Scope
This policy describes how Helixera handles information collected through its website, accounts, disease intelligence application, emails, checkout, billing settings, and support forms.
Information we collect
We collect information you provide, information needed to operate an account, and limited technical information generated when the service is used.
- Account information such as email address, authentication identifiers, selected plan, and billing status.
- Product preferences such as the primary disease, watchlists, alerts, saved trials, workspaces, and digest choices.
- Checkout acknowledgment records, including the selected plan, displayed price, billing frequency, policy version, and acknowledgment timestamp.
- Contact submissions, optional cancellation feedback, and support messages.
- Operational data such as product events, request metadata, error records, and security signals.
- Payment details are collected by Stripe on its hosted services; Helixera stores billing identifiers and subscription state rather than full card details.
Health-adjacent information
A disease selection or watchlist can reveal health-adjacent interests. Helixera uses those choices to personalize the product. Helixera is not designed to receive medical records, protected clinical documentation, or sensitive personal health histories. Do not enter personal health information in contact forms or AI question fields.
How we use information
We use information to authenticate users, deliver selected disease intelligence, operate plan access, send requested digests and alerts, process payments, provide support, secure the service, diagnose failures, and improve product workflows.
Service providers
Helixera currently relies on service providers that process information for specific operational purposes.
- Supabase for authentication and database services.
- Vercel for application hosting and delivery.
- Stripe for checkout, subscription billing, and its customer portal.
- Resend for transactional and digest email when configured.
Sharing and disclosure
We do not state that personal information is sold. Information may be shared with service providers as needed to operate Helixera, to protect users or the service, to comply with lawful requests, or as part of a business transaction subject to appropriate safeguards.
Retention and security
Helixera retains information while it is needed for the service, security, billing, legal obligations, or legitimate operational records. No security program can guarantee absolute protection. Retention periods and deletion procedures should be finalized before general availability.
Your choices
You can unsubscribe using links in Helixera emails, manage or cancel a paid subscription through Billing & Access or Stripe billing management, and contact Helixera to request help with account information. Specific privacy rights vary by location and are handled according to applicable law.
Children
Helixera is not directed to children under 13 and does not knowingly solicit their personal information. Age requirements for paid or professional features should be finalized before general availability.
Changes and contact
We may update this policy as the service changes. The effective date will identify the current version. A dedicated privacy email has not yet been configured; use the Contact page and choose Privacy or legal.