Privacy Policy
What HELIX collects about you and your projects, how we use it, who can see it, and the choices you have.
01Scope of this Policy
This Privacy Policy describes how Holder Construction Group, LLC ("HELIX," "we," "us") collects, uses, and shares personal information in connection with the HELIX construction management platform, including the web application, mobile applications, sync utility, APIs, and helixteam.com (the "Service"). It also describes the choices you have.
HELIX processes much of the information in the Service on behalf of the organizations that host projects ("Hosts"). Where a Host determines the purposes of processing, the Host is the controller of that information and its own privacy practices apply in addition to this Policy. Questions about a specific project's data should be directed to the Host's administrator.
This explains what we collect about you and why. The company running your project controls much of the project data; for questions about a specific project, start with that company’s admin.
02Information We Collect
Information you provide. Account details such as name, email address, phone number, employer, trade or role, profile photo, and credentials. Content you create or upload, including photos, videos, documents, notes, RFIs, submittals, checklists, journal entries, incident reports, and cost information. Communications with us, such as support requests. If you agree to receive text messages, a record of that consent and of any later opt-out.
Information collected on the jobsite. When a Host uses site identification, badging, or access control, we collect records of your entry and exit, badge scans, the areas you accessed, and hours on site. When you scan QR codes or barcodes, we collect the scan, time, and associated item.
Information collected automatically. Device type, operating system, app version, IP address, browser type, pages and features used, timestamps, crash and performance data, and approximate location derived from IP address. If you enable location permissions, precise device location when you take photos, scan codes, or check in on site.
Information from others. Host administrators and your employer provide your name, contact details, role, and project assignments when they invite you. Integrated access-control systems and other third-party services share data as configured by the Host.
We collect what you type in and upload, what the app can see from your device (like phone model and location, if you allow it), and jobsite records like when you badged in. Your employer and project admin also give us basic details about you when they add you to a project.
03How We Use Information
We use personal information to: provide, operate, and secure the Service; identify people on site and manage access to restricted areas as configured by the Host; sync content between devices and the cloud, including offline caching; send transactional messages by email, push notification, and text message, such as one-time verification codes, sign-in security codes, RFI assignments, approvals, and safety notices; provide customer support and training; monitor performance, diagnose problems, and improve the Service; detect, prevent, and respond to fraud, abuse, and security incidents; comply with legal obligations, including OSHA record-keeping when a Host uses incident features; and, with your consent where required, send product news.
We do not use Customer Content to train generalized machine-learning models, and we do not sell personal information.
We use your information to run HELIX, keep sites secure, sync your work, send sign-in codes, notify you about project items, help you, and improve the product. We do not sell your data or use your project files to train AI.
04How We Share Information
Within your project. The Service is collaborative by design. Your name, employer, role, contact details, contributions, and site presence records are visible to other members of the same project according to permissions configured by the Host.
Hosts and employers. Host administrators and your employer can access records related to your project participation, including site access logs and hours on site, and may export the project record.
Service providers. We share information with vendors that host our infrastructure, deliver email, text messages, and push notifications, provide analytics and crash reporting, and support our operations. They may use it only on our instructions. We do not share mobile phone numbers or text messaging consent with anyone for their marketing purposes; see Text Messages.
Integrations. At the Host's direction, we exchange information with third-party systems such as access-control hardware and customer-built API integrations. Those providers' privacy practices govern their use.
Legal and safety. We may disclose information to comply with law, subpoenas, or government requests; to enforce our Terms; or to protect the rights, property, or safety of HELIX, our users, or the public, including in connection with jobsite safety incidents.
Corporate transactions. If HELIX is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.
Your project team can see what you contribute and, if the host uses badging, when you were on site. Your employer and the host company can access that too. We use vendors to run the platform, and connect to other systems when the host asks us to. We share with authorities when the law requires.
05Text Messages
If you give us a mobile phone number and agree to receive text messages, we use it to send one-time verification codes, sign-in security codes for multi-factor authentication, and safety notices for the projects you belong to. Message frequency varies. Message and data rates may apply.
No sharing for marketing. We do not sell, rent, or share mobile phone numbers, text messaging opt-in data, or consent with third parties or affiliates for their marketing or promotional purposes, and we do not share them with lead generators. We share this information only with the service providers that deliver our text messages, and only so they can deliver them.
