Privacy Policy

Last Updated: Aug 21, 2026

HELIOSX AI PTE. LTD., a company incorporated in Singapore ("HeliosX", "we", "us", or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy describes our policies regarding the collection, use, and disclosure of personal data and the choices you have associated with that information. Capitalized terms used but not defined in this Privacy Policy have the meaning given to them in our Terms of Service.

This Privacy Policy applies to all personal data collected through any written, electronic, or oral communications, as you:

•Access the website located at https://heliosx.ai/ and all corresponding webpages and websites that link to this Privacy Policy (the "Site");

•Interact with applications on third-party websites and services, if those applications include links to this Privacy Policy;

•Utilize our API services and platform (the "Service").

Before using our Site and Service, please carefully read our Terms of Service and this Privacy Policy. By using this Site or Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy and our Terms of Service. If you do not feel comfortable with any part of this Privacy Policy or our Terms of Service, you should not use or access our Site or Service.

We may update this Privacy Policy from time to time. For any changes that materially modify the Customer’s rights or obligations, including material changes to how we collect, use, or disclose personal data or changes that materially impact privacy rights, we will provide thirty (30) days’ advance notice via email or in-product notification. We may also post the updated Privacy Policy on our Site, and the "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Site or Service following receipt of notice constitutes consent to the changes. If you do not agree, you must stop using the Site and Service.

1. How the Service Processes Data

HeliosX provides an AI inference procurement and routing platform. When you use the Service, HeliosX receives your API request, processes and transmits it to the selected upstream AI model provider, and returns the provider’s response to you.

•Service Operation. We may collect, process, store, and retain Inputs, Outputs, account information, transaction data, logs, and other service data as reasonably necessary to provide, operate, secure, troubleshoot, and improve the Service; prevent fraud and abuse; administer accounts and billing; provide support; comply with legal obligations; and enforce our agreements.

•Retention and Configuration. Data handling and retention may vary according to your account configuration, the selected provider or model, operational and security requirements, contractual commitments, and applicable law. Additional terms may be set out in an Order Form, Data Processing Agreement, or other written agreement.

•Upstream Provider Handling. Upstream providers process request content under their own terms and privacy policies. HeliosX does not control their data practices. You should review the applicable provider documentation and confirm that the selected model and configuration meet your requirements.

2. Collection of Personal Data

We collect personal data when you use our Site and our Service. Personal data is any information that relates to you, identifies you personally, or could be used to identify you, including but not limited to: your name, mailing address, email address, and telephone number.

2.1 Personal Data You Voluntarily Provide to Us

The personal data we collect from you may include:

•Information that you provide by filling in forms on our Site or Service, including information provided at the time of registering and creating an account, such as your name, company name, email address, and contact details.

•Billing and payment information, including credit card or other payment details, processed through our third-party payment service providers.

•Records and copies of your correspondence (including email addresses), if you contact us.

•Your responses to surveys that we might ask you to complete for internal purposes.

•Details of transactions you carry out through our Site, including credits purchases and usage records.

2.2 Billing and Usage Metadata

For each API transaction processed through our Service, we may collect and retain transaction and usage information such as timestamps, model identifiers, token counts, request status codes, account identifiers, billing records, and other technical, account, request, or response data reasonably necessary to operate, secure, administer, support, and improve the Service.

2.3 Derived Feature Metadata and Input Categorization

We may process Inputs and related service data to generate metadata about API requests ("Derived Feature Metadata") for internal analytics, service reliability, routing optimization, abuse prevention, billing and account administration, Customer-requested reporting, and product planning. Derived Feature Metadata may include task category, category source, language, prompt length bucket, boolean indicators such as whether a request appears to contain code, mathematical notation, or URLs, turn number, categorizer version, and Customer-provided routing or tenant tags such as X-Task-Category or X-Tenant-Tag.

We may store, associate with an account, and retain Derived Feature Metadata in accordance with Section 7, our Terms of Service, and any applicable written agreement.

If you supply request metadata, labels, tenant tags, routing tags, or custom headers, including X-Task-Category or X-Tenant-Tag, you are responsible for ensuring that such values are accurate, non-sensitive, and do not include personal data, regulated data, confidential content, or raw prompt or completion content unless you have all required rights and lawful basis. We may process such tags as part of the Service and related analytics.

