# Privacy Policy

Last updated: March 23, 2026

## 1. Introduction

Welcome to HelixLabs. We operate the website helixlabs.studio and our suite of Chrome extensions including Prompt Helix, FocusForge, and CookieNuke (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services.

## 2. Information We Collect

### 2.1 Information You Provide
- Email address (when creating an account)
- Payment information (processed securely by Stripe - we never store card details)
- Name (if provided during registration)

### 2.2 Information Collected Automatically
- Browser type and version
- Usage data and interaction with our extensions
- IP address and general location data
- Pages visited on helixlabs.studio

### 2.3 Chrome Extension — Prompt Helix

Prompt Helix operates using a Bring Your Own Key (BYOK) model. Your API keys for OpenAI, Anthropic, Google, and Mistral are stored locally in your browser's Chrome storage and are never transmitted to HelixLabs servers. We do not have access to your API keys at any time.

When you use Prompt Helix, page content from your active browser tab is sent directly from your browser to your chosen AI provider using your own API key. This content is not routed through or stored on HelixLabs servers.

The extension does not collect browsing history, page content, or AI conversation data on our servers. Subscription status is verified through our authentication service solely to determine your plan tier.

## 3. How We Use Your Information

We use the information we collect to:
- Create and manage your account
- Process payments and manage subscriptions
- Provide and improve our Services
- Send transactional emails (receipts, account updates)
- Respond to customer support requests
- Comply with legal obligations

## 4. Sharing Your Information

We do not sell your personal information. We may share your information with:
- **Stripe** - for payment processing
- **Clerk** - for authentication services
- **Vercel** - for website hosting
- Law enforcement when required by law

## 5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide Services. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

## 6. Your Rights

Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Data portability

To exercise these rights, contact us at support@helixlabs.studio

## 7. Cookies

We use cookies and similar tracking technologies to improve your experience. Please see our Cookie Policy for more details.

## 8. Security

We implement industry-standard security measures to protect your data. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

## 9. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

## 10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our Services after changes constitutes acceptance of the updated policy.

## 11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

**HelixLabs**
Email: support@helixlabs.studio
Website: helixlabs.studio