Legal & privacy

HELM Consumer Terms of Service

Version: September 7, 2026. These terms apply when presented and accepted for a Consumer subscription; they do not retroactively replace an existing agreement.

HELM Systems, Inc. ("HELM," "we," "us"), a Delaware corporation, provides the HELM website, account services and personal desktop assistance service. Contact: support@helmstate.com. Mailing address: 2700 Lincoln Way 350, Ames, IA 50014, United States.

1. Eligibility and agreement

The Consumer service is offered to individuals age 18 or older residing in the United States for their own personal use. By affirmatively accepting these terms at checkout, you agree to these terms, the EULA, Subscription and Refund Policy, and Acceptable Use Policy available on this legal page. The Privacy Policy explains our handling of personal information; accepting these terms does not waive privacy rights. Organization purchases remain governed by their signed agreement and Business Terms.

Provide accurate account and billing information, secure your sign-in credentials, and promptly report unauthorized access. One subscription is for one individual. Do not share an account or resell access. You are responsible for activity you authorize, but this does not make you responsible for losses caused by HELM's own legal violations.

2. Service and beta status

HELM provides assistance with questions and user-authorized information. Features depend on the installed version, enabled permissions, connected services, subscription and availability. A beta can contain defects and incomplete features. A future or paused feature is not included merely because it appears in a roadmap. The checkout description identifies what is offered; these terms do not excuse failure to provide a materially advertised paid service.

AI answers can be incorrect, incomplete or misleading, including their citations. Review important statements against the underlying sources. HELM is not a medical, legal, financial, emergency or other licensed professional service. Do not rely on it for safety-critical decisions. Students remain responsible for complying with instructor and institution rules. HELM does not authorize academic dishonesty.

3. Your content and permissions

You retain your rights in information you supply. You grant HELM and its service providers a limited right to process that information only as necessary to provide, secure and support the service, follow your instructions, and comply with law, as described in the Privacy Policy. This is not permission to sell your content or train HELM models on it.

Only supply information you are authorized to process. Sending a question authorizes relevant read-only processing of context you have enabled, selected or attached for that question. It does not authorize HELM to send messages, edit connected accounts or act in other applications. Disconnect sources or change permissions to stop future access; this does not automatically erase information already stored locally or previously sent to a provider.

To the extent HELM owns rights in output generated for you, HELM assigns those rights to you. This does not transfer HELM software, trademarks or third-party rights. Outputs may be similar to outputs for other people and may not qualify for copyright protection.

4. Payment and usage

Navigator is $9, Wayfinder $19, and Voyager $29 per month, plus applicable taxes disclosed before purchase. Subscriptions automatically renew monthly until canceled. The Subscription and Refund Policy below explains cancellation, refunds and allowances. You authorize Stripe to charge your selected payment method for the disclosed recurring amount and taxes. HELM does not automatically charge for usage above an allowance.

Question, AI-processing and indexing allowances are separate. Question processing stops when the question limit is reached or the remaining AI allowance cannot fund the next request. Unused allowances expire at the end of the paid period and have no cash value. Limits are part of the service, not a promise of unlimited use. We will not reduce purchased allowances during their paid period without your consent, except when needed to address unlawful use, security or abuse.

5. Suspension, cancellation and service changes

You may cancel renewal from your account without contacting support. We may restrict access for nonpayment, a material breach, legal requirements, or a credible security or abuse risk. Where reasonably possible, we will explain the restriction and provide an opportunity to correct it. Contact support to contest an error. We will not continue billing for service we terminate without providing access, and will refund the unused prepaid portion when we permanently discontinue your paid service for reasons other than your material breach, subject to any broader legal rights.

We will give advance notice of a price increase or material change to paid features before it affects a renewal and obtain additional consent when required by law. You may cancel before it takes effect. Changes are prospective. Preserve a copy of the version you accept.

