Legal

Privacy Policy

Last updated: March 1, 2026

Anek ("we", "us", "our") operates the Helix platform, an AI-native enterprise work and decision management service. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. By using Helix, you agree to the practices described here.

1. Information We Collect

Account and identity data

When you register, we collect your name, email address, and a hashed password. We do not store passwords in plain text.

Company and organisational data

We store the company name, departments, teams, projects, and roles you configure inside the platform. Each user belongs to exactly one company; all data is isolated at the company level.

Work data

Tasks, subtasks, comments, status updates, assignments, due dates, and any other content you create or import into the platform.

WhatsApp data

If you choose to connect your WhatsApp number, we store your mobile number alongside your account and maintain session data to enable the conversational bot. Opt-in is explicit and voluntary. You can disconnect at any time by sending STOP to the bot or removing your number from your profile.

Usage and log data

We collect server-side logs including request method, path, timestamp, IP address, and browser user agent. These are used for security monitoring and debugging. We do not use third-party analytics trackers on the platform.

2. How We Use Your Information

  • Provide, operate, and improve the Helix platform
  • Authenticate users and enforce company-level isolation
  • Deliver WhatsApp notifications and task updates when you have opted in
  • Send transactional emails such as account invitations and password resets
  • Maintain security, detect fraud, and investigate misuse
  • Comply with legal obligations

We do not sell your data, use it for advertising, or share it with third parties for their own marketing purposes.

3. Data Isolation and Multi-Company Architecture

Every query executed by Helix is scoped to your company. Users from one company cannot access data belonging to another company. Company membership is assigned at registration and is immutable. Access within a company is further governed by role-based access control (RBAC) configured by your company administrators.

4. Third-Party Services

Cloud infrastructure

The Helix platform is hosted on enterprise-grade cloud infrastructure. Your data is stored and processed within secure data centres. Our infrastructure providers are bound by data processing agreements and may not use your data for any purpose other than providing the underlying services.

WhatsApp messaging

WhatsApp messages are delivered via a third-party messaging provider. If you opt in to WhatsApp integration, your mobile number and message content are transmitted to that provider solely to deliver messages on our behalf. The provider is contractually prohibited from using this data for their own purposes.

5. Data Retention

We retain your data for as long as your account is active and for a reasonable period thereafter to allow for account recovery, comply with legal obligations, and resolve disputes. The specific retention period may vary depending on the type of data and applicable legal requirements. You may request deletion of your data at any time by contacting us, and we will action such requests in accordance with applicable law.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Withdraw consent for WhatsApp communications at any time
  • Request a portable export of your data

To exercise any of these rights, contact us at the address below.

7. Security

We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Despite these measures, no system is completely secure. We will notify affected users and relevant authorities in the event of a confirmed data breach as required by applicable law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or requests, contact us at privacy@anek.ai.