Privacy Policy

What we collect

HelixWrks LLC operates helixwrks.com to share information about our work, publish educational content, and link to our HelixWrks products, which are operated on their own subdomains and publish their own privacy policies. This policy covers this website. The site itself does not process payments or host user accounts. We collect:

• Information you submit through our contact and inquiry forms, such as your name, email address, company or organization, and the content of your message. You provide this voluntarily, and submitting a form indicates your consent for us to use it to respond to you.
• Product access requests: when you ask for access to a HelixWrks product (for example, Fulcrix), the email address and any details you send us.
• Information you enter into the products themselves is not collected by this site, and each product's own privacy policy governs it. Their handling differs, and the difference matters: the LIMS Readiness Assessment is zero-knowledge: your answers are encrypted in your browser and, by design, we hold only ciphertext we can't read (as described in that product's own privacy policy). Fulcrix holds the lab and workflow models you build, isolated per workspace by row-level security. Neither is designed for PHI and neither should ever receive it.
• Results you choose to email from the free frameworks: the Quick-Check, deployment-discovery and scorecard tools run entirely in your browser, and nothing leaves it unless you use their “email my results” action, which sends your answers and scores as plain text via Formspree to us. Each tool says so at the point of sending; the paid assessment’s in-browser encryption does not apply to these free tools.
• Usage and analytics data collected automatically when you visit the site (such as pages viewed, the site that referred you, approximate location, and device and browser type), which we use to understand how the site is used and to improve it.

How we use information

We use the information we collect to respond to your inquiries, provision product and early access, operate and improve our products and the site, and understand site visitation and usage trends in aggregate. We do not sell your personal information, and we do not use it for cross-site advertising or retargeting.

Cookies and analytics

We use a privacy-conscious, cookieless analytics service (Vercel Web Analytics) to measure site visitation and usage trends, and only after you accept analytics on the consent banner. It records aggregate information such as pages visited and general usage patterns without setting cookies and without storing directly identifying information. We do not use advertising or cross-site tracking cookies. Because our analytics are cookieless and we do not sell or share personal information or engage in cross-site tracking, there is nothing to opt out of via a browser "Do Not Track" or Global Privacy Control (GPC) signal; where such a signal applies to any future processing, we will honor it. Your consent choice itself is remembered in your browser's local storage (a single entry, not a tracking cookie) so we do not ask again; you can clear or change it any time via "Cookie Preferences" in the footer or through your browser settings.

The HelixWrks products

The LIMS Readiness Assessment is a live, paid product completed by card checkout within the product; Fulcrix is software in early access, available by application; nothing is billed during early access. Data you enter into a product is governed by that product's own privacy policy and terms, presented within the product, not by this policy. Please do not submit another person's personal or confidential information into a product unless you are authorized to do so. The products are not designed to receive protected health information (PHI) and should not be used to process it; do not enter PHI into any product.

Third-party processors

This site relies on a small set of service providers: Formspree (form submissions), Vercel (hosting, content delivery, and the cookieless Web Analytics described above), and Namecheap (domain registration and DNS). The HelixWrks products use a different set, listed in their own privacy policies and data-processing addenda: Supabase (authentication and encrypted storage), Vercel (hosting), Resend (transactional email), Stripe (payment processing; card data goes directly to Stripe and, by design, does not reach us), and, for Fulcrix only, Anthropic (Fulcrix’s optional AI features, which are off until a lab Admin turns them on and send only their own inputs; the full list of what each one sends is in the Fulcrix Privacy Policy and its Sub-processor List; never used by the LIMS Readiness Assessment). Each processor handles data only as necessary to deliver its service, under its own terms and security practices, and some may process or store data outside your home country (including in the United States). A current list of processors is available on request.

How we protect information

We use reasonable administrative and technical safeguards appropriate to a site of this kind, including encrypted transport (HTTPS), access controls on the systems that receive form submissions, and reliance on reputable processors that maintain their own security programs. No method of transmission over the internet or method of electronic storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security.

How long we keep information

We keep personal information only for as long as it is needed for the purpose it was collected: to respond to and follow up on your inquiry, to provision product and early access, and to meet our legal, accounting, or operational obligations. Inquiry and access-request correspondence is generally retained for up to 24 months after our last substantive contact, and longer only where an ongoing relationship or a legal obligation requires it. Data you enter into a product is retained under that product's own retention policy, which you should read there. In the LIMS Readiness Assessment we keep your encrypted vault until you delete it; nothing is deleted on a schedule, and deletion from within the app is immediate and permanent. When information held by this site is no longer needed, we delete or de-identify it.

Your rights and choices

You can request access to, correction of, or deletion of the personal information we hold about you, and you can withdraw consent or ask us to stop contacting you, at any time by emailing tyler@helixwrks.com. We will respond within a reasonable period and in any case within the time required by applicable law (generally within 30 days). We may need to verify your identity before acting on a request. Non-essential analytics load only if you accept them on the consent banner, and you can change that choice at any time via “Cookie Preferences” in the footer. We do not sell personal information, and exercising any of these rights will not result in discriminatory treatment.

Your privacy rights (United States)

HelixWrks offers its products to customers in the United States and directs this site and its products only to the United States; we do not target or market them to the European Economic Area, the United Kingdom, or other jurisdictions outside the United States. If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to and deletion of it, and to not be discriminated against for exercising those rights; we do not sell or share personal information as those terms are defined under California law. Residents of other U.S. states with comprehensive privacy laws have comparable rights. To exercise any of these rights, email tyler@helixwrks.com.

Children and changes

This is a business-to-business site, is not directed to children under 16 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their information. We may update this policy as our products and practices evolve; material changes will be reflected here with a revised effective date.