6. Software, feedback and third parties

The EULA governs installation, updates and software licensing. Third-party components remain governed by their own licenses, including open-source rights. Voluntary product feedback may be used to improve HELM without payment; do not include confidential material in feedback. This feedback permission does not include your private questions, files or answers.

7. Warranties and liability

Except for express promises and rights that cannot lawfully be excluded, the service is provided as available, without a guarantee that every answer is correct or that service will be uninterrupted. To the extent permitted by law, HELM disclaims implied warranties of merchantability, fitness for a particular purpose and non-infringement.

To the extent permitted by law, neither party is liable under this agreement for indirect or consequential losses that were not reasonably foreseeable. HELM's aggregate liability arising from the service is limited to the greater of $100 or the fees you paid HELM in the preceding 12 months. These limitations do not apply to fraud, willful misconduct, gross negligence, injury or death caused by negligence, or liability and consumer remedies that applicable law does not allow us to limit. Some states do not permit some exclusions; those exclusions do not apply to you where prohibited.

8. Disputes and general terms

Contact support first if you wish to seek an informal resolution; doing so is not a condition of exercising legal rights. Iowa law governs except that mandatory protections of your home state remain available. Courts in Story County, Iowa, or federal courts serving that county may hear disputes, except where applicable law permits or requires another forum. You may use an available small-claims court. These Consumer terms do not impose mandatory arbitration, a class-action waiver or a jury-trial waiver.

If a provision is unenforceable, the remaining provisions continue. Failure to enforce a provision is not a permanent waiver. HELM may transfer this agreement with a business transfer if your rights are preserved. These terms and the incorporated policies form the Consumer agreement; a signed individual agreement controls an express conflict. Ownership, accrued payment obligations and provisions intended to survive continue after termination.

HELM Subscription, Cancellation and Refund Policy

Version: September 7, 2026. Applies to Consumer subscriptions accepted under this policy.

Monthly plans

Navigator: $9 per month, up to 200 questions, a $1 AI-generation processing allowance, and 2 MB of text submitted for indexing per paid period.

Wayfinder: $19 per month, up to 600 questions, a $3 AI-generation processing allowance, and 5 MB of text submitted for indexing per paid period.

Voyager: $29 per month, up to 1,200 questions, a $5 AI-generation processing allowance, and 10 MB of text submitted for indexing per paid period.

Prices are in US dollars before applicable tax. AI allowances measure the provider processing cost assigned to your requests; they are not account balances, redeemable credits or separate charges. Question counts are maximums: larger inputs, longer answers and provider processing can exhaust the AI allowance first. MB means one million UTF-8 text bytes processed, including repeated indexing requests; it does not mean the original file's disk size. Indexing allowance is separate from generation allowance.

Free trial without a credit card

Eligible verified personal accounts can select **Start free trial** in the account dashboard. That action starts seven consecutive days with up to 20 questions and a $0.10 total AI-processing ceiling: $0.095 for answers and $0.005 for indexing, capped at 250,000 UTF-8 text bytes. The two allowances are separate and do not transfer. The same reservation and hard-stop rules apply as for paid plans. The trial stops at expiry or when its question or processing allowance cannot fund further work. Twenty questions is a maximum; complex requests can exhaust the AI allowance sooner.

No card is required, no subscription is created, and no charge or automatic renewal occurs when the trial ends. To continue, explicitly choose and purchase a paid plan. A trial cannot be restarted by repeating the start action, signing out or reinstalling HELM. We retain a limited keyed email marker to prevent repeat trials after account deletion. Trials are for US residents age 18 or older.

How limits work

A question consumes one question allowance when AI processing begins, including when you cancel or disconnect after processing starts. Requests rejected before provider acceptance release that question allowance. If provider acceptance or final usage cannot be established, HELM conservatively counts the request and its reserved maximum cost. Contact support to request review of an incorrect charge against your allowance.