We do not publicly disclose Customer-specific API transaction metrics or Derived Feature Metadata unless the Customer has agreed otherwise.

2.4 Personal Data Collected Automatically

As you navigate through and interact with our Site or Service, we may use automatic data collection technologies to collect certain information about your device, browsing actions, and patterns, including:

Details of your visits to our Site, including traffic data, location data, log files, pages you view, and other communication data and resources that you access and use on the Site.

Information about your computer and internet connection, including your IP address, operating system and browser type, time zone setting, and other unique personal or online identifiers.

Information about your preferences to make your use of the Site more productive, via the use of Cookies.

2.5 Cookies and Other Tracking Technologies

We may use cookies, embedded scripts, and other similar tracking technologies ("Tracking Technologies") to collect additional personal data automatically as you interact with the Site and to personalize your experience. These technologies help us recognize you, customize or personalize your experience, and analyze the use of our Service.

The following types of cookies are used on our Site:

•Strictly Necessary Cookies. These cookies are essential to enable you to use our Site. For example, they allow you to access secure areas. This category of cookies cannot be disabled.

•Functional or Preference Cookies. We use functional cookies to remember your choices and provide you with enhanced features and personalized content. While these cookies can be disabled, this may result in reduced functionality.

•Performance or Analytic Cookies. These cookies collect passive information about how you use our Site, including pages visited and links clicked. We use this information to improve and optimize our Site and Services. You may choose to disable these cookies.

Your browser may provide you with the option to refuse some or all browser cookies. You can find more information about how to change your browser cookie settings at https://www.allaboutcookies.org/.

2.6 Analytics

We may use third-party analytics services (such as Google Analytics) to monitor and analyze the use of our Site. Google Analytics is a web analytics service offered by Google LLC that tracks and reports Site traffic. For more information on Google's privacy practices, please visit: https://policies.google.com/privacy. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout.

3. How We Use Personal Data

The purposes for which we may use your personal data and other service data include:

Providing, operating, administering, maintaining, and supporting the Service.

Processing API requests and returning responses from upstream providers.

Administering accounts, authenticating users, processing payments, and maintaining transaction records.

Generating and analyzing Derived Feature Metadata and preparing billing, account, reliability, routing, security, abuse-prevention, and product-planning reports.

Communicating with you, including responding to inquiries and sending Service-related notices.

Improving and developing our Site, Service, infrastructure, and customer experience.

Monitoring, investigating, and preventing fraud, abuse, security incidents, and violations of our Terms of Service.

Complying with legal and regulatory obligations and protecting the rights, privacy, safety, and property of HeliosX, our customers, and others.

3.1 Aggregated and De-identified Information

We may aggregate or de-identify personal data and other service data for billing reconciliation, account administration, service reliability, routing optimization, security, abuse prevention, analytics, and product planning. We may share aggregated or de-identified information with our affiliates, subsidiaries, partners, and service providers for legitimate business purposes. We do not publicly disclose Customer-specific API transaction metrics or Derived Feature Metadata unless the Customer has agreed otherwise.

4. How We Share and Disclose Your Personal Data

We may share or disclose your personal data and other service data in the following circumstances:

•Upstream AI Model Providers. When you make an API request through HeliosX, your request content and related data are transmitted to the selected upstream provider. The provider may process, store, log, retain, review, or otherwise use such data under its own terms of service, privacy policy, acceptable use policy, and contractual arrangements. We encourage you to review the applicable provider’s data practices before selecting a model.

•Payment Processors. We share necessary billing information with third-party payment processors to facilitate transactions. These processors handle information under their own terms and our applicable arrangements with them.

•Service Providers. We may engage companies and individuals to host, operate, secure, support, analyze, or otherwise facilitate our Site and Service. These providers may access personal data as needed to perform services on our behalf and are subject to applicable contractual obligations.

•Affiliates and Corporate Partners. We may share personal data with our subsidiaries, affiliates, and partners for purposes consistent with this Privacy Policy.

•Corporate Transactions. We may disclose or transfer information in connection with a merger, divestiture, restructuring, reorganization, dissolution, financing, acquisition, or sale or transfer of some or all of our assets.

