Legal
Privacy Policy
Effective and last updated: 5 August 2026
In short: this Policy covers the public Helix website and early-access waitlist. We use the details you submit to manage the waitlist and send the updates you request. We do not collect health data through this website, sell personal data, or use it for third-party advertising.
1. Who is responsible for your data?
The data controller is Helix AI Algorithm S.L., with registered office at Plaça de Pau Vila 1, Palau de Mar, Pier 01, Office 2B, 08039 Barcelona, Spain, registered with the Barcelona Mercantile Registry in Section 8, Sheet B-640445, Entry 1.
For privacy questions or to exercise your rights, email info@helixai.life.
2. What does this Policy cover?
This Policy applies only to helixai.life, its public subdomains, the Helix early-access waitlist, and messages you send us about the website or waitlist.
3. What personal data do we collect?
- Waitlist details: your name, email address, selected areas of interest, the Privacy Policy version shown when you join, and the time of your consent.
- Communications: the content of messages you send us and the information needed to respond.
- Technical and security data: information normally contained in HTTP and infrastructure logs, such as IP address, browser type, requested URL, timestamps, and error or security events.
Please do not submit health information, medical records, identification documents, or other sensitive personal data through the waitlist or general contact email.
4. Why do we use your data, and on what legal basis?
| Purpose | Data | Legal basis |
|---|---|---|
| Manage the early-access waitlist and send the Helix updates you selected. | Name, email, interests, consent record. | Your consent (Article 6(1)(a) GDPR). You can withdraw it at any time. |
| Answer questions and manage communications. | Contact details and message content. | Steps taken at your request and our legitimate interest in responding (Articles 6(1)(b) and 6(1)(f) GDPR, as applicable). |
| Operate, secure, troubleshoot, and prevent abuse of the website. | Technical, error, and security data. | Our legitimate interest in providing a reliable and secure website (Article 6(1)(f) GDPR). |
| Comply with legal obligations and establish or defend legal claims. | Data relevant to the applicable obligation or claim. | Legal obligation and legitimate interests (Articles 6(1)(c) and 6(1)(f) GDPR). |
5. Is providing your data mandatory?
Joining the waitlist is voluntary. A name, valid email address, at least one selected interest, and consent to the requested updates are needed to join. If you do not provide them, we cannot add you to the waitlist. You may still browse the website.
6. Who receives your data?
Access is limited to Helix personnel who need the information and service providers acting on our instructions, including Google Cloud as our hosting and infrastructure provider. Providers are subject to confidentiality and data-processing obligations. We may also disclose information when required by law, a court, or a competent authority, or when reasonably necessary to protect legal rights and website security.
We do not sell your personal data or share it with third parties for their own advertising.
7. International data transfers
Our primary website and waitlist infrastructure is configured in the European Economic Area. Some providers may make support or ancillary services available from other countries. Where a transfer outside the EEA occurs, we rely on an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, together with additional measures where required.
8. How long do we keep your data?
- Waitlist data and consent records: until you withdraw consent, or no longer than 24 months after your latest waitlist interaction, unless a shorter period is appropriate.
- General enquiries: for up to two years after the enquiry is resolved.
- Technical and security logs: for up to 12 months, unless an event requires longer retention for investigation or legal claims.
- Legally required records: for the period required by the applicable law or limitation period.
After the applicable period, data is deleted or irreversibly anonymised.
9. Email updates and withdrawal of consent
We send early-access or product updates only for the topics you selected. You can withdraw your consent at any time by using the unsubscribe method included in an email or by writing to info@helixai.life. Withdrawal does not affect processing that was lawful before withdrawal.
10. Cookies and external resources
We do not currently use advertising or behavioural-analytics cookies. The website loads font files from Google Fonts, which means your browser connects to Google to retrieve those files. Helix does not use that request to recognise you or build an advertising profile. See our Cookie Policy for current details.
11. Your data-protection rights
Subject to the conditions in the GDPR, you may request access to, correction of, deletion of, restriction of, or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time.
Send your request from the email address concerned to info@helixai.life. We may request information necessary to verify your identity. We normally respond within one month, subject to any lawful extension.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the supervisory authority where you live or work.
12. Security
We use technical and organisational measures appropriate to the nature of the website data, including encrypted transmission, access controls, restricted administrative access, backups, monitoring, and procedures for handling security events. No system is completely secure, and we review these measures as the service changes.
13. Children
The waitlist is intended for people aged 18 or over. We do not knowingly request personal data from children. If you believe a child has joined the waitlist, contact us so that we can delete the information.
14. Automated decisions
We do not use the website or waitlist data to make decisions based solely on automated processing that produce legal or similarly significant effects.
15. Changes to this Policy
We may update this Policy when the website, waitlist, providers, or legal requirements change. The current version will remain available here with its effective date. If a change materially affects how we use existing waitlist data, we will provide appropriate notice and request new consent where required.
16. Contact
Helix AI Algorithm S.L.
Plaça de Pau Vila 1, Palau de Mar, Pier 01, Office 2B
08039 Barcelona, Spain
info@helixai.life