Before starting a question HELM reserves its maximum permitted processing cost. When actual usage is established, the unused reservation is released. Processing is blocked if there is not enough allowance to reserve the next request, even if a small balance remains. Concurrent requests cannot independently spend the same allowance. Indexing text counts when dispatched; retries may consume additional indexing allowance. Invalid requests rejected before indexing dispatch do not consume it.

The account dashboard shows questions used and remaining, AI allowance used or reserved, indexing usage and the next reset date. Refresh it for a current reading. Neither a billing-provider reporting delay nor an unavailable usage display grants extra allowance. There are no automatic overage charges and no rollover.

Renewal and payment

Stripe processes payment. A subscription renews every month on the billing schedule shown at checkout and in your account until canceled. Checkout shows your recurring price, taxes and total before you pay. The no-card trial above is separate from a paid subscription. A new paid allowance requires an active paid subscription period. Failed or incomplete payments can prevent new paid processing; updating your payment method does not guarantee access until payment is confirmed.

Cancel without contacting support

Open your HELM account, select Manage or cancel subscription, and complete cancellation in the Stripe customer portal. Check the resulting cancellation confirmation and paid-through date. Cancel before the displayed renewal time to prevent the next charge. Cancellation of renewal normally preserves access through the paid period, subject to remaining allowances. Uninstalling the desktop app or signing out does not cancel billing.

If the portal is unavailable, email support@helmstate.com with your account email and request cancellation. Do not send a card number. A timely cancellation request will be honored if a technical failure prevents portal cancellation. Account deletion is a separate permanent action and may end access immediately; use cancellation if you only want to stop renewal.

Refunds and mistakes

Except as required by law or expressly promised, monthly fees are not prorated for voluntary cancellation or unused allowances. Request review at support@helmstate.com for duplicate or unauthorized charges, a charge after effective cancellation, material non-delivery, or an incorrect usage restriction. HELM will correct confirmed billing errors. Mandatory refund, cancellation and other consumer rights are preserved; this policy does not impose a shorter deadline than applicable law.

If HELM permanently discontinues paid service for reasons other than your material breach, we will refund the unused prepaid portion. Approved refunds are returned through the original payment method when possible; bank processing times vary. We do not promise a fixed bank posting date.

Changes

Plan changes must be confirmed through an available billing flow before they apply. A displayed plan name alone does not increase your allowance. Renewal prices or allowances may change prospectively after required notice and consent. We will not silently reduce a paid period's purchased allowance or add usage charges.

HELM Privacy Policy

Version: September 7, 2026. Applies from publication with the Consumer service. Earlier signed business commitments are not retroactively reduced.

HELM Systems, Inc., a Delaware corporation, is responsible for HELM Consumer. Contact support@helmstate.com or write to 2700 Lincoln Way 350, Ames, IA 50014, United States. This policy covers our website, accounts, Windows desktop app, hosted processing and support. Consumer service is offered to adults in the United States. Organization services may have additional contractual privacy terms.

Information we collect and why

Account information includes your account identifier, name and email supplied by your identity provider, verification status, creation and sign-in timestamps, account status and, where applicable, organization membership. Session records include device labels, identifiers, expiration, last-use and revocation information. We use them for authentication, administration and security. HELM stores hashes of its hosted session credentials; the desktop credential uses Windows Credential Manager.

Billing records include Stripe customer, subscription, price, checkout and transaction references, plan, payment status, billing period, amounts and cancellation state. Stripe collects payment details, billing address and tax information in its payment interface. HELM's ordinary account records do not store your full card number or card security code. Stripe also processes information for fraud prevention and its own compliance obligations.

Usage records include question counts, processing-cost reservations and settlements, indexing text-byte counts, period boundaries, account identifiers and timestamps. Operational events may include app opens, crashes, feature opens, version and client type. We use them to enforce allowances, resolve errors, protect the service and diagnose reliability. These records are designed to exclude question and answer text, screenshots, file passages, connector content, credentials and raw exception dumps. Necessary paid-service accounting is distinct from optional website analytics.

