Privacy Policy

What we collect

HelixWrks LLC operates helixwrks.com to share information about our work, publish educational content, and link to our HelixWrks Lab products, which are operated on their own subdomains and publish their own privacy policies. This policy covers this website. The site itself does not process payments or host user accounts. We collect:

• Information you submit through our contact and inquiry forms — such as your name, email address, company or organization, and the content of your message. You provide this voluntarily, and submitting a form indicates your consent for us to use it to respond to you.
• Product access requests — when you ask for access to a HelixWrks Lab product (for example, BenchForge), the email address and any details you send us.
• Information you enter into the products themselves is not collected by this site, and each product's own privacy policy governs it. Their handling differs, and the difference matters: the LIMS Readiness Assessment is zero-knowledge — your answers are encrypted in your browser and we hold only ciphertext we cannot read (as described in that product's own privacy policy). BenchForge holds the lab and workflow models you build, isolated per workspace by row-level security. Neither is designed for PHI and neither should ever receive it.
• Results you choose to email from the free frameworks — the Quick-Check, deployment-discovery and scorecard tools run entirely in your browser, and nothing leaves it unless you use their “email my results” action, which sends your answers and scores as plain text via Formspree to us. Each tool says so at the point of sending; the paid assessment’s in-browser encryption does not apply to these free tools.
• Usage and analytics data collected automatically when you visit the site — such as pages viewed, the site that referred you, approximate location, and device and browser type — which we use to understand how the site is used and to improve it.

How we use information

We use the information we collect to respond to your inquiries, evaluate and provision alpha access, operate and improve our products and the site, and understand site visitation and usage trends in aggregate. We do not sell your personal information, and we do not use it for cross-site advertising or retargeting.

Cookies and analytics

We use a privacy-conscious, cookieless analytics service (Vercel Web Analytics) to measure site visitation and usage trends, and only after you accept analytics on the consent banner. It records aggregate information such as pages visited and general usage patterns without setting cookies and without storing directly identifying information. We do not use advertising or cross-site tracking cookies. Because our analytics are cookieless and we do not sell or share personal information or engage in cross-site tracking, there is nothing to opt out of via a browser "Do Not Track" or Global Privacy Control (GPC) signal; where such a signal applies to any future processing, we will honor it.

Alpha products

HelixWrks Lab products are pre-release. The LIMS Readiness Assessment is a paid, one-time purchase completed by card checkout within the product; BenchForge is available by request. Data you enter into a product is governed by that product's own privacy policy and terms, presented to you within the product — not by this policy. Please do not submit another person's personal or confidential information into a product unless you are authorized to do so. The products are not designed to receive protected health information (PHI) and should not be used to process it; do not enter PHI into any product.

Third-party processors

This site relies on a small set of service providers: Formspree (form submissions), Vercel (hosting, content delivery, and the cookieless Web Analytics described above), and Namecheap (domain registration and DNS). The HelixWrks Lab products use a different set, listed in their own privacy policies and data-processing addenda: Supabase (authentication and encrypted storage), Vercel (hosting), Resend (transactional email), Stripe (payment processing; card data goes directly to Stripe and, by design, does not reach us), and — for BenchForge only — Anthropic (AI parsing of the text of documents you choose to import, such as SOPs, and — at your request — parsing of your workspace economic model by the AI copilot and the read-only Open API/MCP, economics only and no PHI — attached PDF/image files are not sent; used only when you use those features, and never by the LIMS Readiness Assessment). Each processor handles data only as necessary to deliver its service, under its own terms and security practices, and some may process or store data outside your home country (including in the United States). A current list of processors is available on request.

How we protect information

We use reasonable administrative and technical safeguards appropriate to a site of this kind — including encrypted transport (HTTPS), access controls on the systems that receive form submissions, and reliance on reputable processors that maintain their own security programs. No method of transmission over the internet or method of electronic storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security.

How long we keep information

We keep personal information only for as long as it is needed for the purpose it was collected — to respond to and follow up on your inquiry, to evaluate and provision alpha access, and to meet our legal, accounting, or operational obligations. Inquiry and alpha-request correspondence is generally retained for up to 24 months after our last substantive contact, and longer only where an ongoing relationship or a legal obligation requires it. Data you enter into a product is retained under that product's own retention policy, which you should read there. In the LIMS Readiness Assessment we keep your encrypted vault until you delete it — nothing is deleted on a schedule, and deletion from within the app is immediate and permanent. When information held by this site is no longer needed, we delete or de-identify it.

Your rights and choices

You can request access to, correction of, or deletion of the personal information we hold about you, and you can withdraw consent or ask us to stop contacting you, at any time by emailing tyler@helixwrks.com. We will respond within a reasonable period and in any case within the time required by applicable law (generally within 30 days). We may need to verify your identity before acting on a request. Non-essential analytics load only if you accept them on the consent banner, and you can change that choice at any time via “Cookie Preferences” in the footer. We do not sell personal information, and exercising any of these rights will not result in discriminatory treatment.

Regional privacy rights (EEA, UK & California)

Depending on where you live, you may have additional rights. If you are in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, the right to data portability, and the right to lodge a complaint with your local supervisory authority. Where we process your data, we do so on the basis of your consent (which you may withdraw), our legitimate interest in responding to you and operating the site, or compliance with a legal obligation. If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access and deletion, and to not be discriminated against for exercising those rights; note that we do not sell or share personal information as those terms are defined under California law. To exercise any of these rights, email tyler@helixwrks.com.

Children and changes

This is a business-to-business site, is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their information. We may update this policy as our products and practices evolve; material changes will be reflected here with a revised effective date.