Privacy Policy

At Helyx AI, we are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our API, and access our unified AI model infrastructure (collectively, the "Services").

1. Information We Collect

We collect information that you voluntarily provide to us and data that is collected automatically when you use our Services:

• Account Information: When you register, we collect your name, email address, and OAuth provider details (e.g., Google or GitHub IDs).
• API Usage Data: We log API requests, token consumption, timestamps, model selections, and IP addresses to enforce rate limits, prevent abuse, and manage billing.
• API Payload Data: The text, images, or media you send to our API (prompts) and the resulting outputs are processed temporarily to fulfill your request.
• Payment Information: If you purchase credits, your payment details are processed directly by our secure third-party payment processors. We do not store raw credit card numbers on our servers.

2. How We Use Your Data

We use the collected information for the following purposes:

• To provide, maintain, and optimize the Helyx AI API and platform infrastructure.
• To process transactions, manage your credit balance, and prevent fraudulent activity.
• To communicate with you regarding account updates, technical notices, and security alerts.
• To monitor usage trends and analyze system performance to improve our Services.

3. AI Model Training (Zero-Training Policy)

We understand that as a developer, your data and your users' data are sensitive. Our stance on AI training is strict and transparent:

• No Default Training: We do not use your API inputs (prompts) or outputs to train, fine-tune, or improve our foundational AI models.
• Upstream Providers: Because we act as a unified API for 50+ models (including third-party models), we route requests to upstream providers. We enforce strict enterprise-grade data processing agreements (DPAs) with these partners to ensure your data is not retained or used for their model training whenever supported by the provider.
• Abuse Monitoring: Payloads may be temporarily retained securely in automated systems strictly for trust and safety purposes (e.g., detecting CSAM or malicious abuse) before being permanently deleted.

4. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information and API keys from unauthorized access, disclosure, alteration, or destruction. However, no internet-based service can be 100% secure. You are responsible for keeping your account credentials and API keys confidential.

5. Third-Party Sharing

We do not sell your personal data. We may share your information only in the following situations:

• Service Providers: With trusted vendors who perform services on our behalf (e.g., payment processing, cloud hosting, email delivery).
• Legal Compliance: If required by law, subpoena, or other legal processes, or to protect the rights, property, and safety of Helyx AI, our users, or the public.

6. Your Data Rights

Depending on your location (e.g., under GDPR or CCPA), you may have the right to access, correct, delete, or export the personal information we hold about you. You can manage your account information directly from your dashboard or contact our support team to exercise these rights.

7. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by updating the "Effective Date" at the top of this page or by sending a direct notification to your registered email address.