← Back to Helios

Privacy Policy

Last updated: April 27, 2026

1. Who we are

Helios Engine (“Helios”, “we”, “us”) is a SaaS product intelligence platform for dropshippers, operated as a sole proprietorship based in Greece, European Union.

For privacy questions, contact: privacy@helios-engine.com

2. What information we collect

During waitlist signup:

  • Email address (required)
  • Sign-up timestamp (automatic)
  • Source/referrer (e.g. which page or campaign brought you to us)

Automatic technical data:

  • IP address (for rate limiting and abuse prevention)
  • Browser user agent (for compatibility)
  • Approximate location (country-level only, derived from IP)

We do NOT collect:

  • Names, addresses, phone numbers
  • Payment information (we don’t process payments yet)
  • Tracking cookies for advertising
  • Behavioral data beyond what’s needed to operate

3. How we use your information

Your email is used solely to:

  • Send a confirmation email when you join the waitlist
  • Notify you when Helios launches
  • Send occasional progress updates (low frequency, opt-out anytime)

We will NEVER:

  • Sell your email to third parties
  • Share your email with marketing partners
  • Use your email for unrelated promotions

4. Legal basis (GDPR)

We process your email under:

  • Consent (Article 6(1)(a) GDPR) — you actively join the waitlist
  • Legitimate interest (Article 6(1)(f) GDPR) — operating the service

5. Data storage and security

  • Email data is stored in Supabase (EU region: Frankfurt, Germany)
  • Encrypted in transit (HTTPS/TLS) and at rest
  • Access restricted to authorized personnel (currently: founder only)
  • We retain waitlist emails until product launch + 6 months after, then delete

6. Third-party services

We use the following processors:

  • Supabase (database hosting) — EU region — GDPR DPA
  • Resend (transactional email) — US-based, EU SCCs in place — GDPR info
  • Vercel (web hosting) — Global, EU SCCs — Privacy

7. Your rights (GDPR)

You have the right to:

  • Access — request a copy of your data
  • Rectification — correct inaccurate data
  • Erasure — request deletion (“right to be forgotten”)
  • Portability — receive your data in a machine-readable format
  • Object — opt out of any processing
  • Withdraw consent — at any time

To exercise any right, email: privacy@helios-engine.com — we respond within 30 days.

8. Cookies

The waitlist site uses NO tracking or advertising cookies.

We may use minimal session cookies for rate limiting (essential cookies, no consent required under GDPR Article 5(3) ePrivacy Directive).

9. Children’s privacy

Helios is not intended for users under 16. We do not knowingly collect data from minors.

10. International transfers

If we transfer data outside the EU (e.g., to Resend in the US), we use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection.

11. Changes to this policy

We may update this Privacy Policy. Material changes will be notified by email to waitlist members at least 14 days in advance.

12. Complaints

You have the right to lodge a complaint with your local data protection authority. For Greece: Hellenic Data Protection Authority.