Privacy Policy.
Last updated: September 27, 2026
Privacy is how our products are built: your working data stays on your device. This policy explains the limited personal data we do process on helpcore.ai and around the apps, why, and your rights.
1. Controller
The data controller is Francesca Chimenti, sole proprietorship (impresa individuale) trading as HelpCore.ai, Corigliano-Rossano (CS), Italy, VAT ID [P.IVA da inserire]. Contact for any privacy matter: support@helpcore.ai (subject "Privacy request").
2. What we never receive
The content you enter in HelpFinance and HelpFreelance (movements, balances, clients, invoices, loans, assets, plans) is stored in your browser's database on your device. It is not uploaded to our servers and we cannot read it. We never ask for bank logins and never receive your full card details.
3. Data we process
- Store account: e-mail, name, encrypted password (managed by our authentication provider), marketing preference.
- Orders and billing: name, e-mail, phone (optional), billing address, company name, VAT/tax ID and, for Italian businesses, SDI code and PEC; products bought, amounts, taxes, refunds, payment status and references from Stripe (never full card numbers).
- App accounts and licenses: e-mail, name, license and plan status, AI credit balance.
- Free-access and newsletter forms: e-mail, first name, what you're working on, the page of the form.
- Partner program: application data (contact details, channel, audience, motivation); for approved partners, tax and address data, and bank details stored encrypted; sales and commissions attributed to the partner. Partners only see masked names and e-mails of the customers they referred.
- Partner attribution: the partner code in a link or entered at checkout, linked to your purchase.
- Site analytics (only with your consent where required): pages visited, clicks on buttons and links, scroll depth, time on page, sections viewed, form progress (field names only, never what you type), searches on the site, device type, browser, operating system, language, approximate country derived from your time zone, referrer and campaign parameters, and pseudonymous visitor and session identifiers. When you are signed in or buy, these events can be linked to your customer record.
- Security: rate-limit counters based on a salted, short-lived hash of your IP address (the IP itself is not stored), authentication logs kept by our provider.
- Support: messages you send us and the data you include.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Selling licenses, delivering access, receipts, refunds, support | Contract (art. 6(1)(b)) |
| Invoicing and tax records | Legal obligation (art. 6(1)(c)) |
| Security, fraud and abuse prevention, service e-mails | Legitimate interest (art. 6(1)(f)) |
| Site analytics to improve pages and checkout | Consent in the EU/UK (art. 6(1)(a)); elsewhere legitimate interest with opt-out |
| Remembering the partner link you used (90 days) | Consent in the EU/UK; at purchase, contract with the partner program |
| Marketing e-mails about releases and offers | Consent (you can withdraw it at any time) |
| Partner program management and payments | Contract and legal obligation |
5. Service providers
We use carefully chosen providers acting on our instructions: Supabase (database and authentication, hosted in the EU, Frankfurt), Netlify (website hosting and delivery), Stripe (payments, which acts as an independent controller for its own fraud prevention and legal obligations), Resend (e-mail delivery), and the AI provider used by the apps' AI features (which receives only anonymous figures). We do not sell or share personal data for advertising, and we use no advertising cookies.
6. International transfers
Some providers are based in the United States. Transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.
7. How long we keep data
| Data | Retention |
|---|---|
| Orders, invoices, payment records | 10 years (Italian tax and civil law), then deleted |
| Store account | Until you delete it |
| Leads from forms | Until you unsubscribe or 24 months without interaction |
| Site analytics events | 13 months |
| Saved bag | 30 days from the last addition |
| Unpaid checkouts | Marked expired after 25 hours; kept with the customer record for follow-up only where allowed |
| Partner data and commissions | For the partnership, then 10 years for payment records |
| Security counters | Minutes to hours |
8. Your rights
You can access, correct, delete, restrict or object to the processing of your data, receive it in a portable format and withdraw consent at any time, without affecting earlier processing. From Account › Privacy you can download all your data and request deletion; you can also write to us. We answer within 30 days. If you think we got something wrong, you can complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or to the authority of your country.
9. US residents
We do not sell personal information or share it for cross-context behavioral advertising. We honour the Global Privacy Control signal as an opt-out of analytics. California and other US state residents can exercise access, deletion and correction rights as described above; we will not discriminate against you for doing so.
10. Security
Data is encrypted in transit; access to the database is restricted by row-level security so each customer and partner can only reach their own records; bank details are encrypted at rest; administration requires two-step verification and every sensitive action is logged.
11. Children
Our site and products are not directed to children under 16 and we do not knowingly collect their data.
12. Changes
We will update this policy when our processing changes and show the date at the top. Material changes will be announced on the site or by e-mail.
Contact
Francesca Chimenti, sole proprietorship (impresa individuale) trading as HelpCore.ai · Corigliano-Rossano (CS), Italy · Registered with the Companies Register of Cosenza (Registro Imprese di Cosenza) · VAT ID [P.IVA da inserire] · support@helpcore.ai