Support receives your contact information, message and anything you choose to attach. Do not send passwords or unnecessary private content. Infrastructure providers also process IP addresses, browser or device information, request paths, timestamps and security signals to operate and protect the service.

Questions, files and connected context

HELM is local-first, not cloud-free. Original Atlas files, extracted information, indexes, user-managed memory, connector metadata and saved conversations may reside on your device. Indexing may send text chunks or search text through HELM's hosted embedding service to OpenAI to produce embeddings. An embedding is a numerical representation of text; it should not be treated as anonymous.

When answers are enabled in your release, sending a question permits processing that question and relevant read-only information from sources you have enabled, selected or attached. Depending on your choices and available features, this can include selected text, file excerpts, local memory, connected Microsoft information or current-screen evidence. A paused response path does not perform answer processing. HELM does not continuously record your screen, microphone or camera as part of this question flow.

Relevant request content passes through HELM's hosted service to its AI provider. Account, billing and operational usage stores are not a cloud conversation archive. Saved conversations and citations use the device-local Conversation store. The current beta storage profile is plaintext and does not provide HELM application-level encryption at rest. Windows access controls or disk encryption are separate protections depending on your device. Do not assume local data is inaccessible to people or software with access to your Windows account.

Microsoft sign-in and delegated permissions are handled through Microsoft. Connector information remains subject to your organization's permissions and Microsoft's terms. Disconnecting stops future permitted access but does not automatically erase local copies, saved answers or information already processed. Browser-derived information reflects what was observed, not a guarantee the source remains current.

Canvas browser extension

HELM Canvas reads the active page when you open its popup. Connecting Canvas grants access to the specific institution site you approve. It reads accessible course and assignment information, syllabus text, announcements, discussion content, deadlines and grade inputs for the local academic dashboard and HELM study context. It observes the current Canvas course or assignment location to identify relevant context; it does not access Chrome's history database. Scans and settings remain in browser-local storage. Bounded context and permitted files may transfer to the HELM app on the same computer. Relevant context may then be processed by HELM and OpenAI when you index a file or ask a question. The extension does not read passwords, cookies or authentication tokens; Chrome attaches the existing session only to permitted requests.

If you start the Desktop Canvas setup guide, HELM temporarily checks Chrome's address bar to recognize setup pages and reads the relevant installation control labels. It does not capture screenshots, page bodies or sign-in fields. The extension sends setup milestones and the approved institution origin to the local app so the guide can follow your progress. This setup session ends when you leave the guide, dismiss it, switch account, finish, close HELM or reach ten minutes. Its temporary local state is then cleared. Normal approved Canvas updates are separate and follow the site-access controls described below.

Remove Canvas site access in Chrome's extension settings to stop future updates. Clear browser scans in the extension and retained Desktop data separately; revoking access does not erase prior saved answers. HELM Canvas uses information received through Chrome APIs in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is not sold, used for advertising, or used to determine creditworthiness or lending eligibility.

AI providers and training

HELM uses OpenAI for enabled hosted generation and embeddings. HELM does not use your private questions, answers, files or screen evidence to train HELM-owned models, and does not intentionally opt that content into provider training programs. OpenAI states that API data is not used for training unless the customer opts in.

This is not zero retention. OpenAI's default abuse-monitoring logs may include content and ordinarily remain for up to 30 days, with exceptions for law or safety. Particular features and caching may have additional retention. HELM has not represented that its project has approved Zero Data Retention. Disabling response storage does not itself disable abuse-monitoring retention. See https://developers.openai.com/api/docs/guides/your-data.

Sharing and providers

Providers receive information needed to supply and secure HELM: Google/Firebase and Google Cloud for identity, hosting, Functions and database services; Stripe for payments, subscriptions and enabled tax processing; OpenAI for AI processing; Microsoft for authorized identity and connectors. See the Service Providers notice. Support and professional advisers may receive necessary information subject to appropriate duties.

