This Privacy Policy explains how OKLEO LLC (“Helveris”, “we”, “us”, or “our”) collects, uses, stores, and shares personal data in connection with the Helveris website, platform, and related services.

Helveris provides an AI-powered sales and support assistant for websites. This Privacy Policy applies when you visit our website, contact us, start a trial, subscribe to the Service, request information, or otherwise interact with us.

1. Who We Are

Controller: FOP Kushnir Denis Olehovych
Address: 28A Vasylia Tiutiunnyka Street, Kyiv, 03150, Ukraine
Email: support@helveris.com

For questions about this Privacy Policy or our privacy practices, you may contact us using the details above.

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

  • identity data, such as your name;
  • contact data, such as your email address, phone number, and company details;
  • account and billing data, such as subscription information, plan details, and payment-related records;
  • website interaction data, such as pages viewed, referral sources, approximate location, device, browser, and usage information;
  • communications data, such as messages you send to us through forms, email, or support channels;
  • service data, such as deployment configuration, CRM routing settings, workflow setup information, and support-related information connected to your account;
  • lead and website request data submitted through the Service where you use Helveris on your own website.

3. How We Collect Personal Data

We may collect personal data:

  • directly from you when you contact us, request a demo, start a trial, create an account, or subscribe to the Service;
  • automatically when you use our website or platform, including through logs, cookies, or similar technologies;
  • from your organisation if another authorised user invites you to use the Service;
  • from integrated tools or platforms where you choose to connect Helveris with CRM, email, analytics, or related business systems.

4. Why We Use Personal Data

We use personal data to:

  • provide and operate the Service;
  • support trial access, subscriptions, billing, and account administration;
  • help customers deploy Helveris on websites for visitor guidance, lead capture, CRM handoff, and support-related workflows;
  • respond to enquiries, provide customer support, and communicate with users;
  • improve, secure, troubleshoot, and monitor the website and Service;
  • prevent fraud, abuse, misuse, and security incidents;
  • comply with legal obligations and enforce our agreements.
Controlled Environment

Helveris is designed for business website workflows and operates within a controlled service environment rather than as a public AI system. Customers remain responsible for the data they choose to process through the Service on their own websites.

5. Legal Bases for Processing

Where EU GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following legal bases:

  • contract: where processing is necessary to provide the Service, manage trials, subscriptions, billing, and support;
  • legitimate interests: where processing is necessary for operating, securing, improving, and administering our website and Service, provided those interests are not overridden by your rights;
  • consent: where required, for example for certain marketing communications or non-essential cookies;
  • legal obligation: where processing is necessary to comply with applicable law, tax, accounting, or regulatory requirements.

6. How We Share Personal Data

We may share personal data with:

  • hosting, infrastructure, and cloud providers;
  • payment processors and billing providers;
  • email, support, analytics, and communication service providers;
  • CRM, workflow, or integration providers where required to deliver customer-selected functionality;
  • professional advisers, auditors, insurers, or legal counsel where necessary;
  • regulators, law enforcement, courts, or competent authorities where required by law or to protect rights and security;
  • successors in connection with a merger, acquisition, restructuring, or sale of all or part of our business.

7. International Transfers

Personal data may be processed in countries outside the country where it was originally collected. Where required by applicable law, we use appropriate safeguards for such transfers, which may include contractual safeguards, adequacy decisions, or other lawful transfer mechanisms.

More detail on international transfers may be provided in our DPA, EU / UK Addendum, or SCC / UK Addendum mechanism where those documents apply.

8. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain accounts, support subscriptions, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of data, the nature of the relationship, legal requirements, and operational needs. Where personal data is no longer required, we will delete it, anonymise it, or securely isolate it unless we are legally required to retain it.

9. Security

We apply technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Cookies and Similar Technologies

We may use cookies, analytics tools, and similar technologies to operate the website, understand usage, improve performance, and support security. Where required by law, we will request consent before using non-essential cookies or similar technologies.

You can manage cookies through your browser settings and, where available, through our cookie preferences tools.

11. Your Rights

Depending on your location and applicable law, you may have rights to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing, including processing based on legitimate interests or direct marketing;
  • request portability of personal data you provided to us, where applicable;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a competent data protection authority.

To exercise your rights, contact us at support@helveris.com. We may ask you to verify your identity before responding to your request.

12. Customer Data and Controller / Processor Roles

When customers use Helveris on their own websites, Helveris may process personal data on behalf of those customers. In those situations, the customer is generally the controller of that data and Helveris acts as a processor, as described in our DPA and related documentation.

If you are a website visitor interacting with a Helveris-powered experience on a customer’s website, that customer’s own privacy notice may also apply to the way your data is collected and used.

13. Children’s Privacy

The Service is intended for business use and is not directed to children. We do not knowingly collect personal data from children where prohibited by law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. The latest version will always be published on this page, and the revised version will become effective when posted unless otherwise stated.

15. Contact

If you have questions about this Privacy Policy, our privacy practices, or data handling in connection with Helveris, please contact us at:

support@helveris.com