference). Our current list is published on our Subprocessors page.

DPA for business customers

If you are a business customer and need a Data Processing Addendum, we can provide one on request. See our Data Processing Addendum page.

Contact

Questions: support@helping.io