Draft

Privacy Notice

What personal data Helper365 collects, why, who receives it, how long it is kept and the choices you have.

Last updated
Effective date
(to confirm)

Draft - pending legal review

This page is a working draft. A lawyer has not reviewed it yet, and every item marked "(to confirm)" is still open. It will change before Helper365 opens to the public.

This notice explains what personal data Helper365 collects when you use helper365.co, the preview access page and the Helper365 app (together, the "Service"), why we use it, who receives it, how long we keep it and the choices you have.

In this notice "Helper365", "we", "us" and "our" mean MSQUARE (in Arabic: ام اسكوير), the sole proprietorship that operates the Service. "You" means anyone who uses the Service or asks for access to it.

1.Who we are

The Service is operated by MSQUARE (in Arabic: ام اسكوير), a sole proprietorship (مؤسسة فردية) registered in the Arab Republic of Egypt under commercial registration number 99482, with its registered address at 20 Zaki St., Helwan, Cairo, Egypt. It also has an office at 73 Ibn Moeslh Al Arman, Sidi Beshr Bahri, Montaza 1, Alexandria, Egypt. For the personal data described here we act as the controller, or the equivalent role under the law that applies to you.

For any privacy question or request, email support@helper365.co. A data protection officer or local representative, where a law requires one: (to confirm).

2.What this notice covers

This notice covers the website, the access-request and unlock forms on the preview page, the Helper365 app and the emails we send. The services of the providers we use or link to have their own notices.

Helper365 is currently an invite-only preview. Some features described here may change before a public launch; we will update this notice when they do.

3.The personal data we collect

  • Access requests: your first and last name, work email, company (optional), job title and what you tell us about your work. Each request and unlock attempt is recorded with a keyed hash of your IP address and of your email, to limit abuse.
  • Access codes: the email address a code is issued to. We store only a hash of the code, never the code itself.
  • Account: your name, email address and sign-in details. Sign-in is handled by our provider Clerk; we do not receive or store your password.
  • Profile and preferences: your answers in the guided setup (for example your industry, role and preferred language), your standing instructions, your settings and anything you save under Memory.
  • Your content: the text you enter, the files you upload, your chats and the results the tools produce for you.
  • Usage and billing records: which tools you run and when, the AI engine used, the Sparks each run held and used, and a ledger of every hold, charge and refund. This release takes no payment, and we hold no payment card details.
  • Referrals: if you arrive through a referral link, its referral code, so the person who invited you can be credited.
  • Support: the messages you send us through the in-app help or by email.
  • Technical data: your IP address, browser and device details and server logs, needed to deliver and secure the Service (how long logs are kept: (to confirm)).

Please do not enter sensitive personal data (for example health, religious or financial account data) about yourself or others unless you need to and are allowed to.

4.How we use it

  • To review access requests and send access codes.
  • To create and run your account and provide the tools, chats and results you ask for.
  • To meter Sparks, apply your plan's limits and keep accurate usage and billing records.
  • To tailor results with your setup answers, standing instructions, Memory and attached documents - each only while its switch is on in Settings > Privacy.
  • To answer support requests and send service emails, such as access codes and account notices.
  • To send product news, only if you turn it on in Settings > Privacy. You can turn it off at any time.
  • To keep the Service secure and working: rate limits, abuse prevention, debugging and incident response.
  • To meet our legal obligations.

We do not sell your personal data, and we do not use it for advertising.

6.How AI processing works

When you run a tool or send a chat message, the text and files that run needs are sent to an AI model provider, which returns the result. In this release Helper365 uses free model tiers, reached through the OpenRouter gateway and, as a backup or for some Arabic writing steps, directly through Google (Gemini API) and Groq.

Providers on free tiers may log, keep or review prompts and may use them to improve their models, under their own terms. Which providers do so, and for how long: (to confirm). Until this is confirmed, do not put confidential information or other people's personal data into a run unless you are allowed to share it with a third party.

If you use web search in chat, your search query is sent to a web search service (DuckDuckGo by default) (to confirm). Documents you attach and Memory entries may be turned into embeddings (lists of numbers that let the Service find relevant passages), which may use an embedding provider (to confirm).

Results are produced by AI and can be wrong; see the Terms of Use. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

7.Who receives your data

We share personal data only with the providers that help us run the Service, only for that purpose, and under agreements that require them to protect it.

Service providers
ServiceProviderWhat they receiveWhere
Hosting and databaseHetzner (to confirm)All Service data, stored on our serversGermany (to confirm)
File storage(to confirm)Files you upload and files the tools produce(to confirm)
Sign-inClerkName, email address, sign-in and session dataUnited States (to confirm)
AI modelsOpenRouter and the model providers it routes to; Google (Gemini API); GroqThe text and files a run needs(to confirm)
Images and mediaCloudinary, ImageKit, ClipDropImage prompts, and images you upload or generate(to confirm)
Plagiarism scanCopyleaks (test mode in this release)The text you submit for a plagiarism scan(to confirm)
Web searchDuckDuckGo (to confirm)Search queries from chat(to confirm)
EmailOur email (SMTP) provider (to confirm)Your email address and the message(to confirm)
PaymentsNone in this release; named here before paid plans open (to confirm)--

We may also disclose data when the law requires it, to protect the rights and safety of our users or others, or as part of a merger, sale or reorganisation of the business, in which case we will tell you.

8.International transfers

Our servers are in Germany (to confirm), and several of the providers above process data in other countries, including the United States. Where the law that applies to you limits transfers abroad, we rely on the safeguards that law allows (which ones: (to confirm)).

9.How long we keep it

  • Account, profile and content: while your account is open. When you delete your account we delete your sign-in, chats, memories, workspace and profile; the Spark ledger is kept for accounting under an anonymous owner.
  • Access requests and access codes: 12 months after the last activity on them, then deleted.
  • Records of unlock and request attempts: 90 days.
  • Database backups: 14 days. Server logs: (to confirm).
  • Records a law requires us to keep: for the period that law sets (to confirm).

10.Your rights and choices

Depending on where you live, you may have the right to: access your personal data; correct it; delete it; receive a copy in a portable format; object to or restrict some processing; withdraw your consent at any time (this does not affect processing before the withdrawal); and complain to a data protection authority (in Egypt, the Personal Data Protection Center; elsewhere, the data protection authority where you live).

In the app, Settings > Privacy lets you export your data as one JSON file, delete your account, and turn standing instructions, Memory, attached documents and product news on or off.

For anything else, email support@helper365.co. We may need to confirm your identity first, and we answer within the time the law sets (to confirm).

11.Security

We protect personal data with the measures described in our Security overview. No system is completely secure; if a breach affects your personal data, we will tell you and the authorities where the law requires it.

12.Children

You must be at least 13 years old to use the Service. If you are under 21 (the age of majority in Egypt), a parent or legal guardian must accept the Terms of Use for you and, where the law requires it, consent to the processing of your personal data. If we learn that we hold personal data of someone under 13, or of a minor without the consent the law requires, we delete it.

13.Cookies

We use only the cookies the Service needs and a few that remember your choices. See the Cookie Notice.

14.Changes to this notice

When our practices change we update this notice and the date at the top. For a material change we tell account holders by email or in the app before it takes effect.