We may disclose information as reasonably necessary to comply with law, protect people and security, address fraud or legal claims, complete a business transfer with appropriate safeguards, or follow your instructions. Organization administrators may receive their organization's account, membership and operational information under its agreement. Personal subscriptions do not give unrelated customers access to your information.

HELM does not sell personal information or share it for cross-context behavioral advertising. We do not use private content for third-party advertising.

Cookies and choices

Authentication and security use necessary cookies or browser storage. Optional Google/Firebase analytics is enabled only after the site's analytics consent choice. Withdraw optional consent using website privacy controls or clear browser storage. Necessary account and payment records remain. See the Cookies notice. Browser Do Not Track signals do not change essential service processing. Because HELM does not sell or share information for behavioral advertising, there is no such sale or sharing to opt out of; contact us about privacy preference signals.

Retention and deletion

Starting a free trial records its start, expiry and accepted terms version. A keyed representation of the verified email is retained separately to prevent repeat trials after account deletion; it does not contain the original email or question content. This limited abuse-prevention marker is distinct from usage history. Account deletion closes billing before removing account access. A temporary deletion job keeps an account identifier until remaining data and sign-in cleanup finishes, then is removed.

Active account and subscription records remain for service delivery. Security, financial, tax, dispute and legal records may remain after closure for their applicable purposes and legal obligations. Content-minimized response usage records are configured for deletion eligibility 90 days after their last update; eligibility does not promise immediate deletion from every provider system or backup. Other operational records follow their relevant retention controls. Support communications remain as needed to address requests and legitimate legal or security obligations.

Use the account dashboard to revoke sessions or request account deletion. Deletion is not sign-out. It removes records covered by that workflow, subject to safeguards and retained obligations; third-party identity or billing records can require additional processing. Contact support if a step fails. Website deletion cannot remotely wipe your device, original files, exported answers, backups or connected sources. Use local app controls and Windows file management for those copies. Cancel renewal if you only wish to stop recurring payments.

Your rights

Request access, correction, deletion, and where applicable a portable copy or other statutory rights at support@helmstate.com. Account and usage information is visible in the dashboard. We verify identity proportionately and do not ask you to email a password. We respond within applicable legal deadlines. Authorized agents may contact us with proof of authorization. We may retain information or deny part of a request where law permits or requires it and explain the reason when required. Appeal a denial by replying with "Privacy appeal." We do not unlawfully discriminate for exercising privacy rights. Applicable legal rights and exemptions are not reduced by this policy.

Adults, sensitive information and security

HELM Consumer is intended for people age 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child supplied information, contact support so we can investigate, restrict access and delete information as appropriate. An age statement does not authorize prohibited child-data collection. Do not provide protected health information requiring a HIPAA business associate agreement, credentials or information you lack permission to share.

We use access controls and other safeguards, but no system is completely secure. Keep devices and software updated. HELM and its providers may process information in the United States and other locations; this is not a promise of exclusive US residency.

Changes and contact

We will post an updated version date and provide additional notice or consent for material changes when required. New uses do not retroactively override existing protections. Questions and requests: support@helmstate.com, HELM Systems, Inc., 2700 Lincoln Way 350, Ames, IA 50014, United States.

HELM End User License Agreement

Version: September 7, 2026; applies when presented and accepted. Company: HELM Systems, Inc., a Delaware corporation Contact: support@helmstate.com

This End User License Agreement ("EULA") governs installation and use of the HELM Windows desktop application and its local software components (the "App"). For a personal subscription, the HELM Consumer Terms, Subscription Policy and Acceptable Use Policy apply. Business customers remain subject to their Business Terms and applicable signed Order Form. The Privacy Policy explains data handling. For Consumer use, the Consumer Terms control conflicts with this EULA, including liability, cancellation, refunds and dispute rights.

