Privacy & personal data

For anyone short on time: you can access, correct, erase, restrict the use of your data, receive it in a portable format, and object to a use — including fully deleting your client-space account. One email to contact@helyosglobal.com is enough, with a reply within a month. None of your information is ever resold, no automated decision produces an effect on you, and you can contact the CNIL or the data protection authority in your own country of residence at any time. The full detail — who processes your data, what is collected service by service, for how long, and your rights point by point — follows below.

HelyOs Global, represented by Hama Amar, is the data controller. Address: 9 avenue de l'Abbé Roger Derry, 94400 Vitry-sur-Seine, France. For any question: contact@helyosglobal.com.

Contact form: name, email, subject and message. Downloading a guide or checklist: your email. Creating a client-space account: email, password, name, and optionally company and phone if you provide them — or the profile information Google shares if you sign in that way. Using the client space: the content of messages exchanged with our team, plus your project details (title, category, brief, budget, status). Online AI assistant: the messages you type into the chat, sent to our AI provider to generate a reply. We never ask for sensitive data (health, opinions, origin, etc.).

Each use has one precise purpose and one legal basis, and nothing is reused for anything else (Article 5.1.b GDPR). Answering a request sent through the contact form: our legitimate interest in handling a business enquiry. Sending a guide or checklist you asked for: your consent, given at the moment of download. Creating and running your account, projects and conversations in the client space: performance of our contract. Running the online AI assistant: your consent, expressed by typing into the chat. Measuring site audience: your consent, collected through the cookie banner and revocable at any time. Meeting our accounting and tax obligations: a legal obligation. None of this data is used for a new purpose without telling you first.

Your information stays within HelyOs Global and, depending on the service you use, passes through our technical providers: Web3Forms (forms), Supabase (client-space accounts, messaging and projects, hosted in Paris), our AI provider — Anthropic, OpenAI, Google or OpenRouter depending on the configuration in force — (messages sent to the online assistant), Resend (internal email notifications), Vercel Inc. (site hosting), ElevenLabs (call audio, if you ask a voice agent to call you back), the unpkg/Cloudflare CDN (only if you open a voice agent's cockpit), Upstash or Vercel KV (technical anti-abuse counters, with no name or content), Airtable (prospect records, only within the sales-agent demonstration) and Sentry when enabled (technical errors, with no personal data). Google Tag Manager and the Meta pixel are also technically built into the site, but neither is active at this time: they would only load after your explicit consent to the cookie banner. The full list, with what each provider sees and when, is on our /vos-donnees-et-nos-agents page. We never sell or hand over your data to third parties for commercial purposes.

Contact form and downloaded guides: for as long as it takes to handle your request, then deleted or archived within 3 years of our last contact. Client-space account: for the duration of your relationship with HelyOs Global, then deleted on request or after an extended period of inactivity. Messages exchanged in the client space: kept for the duration of your project follow-up.

GDPR gives you the right to access, correct, erase, restrict or port your data, and to object to its use — including fully deleting your client-space account. An email to contact@helyosglobal.com is enough to start the process. You can also contact the CNIL (www.cnil.fr) or the data protection authority in your own country.

None of the information this site asks for is required by law or by contract: you choose to provide it, and the consequences of declining are purely practical. Without an email address we cannot answer a request or send you a guide. Without an account, the client space — messaging and project tracking — stays out of reach. The company and phone fields are optional: leaving them blank changes nothing about the service you get. Where a use rests on your consent, you can withdraw it at any time and as easily as you gave it, by emailing contact@helyosglobal.com or through the cookie banner; the withdrawal applies going forward and does not undo what was done before.

The site's AI assistant answers questions and can point you to a page or a form. It makes no decision producing legal effects concerning you, nor one that significantly affects you within the meaning of Article 22 GDPR: it grants or refuses no service, builds no score and ranks no one. Every quote, every project acceptance and every price is decided by a person. Your exchanges with the assistant are not used by HelyOs Global to train any model.

Some of our providers (including Vercel, Web3Forms, Supabase, Resend or our AI provider) may host or process data outside the European Economic Area. These transfers are covered by recognized safeguards, including the European Commission's standard contractual clauses.

This site only sets cookies that are strictly necessary for it to run: remembering your chosen language, your answer to the consent banner, and your login if you use the client space. No named audience-measurement cookie and no advertising cookie is active at this time; Google Tag Manager and the Meta pixel, though technically built into the site, stay switched off until you give explicit consent. The full detail — every cookie, how long it lasts, and how to change your choice at any time through the "Change my choice" button — is on our dedicated /cookies page.

Technical and organizational measures are in place to prevent unauthorized access, alteration or leaks of your data — encrypted exchanges, password-protected access to the client space, and access restricted to authorized people at HelyOs Global only.

This policy may change if we add or modify a service that processes personal data. The update date at the top of this page shows the version currently in force.

We approach businesses by email, at professional addresses, to offer them agents and websites related to their activity. Data processed: company name, sector, city, contact first name, professional address, and a few qualification notes taken from public and professional sources — we never scrape a social network or a directory whose terms forbid it. The legal basis is legitimate interest (GDPR art. 6.1.f): the offer relates to the professional role of the person approached. Every message carries a one-click unsubscribe link; opting out is immediate, final, and also switches off the demo page prepared for you. Records are kept for thirty days, then purged. You may request access, rectification or erasure of your data at any time at contact@helyosglobal.com.