•Analytics. We may share aggregated or de-identified information about Site usage, account activity, transaction data, or Derived Feature Metadata with affiliates, partners, and service providers for legitimate business purposes.

•Consent. We may disclose your personal data for other purposes with your consent.

•As Required by Law. We may preserve and disclose information in response to lawful requests or when reasonably necessary to comply with legal or regulatory process, enforce our agreements and policies, respond to claims, investigate wrongdoing, or protect the rights, property, safety, and security of HeliosX, our customers, users, employees, and the public.

We do not sell your personal data. We do not share your personal data with third parties for their own direct marketing purposes.

5. Upstream AI Model Provider Data Policies

HeliosX aggregates AI inference services from multiple cloud providers. When an API request is routed to an upstream provider, that provider’s own data handling policies and applicable contractual terms govern its processing of request content and related data. Provider practices may differ by provider, model, region, account type, configuration, and use case, and may include storage, logging, retention, review, or other processing.

HeliosX does not control and cannot guarantee the data practices of upstream providers. Customers should review the terms, privacy notices, and data processing agreements of applicable providers, including Microsoft Azure or Azure OpenAI Service, Amazon Web Services or AWS Bedrock, Google Cloud Platform or Vertex AI, and other providers available through the platform.

Customers with specific contractual, regulatory, security, data residency, or retention requirements should contact privacy@heliosx.ai before using the relevant model so that available configurations and contractual options can be evaluated.

6. Data Security

We implement and maintain physical, technical, and administrative measures designed to protect personal data and other service data from accidental loss and unauthorized access, use, alteration, and disclosure. These measures include:

•Encryption. Data transmitted between your systems and HeliosX, and between HeliosX and upstream providers, is protected in transit using TLS 1.2 or higher. Stored data is encrypted at rest where appropriate to the nature of the data and the applicable system.

•Access Controls. Access to customer data is restricted to authorized personnel based on business need, with authentication and role-based access controls.

•Infrastructure Security. Our infrastructure is hosted on enterprise-grade cloud platforms and protected through network controls, monitoring, logging, and other security practices appropriate to the Service.

•Data Governance. We maintain policies and processes for data access, retention, deletion, incident response, and vendor oversight, taking into account the nature of the data, the Service configuration, contractual commitments, and applicable law.

The safety and security of your information also depends on you. Where we have given you, or where you have chosen, a password for access to certain parts of our Site, you are responsible for keeping this password confidential. You should not share your password with anyone.

No method of transmission over the internet or electronic storage is completely secure. Although we take measures designed to protect personal data, we cannot guarantee absolute security. Any transmission of personal data is at your own risk, and we are not responsible for circumvention of privacy settings or security measures contained on the Site.

7. Data Retention

•API Content and Service Data. Retention of Inputs, Outputs, logs, and related service data may vary based on account configuration, the selected provider or model, operational and security requirements, support needs, contractual commitments, and applicable law. HeliosX may retain such data for as long as reasonably necessary for the purposes described in this Privacy Policy and the Terms of Service, or as otherwise specified in an applicable Order Form, Data Processing Agreement, or other written agreement.

•Billing and Transaction Data. We retain billing, transaction, tax, and accounting records for as long as reasonably necessary for legitimate business and legal purposes, which may typically be five to seven years from the relevant transaction or such other period as required by law.

•Derived Feature Metadata. We may retain Derived Feature Metadata for account administration, reporting, service reliability, routing optimization, security, abuse prevention, analytics, product planning, dispute resolution, and enforcement of our agreements, subject to applicable law and any written contractual commitments.

•Account Information. We retain account information for the duration of an active account and for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent fraud, provide support, and enforce our agreements.

•Server and Security Logs. We retain server access, security, audit, and debugging logs for periods appropriate to security monitoring, incident investigation, troubleshooting, service integrity, contractual requirements, and applicable law.

•When personal data is no longer reasonably required, we and our service providers will delete, destroy, erase, or anonymize it as permitted or required by applicable law and our contractual commitments.

8. Your Rights and Choices

8.1 Marketing Communications

•If you do not wish to receive promotional or marketing communications from us, you can opt out by sending an email to privacy@heliosx.ai or by following the "unsubscribe" instructions included in such messages. This opt-out does not apply to transactional or Service-related communications.