1. Acceptance and eligibility

By affirmatively accepting this EULA after receiving notice of it, you agree to its software terms. Consumer users must be age 18 or older and reside in the United States. A person accepting for a business must be authorized to bind it. Do not install or use the App if you do not agree. Installation alone does not create permission to charge a subscription; payment requires separate checkout.

2. License

Subject to these terms, HELM grants you a non-exclusive, non-transferable license to install and run the App on your supported Windows devices for your personal use during your authorized access period. Business licenses are for authorized users and internal purposes specified in the signed Order Form. The license does not transfer ownership of HELM software or trademarks. Account sharing, resale and providing hosted access to others are not permitted.

Third-party and open-source components remain governed by their own licenses. Those licenses prevail over inconsistent restrictions in this EULA. In particular, the distributed Qt/PySide6 components carry the applicable LGPL notices and replacement/relinking instructions. Nothing here prohibits lawful modification of those components or reverse engineering necessary to debug such modifications where their license permits it. Consult the notices distributed with the App for component-specific rights and source/replacement information.

For the remaining software provisions, "Customer" means you for Consumer use or the organization for Business use. References to an Order Form apply only when you have one. Consumer Terms take precedence over inconsistent business wording.

Full policies: https://helmsystemsinc.com/legal.

3. Accounts And Authorized Users

Normal App access may require an approved HELM account, completed desktop authentication, and a valid device session. Customer is responsible for its authorized users, account security, identity-provider configuration, device access, and prompt removal of access when a user is no longer authorized.

Account sharing is not permitted unless the Order Form expressly allows it. Customer may not exceed authorized user, device, organization, tenant, or usage limits.

4. App behavior and local data

The App provides features available in your installed release. A paused response service does not generate an answer. When enabled, questions may process relevant read-only context you have enabled, selected or attached, as described in the Privacy Policy. The App does not acquire permission to send messages or change connected sources merely because you ask a question.

The App may keep settings, Atlas files and indexes, user-managed memory, connector metadata and saved conversations on your device. Device-session credentials use Windows Credential Manager. A local copy is not necessarily encrypted by HELM: the current beta Conversation storage profile is plaintext. Account deletion on the website does not remotely erase local files or backups. Review the Privacy Policy and use local controls and operating-system deletion when removing local information. Keep backups of original material you need.

5. Updates And Changes

The App may check for, download, stage, and install updates. Updates may be required for security, compatibility, provider changes, licensing, or continued access. HELM may change, patch, replace, limit, or discontinue App features. No specific maintenance, support, uptime, compatibility, or update schedule is promised unless stated in a signed Order Form.

6. Output Rights

Subject to applicable law and third-party rights, Customer may use, copy, modify, publish, distribute, commercialize, and sell content generated by HELM in response to Customer's inputs. These Output rights do not grant any right to the App, HELM code, prompts, models, interfaces, branding, documentation, workflows, or other underlying HELM materials.

AI Output may not be unique, accurate, protectable, or non-infringing. Customer is responsible for review and use of Output.

7. Restrictions

Customer and its users may not:

• copy, modify, adapt, translate, distribute, publish, sell, resell, rent, lease, lend, sublicense, host, timeshare, or provide the App to another person or organization except as expressly allowed by an Order Form;
• reverse engineer, decompile, disassemble, break apart, decode, derive source code from, or create derivative works of the App, except only to the limited extent applicable law does not permit that restriction;
• bypass or interfere with authentication, licensing, account or device limits, rate limits, billing, updates, permissions, telemetry-minimization, security, or technical protection measures;
• extract, disclose, scrape, or replicate non-public code, prompts, models, architecture, workflows, credentials, provider configuration, or security information;
• remove or alter proprietary, copyright, trademark, signature, security, or attribution notices;
• use the App, HELM prompts, or non-public product behavior to build, train, evaluate, or improve a competing product or AI system;
• use the App to violate law or rights, commit fraud, create malware, steal credentials, phish, spam, gain unauthorized access, or harm a person, system, or provider; or
• use the App in nuclear, aviation, weapons, emergency-response, life-support, critical-infrastructure, or other high-risk environments where failure could reasonably cause death, bodily injury, or severe property or environmental harm.

