Version 2026-08-30
Version 2026-08-30 This policy covers Helium, the business-operations desktop AI product provided by Agens, Inc. (“Agens”). An organization’s order form, data processing addendum, or other signed agreement controls if it conflicts with this policy. ## 1. Helium’s data boundary Helium runs on your device and in environments your organization selects. Workspace files, extracted text, document indexes, conversations, agent memory, contact records, indexed email, action history, and workspace snapshots are stored locally by default. Helium sends data outside that boundary only when you or your organization configures a model, integration, research service, remote database, or managed Helium service and a workflow uses it. ## 2. Information processed - Operational content: prompts, files, email and calendar content, contacts, project records, generated work, and the instructions and results of agent actions. - Configuration and credentials: workspace paths, model and integration settings, API keys, OAuth tokens, and trusted SMS numbers. Storage depends on scope and platform: Helium may use an OS keychain, Windows DPAPI, or a local runtime secret file. Workspace-scoped runtime credentials are stored under that workspace’s .helium directory and may not be OS-encrypted, so protect the workspace and use full-disk encryption. - Technical records: local logs, tool calls, approvals, errors, model usage, and device or app details needed to secure and troubleshoot Helium. Helium does not enable first-party analytics or crash telemetry by default; local logs leave your device only when you choose to provide them for support. - Business contact data: name, work email, organization, support correspondence, and commercial records when you or your organization deals directly with Agens. Do not give Helium personal information that your organization is not authorized to process. ## 3. Why information is processed Agens processes information to provide and secure Helium; execute workflows you request; maintain action and approval records; provide support; administer business relationships; comply with law; and improve reliability. Agens does not sell personal information, use it for cross-context behavioral advertising, or use Customer Content to train general-purpose AI models. ## 4. Model providers and integrations When a workflow uses OpenAI, Anthropic, Google, Exa, Pipedream, Twilio, Microsoft, Google Workspace, or another service selected by you or your organization, Helium sends the content and identifiers needed for that request to the selected service. Those providers process data under your organization’s account, configuration, contract, and retention settings. Review them before connecting an integration. Agens does not control an independently configured provider’s use of data. ## 5. Disclosure Agens discloses information only to service providers acting for Agens; providers and systems you direct Helium to use; professional advisers under confidentiality duties; authorities when legally required; and a successor in a corporate transaction. Agens does not disclose Customer Content for advertising. ## 6. Retention and security Locally stored information remains until you delete the applicable Helium app-data, contact, workspace index, snapshot, or source file, subject to backups you control. Uninstalling Helium may not remove its app-data or workspace .helium folders. Connected systems retain information under their own policies. Agens retains information it holds only as long as needed for the purposes above, contractual commitments, security, and legal obligations. Helium uses scoped access, approval gates for consequential actions, credential redaction, and local secret storage appropriate to the configured scope and platform. No system is completely secure; protect the device, workspace, provider accounts, and credentials you authorize. ## 7. Choices and rights You can disconnect integrations, remove trusted numbers, delete local Helium data, and control the provider accounts Helium uses. Reply STOP to stop Helium SMS control texts; reply HELP for help. Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of personal information Agens controls. Agens may direct organization-managed requests to your employer or account administrator. Helium is a business product and is not directed to children under 18. ## 8. Contact and changes Email privacy@agensai.com with privacy requests or questions. Agens will identify material changes by updating the version above and, when appropriate, providing notice in Helium or through your organization.