1. Who We Are
Intelligent Group (operating as Intelligent iT) provides the Helix governed AI workforce platform. Our principal place of business is in New York, NY. Contact: mruiz@intelligentit.io.
2. Information We Collect
We collect the following categories of information when you use Helix:
- Account data — name, email address, and organization details provided during registration via Clerk authentication.
- Security telemetry — alert data, device posture, and audit logs ingested from your connected security tools (Defender, SentinelOne, etc.) on your behalf as a data processor.
- Usage data — page views, feature usage, and API call metadata for product improvement and billing reconciliation.
- Connector credentials — stored in Google Secret Manager, never in the application database, and never returned to the browser.
3. How We Use Information
We use collected information to:
- Deliver, operate, and improve the Helix platform.
- Process security telemetry on your behalf under the DPA.
- Send transactional communications (alerts, escalations, invoices).
- Comply with legal obligations and enforce our Terms of Service.
We do not sell personal data to third parties. We do not use your security telemetry to train AI models outside of your tenant context.
4. Data Residency and Storage
Helix stores tenant data in Google Cloud (us-central1 region) via Supabase Postgres. Connector credentials are stored in Google Secret Manager (intelligent-group-ait project). Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
5. Data Retention
Security telemetry is retained per your plan's audit log retention limit (90 days on Starter; 1 year on Pro; unlimited on Enterprise). Account data is retained for the life of your subscription plus 30 days post-cancellation for billing reconciliation.
6. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data. To exercise these rights, contact mruiz@intelligentit.io. We will respond within 30 days.
7. Cookies
Helix uses strictly necessary session cookies managed by Clerk (authentication) and does not use third-party tracking or advertising cookies.
8. Changes to This Policy
We will notify you of material changes to this Privacy Policy via email (to the address on your account) at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
9. Contact
Privacy questions: Manuel Ruiz, CISO, Intelligent Group — mruiz@intelligentit.io.