Privacy Policy
Last updated September 22, 2026
Helian Inc. (“Helian,” “we”) operates helian.ai and the Helian quality-management platform. This policy describes what we collect, why we collect it, who receives it, how long we keep it, and how you can ask for access or deletion.
We post changes on this page and change the date above. For material changes, we will notify account holders by email at least 30 days before they take effect, unless a change is required sooner by law or to protect the security of the service.
Information we collect
- Account details you or your administrator provide, such as name, email address, and organization.
- Sign-in credentials. Passwords are handled by our authentication provider. The application does not keep a copy of your password.
- Security information, including multi-factor authentication enrollment, sign-in activity, lockouts, and session timing.
- Quality records, files, and other content you and your organization enter in the platform.
- Messages you send to support@helian.ai.
- Technical information such as IP address, browser type, and request logs, collected by our hosting provider to operate and secure the site.
Booking a demo leaves this site for Calendly (calendly.com). Calendly collects the details you submit there under its own privacy policy. Calendly does not receive the quality records stored in Helian.
Why we use it
- To provide the platform and the accounts on it.
- To authenticate users, require multi-factor authentication, and end idle sessions.
- To store and display the records your organization keeps in the product.
- To answer support requests.
- To run AI features when someone in your organization uses them.
Who receives it
We share personal information with service providers that:
- Host the application.
- Provide authentication and the database.
- Store files.
- Send email.
- Provide AI features when someone in your organization uses them.
- Preview documents when you open that preview.
The provider list is part of our Data Processing Agreement, which is available on request at support@helian.ai.
We do not sell personal information. We do not share it for cross-context behavioral advertising.
Cookies
The site sets only strictly necessary cookies: one that keeps you signed in, and one that records when your session was last active so an idle session can be ended. Because these cookies are strictly necessary, we do not show a cookie-consent banner. The site does not use advertising or analytics cookies, does not track you across other websites, and does not respond to Do Not Track signals.
How long we keep it
Quality records stay in the platform for the subscription. For 30 days after access ends, Helian will provide an export of those records on request. Helian then deletes them from the active service. Copies in backups are deleted as those backups expire on their normal schedule. You are responsible for keeping any records your regulatory obligations require.
You may ask us to delete account and contact information. We may keep a limited record where the law requires it, or where we need it to resolve a dispute about the account.
Where data is stored
Account data and quality records are stored and processed in the United States.
Legal basis and complaints
Where European or UK data-protection law applies, we process personal information to perform our contract with your organization, and for our legitimate interests in securing and operating the service. You can complain to your local data protection authority.
Access and deletion
Email support@helian.ai to request access to, correction of, or deletion of personal information. We respond to requests within 30 days. We may need to confirm that the request comes from the account holder or from an administrator of the organization.
If your personal information is in records that belong to an organization using Helian, such as approvals, signatures, or audit trails, we will refer your request to that organization, which controls those records.
Health information
Do not enter protected health information. Helian does not offer a Business Associate Agreement. Complaint Handling is a quality record, not a medical-record system. You are responsible for what you and your users enter.
Haley and other AI features
When you use an AI feature, the content you submit is sent to our AI provider so a response can be generated. Helian does not use customer content to train models. Those requests are sent under terms that do not allow that content to be used to train the provider's models. Our AI provider may retain requests for a limited period for safety monitoring, as its terms allow.
A person must review AI output before it is used in a quality record. AI output is not a compliance determination. See the Terms for how responsibility for that review is allocated.
Children
The service is intended for business use and is not directed to anyone under 18.
Your compliance obligations
You are responsible for your own regulatory compliance and for validating Helian for your intended use. This policy describes our practices. It is not a promise that use of Helian satisfies any law or standard.
Questions: support@helian.ai