Privacy Policy

Who we are and what this covers

Helm's Gate AI, LLC ("Helms Gate AI," "we," "us") protects people from targeted digital harm. We do it with synthetic avatars, not by watching people. This Statement explains what information we handle, why, and what choices you have.

We handle two different kinds of information, and we keep them separate:

Business information. Ordinary contact and account details from people who visit our website, contact us, or work with us as clients and partners. Part 1 covers this.
Product information. What our avatars see when bad actors target them, and the limited details needed to run our dashboard and reporting tools. Part 2 covers this.

Helms Gate AI is based in the United States and serves U.S. clients. We do business as Proxyware. This Statement applies to helmsgate.ai, our dashboard, and our products. The current version is always posted at helmsgate.ai/privacy.

Questions about this Statement go to privacy@helmsgate.ai.

Part 1: Business and website information

We collect only what we need to talk with you and do business with you. We do not buy personal information, and we do not combine it with data from other sources.

What we collect	When	Why
Name, email, phone, organization, title	You fill out a form, email us, or meet with us	To answer you and follow up
Business contact and billing details	You become a client, partner, or reseller	To contract, invoice, and support you
Whatever you choose to tell us	You write to us or attend an event or webinar	To respond and improve what we offer
Website usage (pages, device type, browser, approximate region)	You visit helmsgate.ai	To keep the site working and understand what is useful

Cookies and analytics

Our website uses cookies that it needs to work, plus analytics cookies that tell us how the site is used. The site runs on HubSpot, which sets cookies to count visits and to connect a contact form you submit with the pages you viewed before submitting it. We also use Google Analytics, configured to avoid collecting directly identifying information.

You can block or delete cookies in your browser settings; the site will still work.

How we use business information

We use it to answer questions, deliver services we have agreed to provide, send account and security notices, send updates about Helms Gate AI that you can unsubscribe from at any time, keep our site secure, and meet legal obligations. We do not sell it, and we never share it with others for their marketing.

Helms Gate Academy webinars

Registering for a Helms Gate Academy webinar requires an email address. Registration is handled by our webinar hosting provider, which holds those email addresses on our behalf. We do not keep our own copy, and we do not use them for marketing unless you opt in, for example by subscribing to our newsletter.

Part 2: How our product works

Our product studies the people who cause harm, not the people we protect. Bad actors target victims by type and location, so we place synthetic avatars where the targeting happens and let the avatars take the hits instead.

The device and the avatars

A Helms Gate AI device sits at a client location, such as a school district, senior living community, or office. It connects to the local network the way a wired laptop would. It is not installed on anyone's phone, computer, or account.

The device runs SI avatars: synthetic digital profiles of a child, a senior, or another targeted group. An avatar is never a real person and is never built from a real person's data. The avatars browse the internet from that location and record what is aimed at them.

What the product collects

The product collects what bad actors send to our avatars:

Harmful content, ads, links, and websites the avatars encounter
Where that content came from, such as the domain, ad network, or platform
Identifiers bad actors use to reach the avatars, such as phone numbers, account names, or URLs

Some of those identifiers can belong to a real person: the bad actor. We collect them only to stop the harm at its source.

What the product does not collect

The product does not collect information about the students, residents, employees, or visitors at a client location. It does not read their messages, browsing, or files. It has no access to school records, health records, or client systems.

The client dashboard

Clients see results in a web dashboard hosted on Google Cloud Platform (GCP) in U.S. regions. The dashboard shows aggregated harm data for that client's locations.

To set up dashboard access, we collect one thing: each user's business email address. We use it only to provision the login and send account notices. We do not collect names, home addresses, or other personal details for dashboard accounts. The dashboard does not log your sessions; session data ends when your session ends.

Who we share information with

We do not sell personal information. We share it only as described here.

Recipient	What they receive	Why
Platforms, hosts, and ad networks	Harmful content and the bad actor identifiers behind it	So they can find and remove the harm at its source
Law enforcement	Avatar findings about harmful content and bad actors	To support investigations of digital crime, or as the law requires
State governments	Harmful content and bad actor identifiers	To support state enforcement and programs that protect residents
Partners	Harm intelligence: content, sources, and bad actor identifiers	So other protectors can act on the same threats
Other Helms Gate AI locations	Threats found at one location, shared within minutes	So every location is protected from known threats
Service providers	Only what each needs to do its job	To host, run, and support our services

Our service providers include Google Cloud Platform, which hosts the dashboard, a contracted provider of scanning infrastructure, and a webinar hosting provider for Helms Gate Academy. Our full service provider list is available on request.

The information we share with platforms, partners, law enforcement, and state governments is about bad actors and harmful content. We do not share business information or dashboard email addresses with them.

We may also disclose information when the law requires it, to protect someone from death or serious injury, or as part of a merger or sale of the business. In a merger or sale, the new owner must honor this Statement.

Where we store information and how long we keep it

We store information in the United States. The dashboard runs on Google Cloud Platform in U.S. regions. Scan data is processed on our own servers in McLean, Virginia, and on our contracted scanning infrastructure.

We keep information only as long as we need it, then delete it or strip anything that identifies a person.

Information	How long we keep it
Dashboard email addresses	While the account is active, plus 365 days after access ends, unless you ask us to delete it sooner
Dashboard session data	Not logged; ends when the session ends
Business contact information	While the contract is active, plus 365 days after it ends
Invoices and financial records (paying clients)	7 years, as required for tax and accounting purposes
Harm data and bad actor identifiers	Indefinitely, to recognize repeat offenders and support investigations
Aggregated, non-identifying statistics	Indefinitely
Website analytics	365 days

Security

We protect information with access controls, encryption, network monitoring, and secure development practices. Only staff who need information for their work can reach it, and they are bound to keep it confidential. Our service providers must protect it to the same standard.

Our team may visit client sites, for example to provide training. To report a suspected security issue, contact security@helmsgate.ai. We investigate every report promptly.

Your rights and choices

You can ask us to show you, correct, or delete the business information we hold about you. You can unsubscribe from our updates using the link in any email or sending an email to privacy@helmsgate.ai. Account and security notices continue while you have dashboard access.

Depending on where you live, state law may give you additional rights, such as the right to opt out of certain uses. We honor these rights for everyone, wherever they live, and we will never treat you differently for using them. To make a request, email privacy@helmsgate.ai. We may need to verify your identity first.

We will deny a request to delete harm data or bad actor identifiers when we have reason to believe it comes from a bad actor, or when we need the information to detect, prevent, or investigate fraud, exploitation, or other illegal activity, as the law allows. If we deny a request, we will tell you.

Children

Our work protects children, but our products do not collect information from children. The avatars are synthetic, and our products collect nothing about the children at a client location. If you believe we have received a child's personal information, email privacy@helmsgate.ai and we will delete it.

Changes to this Statement

We will post any change at helmsgate.ai/privacy and update the date at the top. For significant changes, we will notify clients directly at least 30 days before the change takes effect.

Contact us

Helm's Gate AI, LLC, dba Proxyware Attn: Privacy 6615 Georgetown Pike, Mclean, VA, 22101, USA or by email at privacy@helmsgate.ai

Helms Gate AI Privacy Statement