Privacy Policy
Last updated: June 2026
Who we are
RiskHelm, Inc. operates the RiskHelm platform — a risk management information system for U.S. businesses. We are the data processor on behalf of the insurance agencies that partner with us, who are the data controllers for their clients’ information.
Contact: privacy@riskhelm.ai
What we collect
Account data: Your name and email address provided during login via Auth0.
Company and insurance data: Business information, policy details, claims records, fleet and property schedules, and vendor certificates that you or your broker enter into the platform.
Chat inputs: Messages you type to Helm, our AI assistant. These are sent to Anthropic to generate responses.
Usage data: Which features you access and when, for platform improvement and security monitoring.
Contact and demo requests: If you submit the demo request form on our website, we collect the name, email, company, and role you provide so we can respond.
How we use it
We use your data to provide the RiskHelm platform — loading your insurance data, answering your questions through Helm, and enabling broker workflows. We do not sell your data to third parties, use it for advertising, or share it outside the platform except as described below.
AI processing (Helm)
When you send a message to Helm, that message is transmitted to Anthropic’s API to generate a response. Anthropic does not train its models on API inputs by default. For more information, see Anthropic’s Privacy Policy.
Subprocessors
We use the following third-party services to operate the platform:
- Auth0 — authentication and identity management
- Supabase — database and data storage
- Anthropic — AI processing for Helm chat
- Vercel — application hosting and delivery
- Sentry — error monitoring
- Resend — transactional email delivery
We may engage additional service providers as the platform grows. We will provide 30 days’ notice of any material new subprocessors.
Data retention
Your data is retained while your account is active and for two years after account cancellation. Audit logs are retained for two years. You may request deletion at any time.
Cookies
We use the following cookies:
- rh_cookie_consent — stores your cookie preferences for 12 months.
- Auth0 session cookies — required to keep you logged in.
Your CCPA rights
If you are a California resident, you have the right to know what personal information we hold, request deletion, and opt out of sale (we do not sell personal information). We respond to verified requests within 45 days.