Privacy Policy

Helvety by Rubin ("we," "us," or "the Company") explains how we handle information when you use helvety.com and related Helvety products ("the Services"). This notice is based primarily on the Swiss Federal Act on Data Protection (nDSG / FADP). The Services are intended for customers in Switzerland. We do not offer the Services in the EU/EEA. Where mandatory law elsewhere applies in a specific case, we follow those obligations.

helvety.com public browser tools and the Store do not require a Helvety account.

1. Data Controller

Helvety by Rubin (Caspar Camille Rubin), Holeestrasse 116, 4054 Basel, Switzerland. UID CHE-356.266.592. Email: contact@helvety.com.

2. Services and Processing

This notice covers helvety.com marketing and legal pages, Helvety Store, the public browser tools below, and separately distributed desktop or Microsoft 365 products that link here.

• Helvety PDF (helvety.com/pdf): Merge, reorder, rotate, extract, and related supported actions keep file contents inside your browser under the current architecture. Nothing is uploaded to our servers for conversion.
• Helvety Image Editor (helvety.com/image-editor): Annotation and export workflows run locally in your browser under the current architecture. Image files are not uploaded to our servers for processing.
• Helvety OCR (helvety.com/ocr): Text extraction runs locally in your browser under the current architecture with on-device optical character recognition. Files are not uploaded to our servers for processing.
• Helvety Store (helvety.com/store): Catalog browsing and public package downloads work without registration. We may process IP address and related technical metadata for security, rate limiting, and abuse prevention.
• Power Platform Configurator: Choose classic or new designer for Power Automate flow/run URLs. Control survey flags. Reveal or enable Power Apps form elements. Power Automate: choose Classic Designer, New Designer, or Paused; Hide sets v3survey=false on rewrites, while Show only normalizes an existing parameter. Power Apps: reveal hidden tabs, sections, and controls or enable disabled controls on supported model-driven record forms. The extension reads supported flow/run URLs and accesses model-driven form UI objects locally only to apply the selected behavior. Preferences stay in browser storage. The extension does not send tab URLs, form content, or preferences to Helvety servers. Your browser and sync provider may process stored preferences under their own terms.
• Helvety SPO Explorer: SharePoint Framework package distributed via the Store. Runs in your Microsoft 365 tenant under Microsoft's hosting and your organization's policies.
• Helvety Screen Tools: Windows desktop app distributed outside this monorepo. Screenshot and annotation content stays on your device in normal operation.
• Helvety Power Platform Tools: Windows desktop app distributed outside this monorepo. It signs in with your Microsoft account and talks to Dataverse in your user context. Tokens stay on your device in normal operation.

AI model training and retention statement: We do not use files you open in Helvety PDF, Helvety Image Editor, or Helvety OCR to train AI models. Under the current architecture those tools keep content on your device and only use minimal server-side endpoints for platform and security functions (for example CSP reporting).

3. What We Collect

3.1 helvety.com and public tools

Because there is no helvety.com account, we do not maintain user profiles or passwords for public tools on our servers.

• Technical metadata: IP address and request timestamps from standard web server and hosting logs, plus security signals needed for rate limiting and abuse prevention (including Store downloads). We do not use third-party analytics on our web Services and do not build navigation or usage profiles of visitors.
• Support messages: Whatever you choose to send when you email us.
• On-device preferences: Theme and tool UI settings stored in your browser (see Cookies and Local Storage).

4. How We Use Information

Under Swiss nDSG we process personal data for the purposes below where processing is connected with a contract with you, needed to take pre-contractual steps you request, justified by overriding private interests that are not outweighed by yours (for example security, abuse prevention, and reliable hosting), based on your consent where we ask for it, or required to meet Swiss legal duties.

• Operate and secure helvety.com, Helvety Store, Helvety PDF, Helvety Image Editor, Helvety OCR, and related public pages (local-only browser file tools under the current architecture).
• Deliver public package downloads, apply rate limits, and investigate abuse.
• Respond to support and legal requests you or authorities send, limited to data Helvety actually holds.
• Meet Swiss legal, tax, and accounting duties where records are required.

5. Processors and Subprocessors

We use infrastructure providers to host and protect the Services. Typical categories include:

Hosting, CDN, and Store package hosting may involve processing in other countries or regions (including the United States and EU member states) depending on vendor configuration and where you connect from. Where Swiss law requires safeguards for transfers abroad, Helvety relies on appropriate mechanisms offered by those vendors (for example standard contractual clauses, adequacy where recognized, and contractual security terms).

Microsoft 365, SharePoint / Power Platform runtimes, browser vendors, and Windows operate under their own terms when you use SPO Explorer, Power Platform Configurator, Screen Tools, or Helvety Power Platform Tools. We do not sell personal data. This subprocessors list may change; material changes will be reflected on this page.

6. Retention

Hosting and security logs are kept only as long as needed for operations, abuse handling, and legal holds (typically up to about 6 months for routine security metadata under current policy). Contract or accounting evidence may be kept longer where Swiss law requires it (for example up to 10 years). Browser-local files and preferences remain on your device until you clear them.

7. Your Rights

Under the Swiss nDSG you may request access, correction, deletion, or restriction of personal data we hold, and object to certain processing, subject to legal exceptions. Contact contact@helvety.com. Helvety may need to verify your identity.

For helvety.com public tools there is no self-service export or deletion dashboard; we generally hold only technical metadata and any messages you sent us. You may lodge a complaint with the Swiss FDPIC or another competent supervisory authority where applicable. The Service is not directed to children under 16.

8. Cookies and Local Storage

We do not operate third-party analytics, advertising trackers, or cross-site profiling on helvety.com. Preference storage is kept in your browser so theme and tool UI settings survive reloads.

9. Changes

We may update this Privacy Policy when the Services change. The "Last reviewed" date at the top shows the latest review. Material changes will be reflected on this page.

10. Contact

Privacy questions: contact@helvety.com. Related: Terms of Service, Impressum.