Privacy Policy

Last updated: August 28, 2026

helmate (“we”) provides construction project management SaaS: projects, budget, contacts, documents, operational AI chat, and optional integrations (Gmail, WhatsApp, and others). This policy describes what we collect, how we use it, and your rights.

1. Who we are

Helmate (הלמייט). helmate is operated at helmate.ai. The app is available at app.helmate.ai. Privacy inquiries: support@helmate.ai.

2. Data we collect

• Account: email, display name, Firebase Auth ID, language and related preferences.
• Projects: project names, tasks, calendar, budget, expenses, contacts, documents you upload, and operational notes.
• Chat & AI: messages you send to the assistant, project context, and AI usage to answer, summarize, and extract data for your projects.
• Files: documents, photos, and receipts you upload to secure storage.
• Notifications: push tokens for reminders and updates if you allow them.
• Optional Gmail (Pro): if you connect Gmail in Profile, we request gmail.readonly and gmail.send. With gmail.readonly we show inbox summaries and search (headers, sender, date, snippet) and import relevant attachments (e.g. quotes, invoices) into your project files when you ask in chat or when an automatic scan finds a construction document. We do not export the full mailbox or use mail for advertising. With gmail.send we send email only when you explicitly approve it from chat, from your Gmail address.
• Optional WhatsApp (Pro): phone numbers you choose and message content you send through the product.
• Technical: logs, IP address, browser/device type, and error data to keep the service reliable.
• Website use: when you visit the public website, we may collect page views, referral source, browser/device type, and link interactions to measure promotion and improve the pages. This does not collect project content.

3. How we use data

• To run the service: projects, sync, chat, exports, and notifications.
• To provide AI features in your project context (not to train public third-party models beyond the API use required for those features).
• To send email or WhatsApp only when you request it in the product.
• To support you, secure the system, and meet legal requirements.

We do not sell your mail, chat, or project content to third parties.

4. Storage, security & retention

Data is stored in the cloud (Firebase / Google Cloud). Gmail OAuth refresh tokens are stored in Firestore (encrypted at rest by the cloud provider) and used only for actions you authorize. We keep data while the account is active or as needed for the service, backup, or legal duties. You can disconnect Gmail anytime in Profile. You can permanently delete your account in the app: Profile → Account → Delete account. Deletion removes your stored project data and files from the service. Questions: support@helmate.ai.

Limited use of Google user data: Gmail data obtained through Google APIs is used only to provide and improve user-facing features in the app (inbox summary, document import, send-on-request). We do not transfer Gmail data for advertising, to data brokers, or to train general-purpose third-party AI models beyond the API calls required for those features.

5. Sharing with processors

• Google: sign-in, Gmail API, AI APIs, and Firebase under Google’s terms.
• WhatsApp messaging provider: if you enable WhatsApp sending.
• Infrastructure: storage, CDN, and monitoring under data-processing agreements.

We do not share data with advertisers.

6. Your rights

Under applicable law (including GDPR for individuals in the EU and Israeli privacy law), you may have rights to access, correct, delete, restrict, or object. Contact support@helmate.ai. You can also revoke Gmail access in Google Account settings.

7. Children

The service is for businesses and professionals; we do not target children under 16.

8. Changes

We may update this policy as needed; the date at the top of the page will change.