Opting out. You can stop text messages at any time by replying STOP to any message, or by asking us in any other reasonable way, such as emailing privacy@helixteam.com. We will confirm your opt-out by text and then stop sending text messages. Reply HELP for help. If you opt out, you will no longer receive sign-in codes or safety notices by text; safety notices will continue to reach you by email or app notification where available.
If you give us your mobile number, we text you sign-in codes and safety notices. We never sell or share your number, or your agreement to get texts, for anyone’s marketing. Reply STOP to stop texts or HELP for help. Message and data rates may apply.
06Mobile App Permissions and Offline Data
Camera and photos: to capture and upload progress photos and videos and to scan QR codes and barcodes. Location: to tag photos and scans with where they were taken and to support site check-in, only when you grant permission and, if you choose, only while using the app. Notifications: to alert you to assignments, approvals, and safety messages. Local storage: to cache project content for offline use.
You can change these permissions at any time in your device settings. Cached content is protected by your device passcode and may be removed when your project access ends.
The app uses your camera for photos and scanning, location for tagging where things happened and site check-in, and notifications for project alerts. You control each permission in your phone settings.
07Cookies and Analytics
We use cookies and similar technologies on helixteam.com and in the web application to keep you signed in, remember preferences, protect against fraud, and understand how the Service is used. We use privacy-respecting analytics tools that measure feature usage and performance. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in. We do not use third-party advertising cookies and we honor Global Privacy Control signals where required by law.
We use cookies to keep you logged in and to see which features get used. No ad-tracking cookies.
08Data Retention
Construction records have long lives. Project content, including your contributions and site access records, is retained for the duration of the project and thereafter as directed by the Host, who typically retains the project record for facility operations, warranty, and legal purposes. Account information is retained while your account is active and for a reasonable period afterward to resolve disputes and comply with legal obligations. Usage and diagnostic data is retained in identifiable form for no more than 24 months. We de-identify or delete information when it is no longer needed for these purposes.
Project records stick around a long time because buildings do; the host company decides how long. Your account info is kept while you are active and briefly after. Diagnostic data is kept up to two years.
09Security
We protect personal information using administrative, technical, and physical safeguards, including encryption in transit and at rest, role-based access controls, logging, and regular security reviews. See our Security page for details. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you and the relevant Host as required by law.
We encrypt your data and limit who can see it. If there is ever a breach involving your information, we will tell you.
10Your Choices and Rights
Access and correction. You can review and update your profile information in the Service. For project content controlled by a Host, contact the Host's administrator.
Deletion. You may request deletion of your account by emailing privacy@helixteam.com. Because project records must remain complete, your contributions and site access records may be retained in the project record as directed by the Host and as required by law; we will de-identify your account where feasible.
Marketing and messages. You may opt out of promotional emails using the unsubscribe link. Transactional and safety emails and app notifications will continue while you have an account. You can stop text messages at any time by replying STOP, as described in Text Messages.
U.S. state privacy rights. Depending on where you live, including California, Colorado, Connecticut, Virginia, Texas, Oregon, and other states with comprehensive privacy laws, you may have the right to know what personal information we collect, to access, correct, or delete it, to obtain a portable copy, and to opt out of sale, sharing for targeted advertising, or certain profiling. HELIX does not sell personal information or share it for targeted advertising. To exercise your rights, email privacy@helixteam.com; we will verify your identity and respond within the time required by law. You may designate an authorized agent, and we will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our response.
Where a Host is the controller of your information, we will forward your request to the Host and assist as required.
You can update your profile yourself. You can stop text messages anytime by replying STOP. You can ask us to delete your account, though your project records may need to stay in the project file. Depending on your state, you have legal rights to see, fix, delete, or get a copy of your data; email privacy@helixteam.com to use them.
11Children
The Service is intended for adults working in the construction industry. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact privacy@helixteam.com and we will delete it.
HELIX is not for kids. If a minor’s information ends up with us, tell us and we will delete it.
12Where Information Is Processed
HELIX is based in the United States and processes information on servers located in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.
Your data lives on U.S. servers.
13Changes to this Policy
We may update this Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, notify you by email or in-product notice before they take effect. Your continued use of the Service after the effective date means you accept the updated Policy.
If we change this policy in a meaningful way, we will let you know first.
14Contact Us
Holder Construction Group, LLC
Attn: Privacy
3300 Riverwood Parkway, Suite 1200, Atlanta, GA 30339
privacy@helixteam.com