Privacy Policy

cAND/or operates Helix PSA, a professional services automation platform for managed service providers. Our flagship product is Helix PSA, accessible at helixpsa.com. References to "we," "us," or "our" mean cAND/or.

For privacy inquiries, contact us at customerservice@candorsoftware.us.

// Account & Identity

When you register for Helix PSA, we collect your name, email address, and a password (stored as a one-way hash). We also collect your company name and billing contact information when you subscribe to a paid plan.

// Operational Data (Tenant Data)

Helix PSA is a tool for managing your business. Data you enter — customer records, tickets, invoices, proposals, contracts, notes, and any other content — is your data. We call this "Tenant Data." We store it on your behalf, process it to render the application, and do not use it for any purpose other than delivering the service to you.

// Usage & Technical Data

We collect standard server logs (IP address, browser type, pages visited, timestamps) and application telemetry (errors, feature usage patterns) to maintain and improve the platform. This data is aggregated and is not linked to individual customer records.

// AI Features

Helix PSA includes AI-powered features (FELIX™, Q, The Coach™, and others). When you use these features, relevant portions of your Tenant Data may be transmitted to AI providers (currently Anthropic and OpenAI) to generate responses. We use the AI providers' data processing agreements and do not permit them to use your data for model training. You may disable AI features in Settings if you prefer not to transmit data to these providers.

We use the information we collect to:

• Provision, operate, and improve Helix PSA
• Authenticate your account and enforce access controls
• Send transactional communications (password resets, invoice confirmations, service alerts)
• Process billing and subscription management
• Diagnose errors and improve platform stability
• Comply with legal obligations

We do not use your data for advertising. We do not sell or rent your data to third parties. We do not build advertising profiles from your usage.

Helix PSA is built on and integrated with the following third-party services. Each operates under its own privacy policy and data processing agreement with us.

We retain account data for as long as your subscription is active. If you close your account, we will delete your Tenant Data within 90 days of account closure, except where we are required by law to retain it longer (e.g., financial records for tax purposes).

You may request an export of your Tenant Data at any time by contacting us. We will provide a machine-readable export within 10 business days.

We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest (via Supabase), row-level security on all database tables, and multi-factor authentication support for user accounts.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at customerservice@candorsoftware.us.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Restrict or object to certain processing
• Receive a portable copy of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, email customerservice@candorsoftware.us with the subject line "Privacy Request." We will respond within 30 days.