Last updated: October 1, 2026
This policy explains what personal data Helpeen processes, why, and what rights you have. This is a translation: if it differs from the Spanish version, the Spanish version prevails.
1. Controller
- Controller: Birrastorming Ideas, S.L.
- Tax id (NIF): B98498496
- Address: Calle Carabelas, 6, 46137 Puebla de Farnals (Valencia), España
- Privacy contact: hello@helpeen.com
2. Who this applies to
- Visitors to helpeen.com.
- Customers and their teams: people who create a Helpeen account or are invited to one.
We process the data of End users (people who write to a company that uses Helpeen) on behalf of that company, which is the controller. If you are an End user and want to exercise your rights, contact the company you talked to; if you write to us, we will forward your request to it.
3. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account email, name and (hashed) password; the companies you belong to | Giving you access and providing the Service | Performance of a contract (Art. 6.1.b GDPR) |
| Billing details (company name, tax id, address, plan) | Charging paid plans and issuing invoices | Performance of a contract and legal obligation (Art. 6.1.c GDPR) |
| IP address, access logs and API usage logs | Security, abuse prevention and troubleshooting | Legitimate interest (Art. 6.1.f GDPR) |
| Emails you send us | Answering your questions | Legitimate interest or performance of a contract |
| Browsing data on the public website (pages viewed, device, approximate country) through Google Analytics | Measuring visits and improving the website | Consent (Art. 6.1.a GDPR), which you can withdraw from "Cookie settings" |
| Service notices (changes, billing, security) | Telling you about things that affect your account | Performance of a contract |
We do not use your data for profiling or make automated decisions with legal effects on you. We do not sell personal data.
4. How long we keep it
- Account data, while the account is active. After closure, we delete it within 30 days.
- Billing data, for the periods required by tax and commercial law (generally 4 to 6 years).
- Technical logs, for up to 12 months, unless needed to investigate an incident.
5. Who we share it with
We do not disclose data to third parties unless required by law. To provide the Service we use these providers, which process data on our behalf with the safeguards of Article 28 GDPR:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | EU (Ireland) |
| Vercel | Hosting for the website and the API | United States and EU |
| Resend | Transactional email | United States |
| Stripe | Charging paid plans | EU and United States |
| Google Analytics | Visit statistics for the public website, only if you accept them | EU and United States |
When a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework) or on the standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hello@helpeen.com. We will reply within one month.
If you think we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority where you live.
7. Security
We encrypt communications, store passwords and secret API keys as hashes, separate each company's data with access controls in the database, and keep internal access to the minimum.
8. Cookies
For the cookies we use, see the Cookie policy.
9. Changes
If we change this policy significantly, we will notify you by email or in the panel before it applies.