Who we are
RBHelix provides a subscription service for business data analysis. You create an account, upload datasets, choose analyses and receive results and PDF reports in your private dashboard.
RBHelix is responsible for the personal data described in this policy. For any privacy question or request, contact us at contact@rbhelix.com.
Information we collect
We collect only the information needed to run the service:
- Account data: email address, name, company, website, language preference and your password in hashed form (we never store the password itself).
- Subscription and billing data received from Stripe: customer ID, subscription status, plan, invoice amounts and status, and invoice links. We never receive or store your full card number.
- Datasets you upload and their summary profile (column names, row counts and date coverage, calculated in your browser before upload).
- Analysis requests, the notes you add to them, and the results and reports prepared for you.
- Emails we send you about your account and requests.
- Technical and security logs, such as audit events and rate-limit counters. IP addresses are used briefly to limit repeated login attempts and similar abuse.
- Contact form messages: name, email, company, website and your message, delivered by email to contact@rbhelix.com.
- Private client links: some existing consulting clients receive a private link to a read-only dashboard or a time-limited upload page. These links are secret, should not be shared outside the client's organisation and can be revoked by RBHelix at any time.
How we use your information
We use your information to:
- Provide the service: create and secure your account, store your datasets, carry out the analyses you select and publish results to your dashboard.
- Manage subscriptions, free trials, invoices and payments.
- Protect the service and our customers, for example by detecting abuse and recording administrative actions.
- Send transactional emails: email verification, password reset, trial, subscription and payment notices, request status updates and notices that your results are ready.
- Send product updates, tips and occasional offers only if you opted in at signup (a separate, optional checkbox that is never pre-selected). We record when you opted in, and you can withdraw this consent at any time from the unsubscribe link in those emails or by contacting us; transactional emails are not affected.
- Reply to messages you send us and meet our legal obligations.
Legal bases
We process personal data where it is necessary to set up and perform our contract with you (your account, subscription and analyses), where we must comply with a legal obligation (for example keeping billing records), and where we have a legitimate interest in operating and securing the service. Where the law requires your consent, we ask for it and you can withdraw it at any time.
These bases are applied in line with applicable data protection law, including Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).
Sharing, service providers and international transfers
We do not sell your personal data and we do not use it for advertising. Your datasets are used only to deliver the analyses you request. They are not used to train AI models or for any unrelated purpose, and they are not shared with anyone except the service providers below, to the extent needed to run the service.
These providers process data on our behalf and under our instructions. They may process data in countries outside Türkiye or the European Economic Area; when they do, we rely on the safeguards required by applicable data protection law for such transfers.
- Cloudflare: hosting of the website and application servers, the application database (Cloudflare D1) and file storage for uploaded datasets and reports (Cloudflare R2, in a private bucket with no public links).
- Stripe: payment processing, subscription management, invoices and the Customer Portal. Stripe handles your card details directly.
- Resend: delivery of transactional emails and contact form messages.
How long we keep data
- Account data: for as long as your account exists.
- Datasets: until you delete them on the Uploads page or your account is deleted.
- Results and reports: for the life of your account.
- Billing records: for the period required by applicable tax and commercial law.
- Security logs: for a limited period, only as long as needed for security purposes.
Deleting your account
You can request deletion of your account in Account settings by entering your password and typing DELETE to confirm. Your subscription is then set to cancel at the end of the current billing period or trial, so no further charge is made.
RBHelix completes the deletion of your datasets, reports, requests and account within 30 days. Invoices and payment records are kept, without a link to your account, where the law requires it.
Your rights
Under applicable data protection law, including KVKK and, where applicable, the GDPR, you may have the rights listed below. To exercise them, email contact@rbhelix.com from the address linked to your account. We may ask you to confirm your identity before we act on a request.
- Learn whether we process your personal data and access a copy of it.
- Have inaccurate data corrected.
- Have your data deleted.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a data protection supervisory authority.
Security
We protect your data with measures such as encrypted connections, hashed passwords, per-customer access checks and restricted administrator access. Our Security page describes these measures and their current limits in more detail.
Changes to this policy
We may update this policy when the service or the law changes. The date at the top of this page shows the latest version. If a change materially affects how we use your data, we will notify account holders by email before it takes effect.