Privacy Notice

Last updated: May 2026

Helm Digital LLC ("we", "us") provides Harbor CRM. This notice explains what personal data we collect and how we use it.

Our two roles

• Controller — for the personal data of our own account holders (the people who sign up for Harbor CRM).
• Processor — for the customer-contact data that account holders upload into the CRM and send email to. The account holder is the controller of that data; we process it on their behalf and only as needed to provide the Service.

Personal data we collect

• Account data: name, email, login credentials.
• Customer records you input: contact details for the customers you manage in the CRM.
• Support messages: content of any communication with our support team.
• Usage and device data: IP address, browser type, device identifiers, and usage telemetry.
• Email campaign data: when you send a campaign, we store the recipient list, message content, send status, and delivery events (bounces, complaints, unsubscribes) so we can deliver, throttle, and report on sends, and maintain a suppression list across the platform.
• Cookies: essential cookies to keep you logged in.

How we use it and legal basis

• Provide the Service — performance of contract.
• Account creation, authentication, security and fraud prevention — legitimate interests and legal obligation.
• Customer support — performance of contract.
• Product improvement — legitimate interests.
• Marketing communications — consent (you can unsubscribe at any time).

Who we share data with

• Subprocessors: hosting (Lovable Cloud / Supabase), email delivery, analytics.
• Payment processor: Stripe, Inc. handles payments, subscription management, tax compliance, and invoicing.
• Professional advisers: legal and accounting, where needed.
• Authorities: where required by law.

International transfers

Personal data may be processed outside your country. Where required, we use Standard Contractual Clauses or rely on adequacy decisions to protect your data.

Retention

We keep personal data for as long as your account is active. After account closure, we delete or anonymise data within a reasonable period unless we are required to keep it for legal or accounting reasons.

Your rights

Depending on where you live, you may have rights to access, rectify, delete, restrict processing, port, or object to the processing of your personal data, and to withdraw consent. You can also lodge a complaint with your local supervisory authority. We respond to verified requests within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and regular reviews.

Cookies

We use essential cookies required to operate the Service (e.g. authentication). We do not currently use third-party advertising cookies.

Recipients of campaign emails

If you received an email sent through Harbor CRM, the sender (our customer) chose to email you and is the controller of your data. To unsubscribe, use the one-click link in any message — we add an unsubscribe footer to every campaign. To request access, correction, or deletion of your data, contact the sender directly. You may also email us at dillonhelms.hd@gmail.com and we will route your request to the sender.

Not legal advice

This notice is a starting template and is not legal advice. You should have it reviewed by a qualified attorney in your jurisdiction.

Contact

To exercise your rights or ask questions, email dillonhelms.hd@gmail.com.