8. Ownership And Confidentiality

HELM and its licensors retain all right, title, and interest in the App, service, source and object code, designs, prompts, workflows, models, interfaces, documentation, trademarks, logos, improvements, and related technology. No rights are granted except those expressly stated.

The App and its non-public code, architecture, prompts, security information, and technical operation are HELM confidential information. Customer must protect them using reasonable care and may disclose them only to authorized users who need access and are bound to protect them.

9. Third-Party Components And Services

The App may include or rely on third-party libraries, operating-system services, identity providers, cloud services, AI providers, Microsoft services, and update infrastructure. Third-party components may be governed by their own notices, licenses, terms, and privacy policies. HELM is not responsible for third-party services outside its reasonable control.

10. Feedback

Feedback is voluntary, non-confidential, and does not include Customer Content. Customer grants HELM a perpetual, worldwide, irrevocable, transferable, sublicensable, royalty-free right to use feedback without restriction or compensation.

11. Termination

This EULA continues for the applicable service or evaluation term. It terminates automatically when the applicable license or Order Form ends or if Customer materially breaches it. HELM may suspend or terminate the license immediately for nonpayment, unlawful use, security risk, provider requirement, or conduct likely to cause material harm.

Upon termination, Customer and its users must stop using and uninstall the App. Provisions that by their nature should survive will survive, including ownership, restrictions, confidentiality, feedback, disclaimers, liability limits, governing law, and miscellaneous terms.

12. No Warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE APP, SUPPORT, AND OUTPUT ARE PROVIDED "AS IS" AND "AS AVAILABLE." HELM DISCLAIMS ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, SECURITY, RELIABILITY, AVAILABILITY, AND ERROR-FREE OPERATION.

HELM DOES NOT WARRANT THAT OUTPUT IS ACCURATE, COMPLETE, LAWFUL, UNIQUE, PROTECTABLE, OR SUITABLE FOR CUSTOMER'S PURPOSES, OR THAT DEFECTS OR SUPPORT REQUESTS WILL BE RESOLVED.

13. Limitation Of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, HELM AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, LICENSORS, AND PROVIDERS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, SAVINGS, GOODWILL, DATA, CONTENT, BUSINESS OPPORTUNITY, OR BUSINESS INTERRUPTION.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, HELM'S TOTAL AGGREGATE LIABILITY ARISING FROM OR RELATING TO THE APP OR THIS EULA WILL NOT EXCEED THE GREATER OF (A) THE FEES CUSTOMER PAID TO HELM UNDER THE APPLICABLE ORDER FORM DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY OR (B) $100. Liability that cannot lawfully be limited is not limited.

14. Governing Law And Iowa Courts

This EULA is governed by Iowa law, without regard to conflict-of-law rules. The state courts located in Story County, Iowa, and the United States federal courts with jurisdiction over Story County, Iowa, have exclusive jurisdiction and venue. Customer consents to those courts and waives objections based on venue or inconvenient forum. Disputes will be resolved in court, not by mandatory arbitration. To the extent permitted by law, each party waives trial by jury.

15. Compliance

Customer will comply with applicable laws, including United States export controls, sanctions, anti-bribery, privacy, employment, and intellectual property laws. Customer is responsible for obtaining all rights and permissions needed for its users, devices, data, screen capture, files, and connected services.

16. Changes

HELM may update this EULA prospectively. Material changes will be communicated through the website, account system, installer, desktop application, email, order process, or another reasonable channel. Changes do not retroactively alter a signed Order Form unless it permits them or Customer agrees in writing.

