Privacy Policy

Helmstead is operated by MDN Solutions LLC, a Wyoming limited liability company (“Helmstead,” “we,” “us”). This policy explains what we collect through helmstead.app and the Helmstead application, why we collect it, and who we share it with. Questions: privacy@helmstead.app.

• Account & authentication. The name, email, and credentials you create, handled through our authentication provider (Supabase Auth).
• Information you enter. Entity-formation details, fundability inputs, and other business information you choose to provide to use the product.
• Payment information. When you purchase a paid plan, payments are processed by Stripe. We do not store full card numbers; Stripe handles card data under its own terms.
• Concierge & lead data. If you chat with our concierge or request a demo, we capture the contact details you provide (such as your name and email) into our CRM (HighLevel / LeadConnector) so we can follow up.
• Technical & diagnostic data. Standard server logs (IP address and request metadata) used for security and rate-limiting, and error diagnostics captured by Sentry to keep the service reliable.

We do not run Google Analytics, advertising pixels, or third-party behavioral-tracking analytics, and we do not sell your personal information. The cookies and browser storage we use are there to keep you signed in (session and authentication tokens from Supabase Auth), to operate the service, and — for some tools, like Credit-Flow — to save the inputs you enter on your own device (see “Data stored on your device” below); none of it advertises to you or tracks you across other sites.

Some tools, such as Credit-Flow, save the figures you enter — for example card balances, limits, and APRs — in your browser’s local storage on your device, so your inputs persist between visits. This data stays on your device, is never transmitted to our servers, and you can clear it at any time from within the tool.

We use the information above to provide and secure the service; authenticate you; process payments; respond to inquiries and demo requests; send transactional and service email (via Resend); run background processing (via Inngest); and meet our legal, tax, and accounting obligations.

We rely on a small set of vendors to operate Helmstead. Each processes only the data needed for its function:

• Supabase — database and authentication
• Stripe — payment processing
• Resend — transactional email
• Sentry — error monitoring and diagnostics
• Upstash — Redis-based rate limiting
• Vercel — application hosting and infrastructure
• HighLevel (LeadConnector) — CRM and lead management
• Inngest — background job processing

We update this list as our infrastructure changes.

We share data only with the subprocessors above, and when required by law or to protect our rights, our users, or the public. We do not sell personal data.

We retain your information while your account is active and as needed to provide the service and meet legal, tax, and accounting obligations. You may request deletion (see “Your choices and rights”); some records may be retained where the law requires.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. To exercise them, email privacy@helmstead.app and we will respond within a reasonable time.

We protect data in transit with encryption, scope access to what each part of the service needs, and monitor our infrastructure. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Helmstead is a business tool intended for users 18 and older. It is not directed to children, and we do not knowingly collect data from anyone under 18.

Helmstead is operated in the United States, and your information is processed there. If you access the service from outside the U.S., you consent to that processing.

If we make material changes, we will update the effective date above and, where appropriate, notify you.

Questions about this policy or your data: privacy@helmstead.app. Helmstead is operated by MDN Solutions LLC (Wyoming); our registered business details are a matter of public record with the Wyoming Secretary of State. See also our Terms of Service.