Privacy & Data Policy - HelperAgent.ai

✅ The short version

💬

Conversation data belongs to the business, not us. When a customer chats with your agent, that conversation is yours. We don't sell it, share it with advertisers, or use it to train AI models.

👤

Customer info stays with you. Names, phone numbers, and emails your agent captures go into your dashboard. We store them on your behalf and don't contact your customers directly.

🤖

AI processing is transient. Messages are sent to Anthropic's Claude API to generate responses. Anthropic does not retain conversation data for training. Conversations are stored in your dashboard, not with Anthropic.

🔐

We use industry-standard security. Data is encrypted in transit (HTTPS) and at rest. Passwords are hashed with PBKDF2. We don't store payment card numbers.

🗑️

You can delete your data. Cancel your account and we'll delete all your data within 30 days. Email us and we'll do it faster.

📱

SMS opt-out is immediate. Anyone who texts STOP will never receive another message from your agent. We honor this legally and technically - no exceptions.

What we collect

We collect two categories of information: information about businesses that use HelperAgent, and information about their customers that flows through the agent.

Business account information

Data	Why we collect it
Business name, type, hours	To configure your agent's responses
Contact email	To send you notifications, approvals, and account info
Contact phone	For escalation notifications (optional)
Business slug	Your unique identifier in our system
Google Review link	To send automated review requests on your behalf
Payment information	Processed by Stripe - we never see or store card numbers

Customer data (collected by your agent)

Data	When collected
Name	When customer provides it during conversation
Phone number	When customer provides it for booking or follow-up
Email address	When customer provides it for booking or follow-up
Conversation messages	Full transcript stored for your dashboard
Appointment details	Service, date, time - when booking is made
Order details	Items, total, fulfillment - when order is placed

⚠️

We do not collect sensitive personal data. HelperAgent agents are not designed to collect Social Security numbers, financial account numbers, health information, or other sensitive categories. Your agent's knowledge base should never include this type of data.

How we use it

To operate the service

Generate agent responses using the Anthropic Claude API
Store and display conversations in your dashboard
Send appointment reminders and review requests on your behalf
Process payments via Stripe
Send you account notifications and approval queue alerts

What we never do

Sell your data or your customers' data to third parties
Use conversation data to train AI models
Contact your customers directly for our own marketing
Share data with advertisers
Build profiles on your customers for our own purposes

✅

Your customers' data is used only to operate your agent. When a customer's name and phone number are captured, that information is used to book their appointment, send them a reminder, and optionally request a review - nothing else. We act as a data processor on your behalf.

Who sees it

You (the business)

You have full access to all conversation data, contacts, appointments, and orders through your dashboard. You control this data and can export or delete it at any time.

HelperAgent (us)

We can access all client data as the operator of the platform. This access is used only to support your account, resolve issues, and maintain the service. We do not browse your conversations casually.

Anthropic (AI provider)

Messages are sent to Anthropic's Claude API to generate responses. Anthropic processes messages transiently to produce a response and does not retain them for model training under their current API terms. See Anthropic's privacy policy for details.

Twilio (SMS provider)

If your plan includes SMS, messages are sent via Twilio. Phone numbers and message content pass through Twilio's infrastructure. See Twilio's privacy policy.

Supabase (database)

All data is stored in Supabase, a PostgreSQL database platform hosted on AWS. Data is stored in the US. See Supabase's privacy policy.

Nobody else

We do not share data with any other third parties. No analytics platforms receive your customer data. No advertising networks. No data brokers.

Where it's stored

All data is stored in the United States
Database: Supabase (PostgreSQL on AWS us-east-1)
Application: Cloudflare Workers (global edge, no persistent storage)
Data is encrypted in transit via HTTPS/TLS 1.3
Data is encrypted at rest by Supabase
Passwords are hashed with PBKDF2 - never stored in plaintext
Payment processing: Stripe - card numbers never touch our servers

How long we keep it

Data type	Retention period
Conversation history	2 years, or until you delete it
Contact records	Duration of your account
Appointment records	3 years (business records)
Order records	3 years (business records)
Account data	30 days after account cancellation, then deleted
SMS opt-out list	Indefinitely - required for TCPA compliance
Payment records	Managed by Stripe per their retention policy

Your rights

Business accounts

You can request a copy of all data we hold about your business and your customers at any time. Email us and we'll provide a full export within 5 business days.

You can delete your account and all associated data at any time. We'll confirm deletion within 30 days. SMS opt-out records are the only data retained after deletion, as required by law.

Your customers

If one of your customers contacts you asking to delete their data, you can remove them from your dashboard. Contact us and we'll ensure their data is fully removed from our systems.

Minnesota residents

Minnesota does not currently have a comprehensive consumer privacy law equivalent to GDPR or CCPA. However, we voluntarily extend data access, correction, and deletion rights to all users regardless of location.

ℹ️

To exercise any of these rights: Email hello@helperagent.ai with your request. We respond within 5 business days.

SMS & TCPA compliance

When your agent sends SMS messages (appointment reminders, review requests, follow-ups), we operate in compliance with the Telephone Consumer Protection Act (TCPA).

SMS messages are only sent to customers who provided their phone number to your business
Every SMS message includes opt-out instructions ("Reply STOP to opt out")
STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, and QUIT keywords are honored immediately
Opt-outs are processed within seconds and stored permanently
Opted-out numbers never receive messages again, from any business using our platform
Customers can re-subscribe by texting START, YES, or UNSTOP
We do not send unsolicited marketing SMS on our own behalf

⚠️

Business responsibility. You are responsible for ensuring you have appropriate consent to contact customers via SMS. HelperAgent provides the technical infrastructure - the business relationship and consent obligations are yours.

Children

HelperAgent is a business tool not intended for use by or directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through an agent, contact us immediately and we will delete it.

Changes to this policy

We may update this policy as our service evolves. When we make material changes, we'll notify active clients via email at least 14 days before the changes take effect. The "last updated" date at the top of this page always reflects the current version.

Continuing to use HelperAgent after changes take effect constitutes acceptance of the updated policy.

Contact us

Questions about this policy, data requests, or anything else - we're a local operator and we respond to real emails from real people.

HelperAgent

Saint Paul, Minnesota

Email: hello@helperagent.ai

We typically respond within one business day.