17. Miscellaneous

This EULA, the Terms, the Privacy Policy, and the applicable Order Form are the complete agreement about the App. Customer may not assign this EULA without HELM's written consent. HELM may assign it in connection with a merger, acquisition, financing, reorganization, or sale of assets. If a provision is unenforceable, it will be enforced to the maximum extent permitted and the remaining provisions continue. A waiver must be in writing and applies only to the stated instance.

18. Contact

HELM Systems, Inc. 2700 Lincoln Way 350 Ames, IA 50014 United States support@helmstate.com

HELM Acceptable Use Policy

Version: September 7, 2026.

Use HELM lawfully, with permission to process the information you provide. Do not use it to exploit or endanger children, threaten people, facilitate violence or fraud, distribute malicious software, unlawfully discriminate, violate intellectual-property or privacy rights, expose another person's credentials, or evade sanctions and export controls.

Do not bypass authentication, account, payment, question, processing, indexing or security limits. Do not share or resell a personal subscription, automate bulk requests against Consumer endpoints, create accounts to evade restrictions, or interfere with service for others. Security research must avoid accessing other people's data or disrupting service; report suspected vulnerabilities privately to support@helmstate.com. This policy does not restrict rights granted by applicable law or an open-source license.

Do not submit passwords, authentication tokens, payment-card security codes, information you are prohibited from sharing, or protected health information requiring a HIPAA business associate agreement. HELM Consumer is not offered as a HIPAA service or a system for emergency, critical-infrastructure or other safety-critical decisions.

Do not use HELM to misrepresent AI output as verified fact, impersonate another person deceptively, or evade an instructor's assessment rules. You are responsible for deciding whether assistance is permitted and for reviewing output before using or sharing it.

HELM may restrict access proportionately to a violation or credible risk, and may act immediately for serious harm, abuse or legal requirements. Contact support@helmstate.com to report abuse or appeal an incorrect restriction. Do not include other people's sensitive content unless necessary and authorized. Reports and support communications are handled as described in the Privacy Policy.

HELM Cookies and Browser Storage Notice

Version: September 7, 2026.

HELM uses essential authentication, session, security and preference storage for sign-in, request protection and remembering choices. Blocking it may prevent account features. Browser persistence may keep you signed in until sign-out, expiration or storage clearance. Sign out after using shared computers.

Optional Google/Firebase analytics measures website interactions after consent. Decline it without losing essential account features, or withdraw consent through website privacy controls. Clearing cookies and local storage can remove choices and require you to choose again. This does not erase previously collected information; contact support for a privacy request.

Stripe, Microsoft and Google may use storage in their payment or authentication interfaces under their policies. HELM does not use advertising cookies or sell information for cross-context behavioral advertising. Essential accounting, billing and fraud-prevention records are not optional analytics cookies.

Read the Privacy Policy for data handling, retention and rights. Contact support@helmstate.com.

HELM Service Providers Notice

Version: September 7, 2026. This describes Consumer processing, not a negotiated business data-processing agreement.

Google/Firebase and Google Cloud provide authentication, hosting, Functions and database infrastructure. Data may include account, contact and session information, usage and billing references, request metadata, and transient content passing through hosted AI processing. Optional analytics follows consent. Privacy: https://policies.google.com/privacy.

Stripe provides payments, subscriptions, checkout, the billing portal and enabled tax calculations. It receives contact and billing information, payment details, amounts, subscription information and fraud-prevention signals. It may act independently for financial and legal obligations. Privacy: https://stripe.com/privacy.

OpenAI processes question/context requests and text for embeddings when used. Zero retention is not promised. API controls: https://developers.openai.com/api/docs/guides/your-data.

Microsoft provides optional sign-in and user-authorized connectors. It receives authentication and API-access information; source data remains governed by its account and organization permissions. Privacy: https://privacy.microsoft.com/privacystatement.

Not every provider receives every data category. Features determine the flow. Providers may process information in multiple countries. Contact support@helmstate.com for privacy or business contract questions. This notice is not a HIPAA agreement, international-transfer contract or inventory of every provider's own subcontractors.