8.2 Keeping Your Personal Data Accurate and Deletion

•You can review and change your personal data by logging into the Site and visiting your account profile page. You may also send us an email at privacy@heliosx.ai to request access to, or to correct, any personal data that you have provided to us.

•If you no longer wish to use our Service, or no longer wish to have your personal data be processed, you may request to delete your account and the information in your account by emailing us at privacy@heliosx.ai. When your account is deleted, all associated personal data is deleted, unless we are required to maintain it for regulatory and compliance purposes or for a legal or business necessity.

8.3 Rights Regarding Your Personal Data

•Depending on where you live and the laws that apply in your jurisdiction, you may have certain rights regarding your personal data. While we strive to comply with all applicable laws, we may decline a request if we have a lawful reason for doing so. To exercise your rights, you or your authorized agent may submit a request by email at privacy@heliosx.ai. We may request additional information to verify your identity before processing your request.

•Right to Know. You have the right to know what personal data HeliosX processes about you, including categories, sources, purposes, and third-party disclosures.

•Access and Data Portability. You have the right to request a copy of the personal data we process about you, subject to certain exceptions. You may also have the right to export your information.

•Deletion. You have the right to request that we delete personal data we have collected from you, subject to certain exceptions.

•Correction. You have the right to request that we correct inaccurate personal data we have retained about you.

•Objection. You have the right to object to processing of your personal data, subject to certain exceptions.

•Restriction. You have the right to restrict our processing of personal data in certain circumstances.

•Withdrawal of Consent. Where our processing is based on your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent provided before your withdrawal.

•Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

•Sale of Personal Data. We do not "sell" your personal data as that term is defined by applicable laws and regulations.

9. Integration of Third-Party Platforms and Services

•The Site may be linked to, rely on, and be integrated with websites, applications, interfaces, services, and platforms operated by other companies, including upstream AI model providers and third-party services. We are not responsible for the privacy practices of such third parties. Once you leave this Site via a link or access a third-party service, you should check applicable privacy policies to determine how related companies process personal data they may collect about you. This Privacy Policy applies solely to information collected by HeliosX.

10. Eligibility

•Our Service is intended for business and enterprise use. This Site is offered and available to users who are 18 years of age or older and who have the legal capacity to form a binding contract. By using the Site, you represent and warrant that you meet these requirements. If you do not meet these requirements, you must not access or use our Site or Service.

11. International Data Transfers

•HeliosX is operated by HELIOSX AI PTE. LTD., a Singapore-based company. Your personal data may be transferred to our servers in Singapore or other countries where our upstream providers and infrastructure are located.

•When information is transferred outside the European Economic Area ("EEA") or the United Kingdom, we ensure it benefits from adequate legal protection by relying on: (1) adequacy decisions from the European Commission under Article 45 of the GDPR; and/or (2) standard contractual clauses approved by the European Commission under Article 46 of the GDPR.

•By using our Service, you acknowledge and consent to the transfer and processing of your personal data in these jurisdictions. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.

12. Governing Law

•This Privacy Policy is governed by the laws of Singapore, without regard to conflict of law principles. Except where applicable data protection laws provide non-waivable rights, complaint mechanisms, or regulatory remedies, any dispute arising out of or relating to this Privacy Policy is subject to the dispute resolution provisions in the Terms of Service, including binding arbitration administered by the Singapore International Arbitration Centre (SIAC) in Singapore.

13. Additional U.S. State Disclosures and Legal Bases for Processing Under the GDPR

•The GDPR and certain U.S. state privacy laws (including the California Consumer Privacy Act / California Privacy Rights Act, and similar laws in other states) require specific disclosures. The information below provides additional details about the categories of personal data we collect and how we use and disclose that information.

13.1 Categories of Personal Data

•We collect the following categories of information, as described above:

•Identifiers, such as your name, company name, contact details, IP address, and other device identifiers.

•Commercial information, such as your transaction and billing history.

•Network activity information, such as how you interact with our Service, including pages viewed and links clicked.

•Inferences and non-content derived feature information, such as task categories, category source, language, length buckets, boolean content-shape indicators, turn number, categorizer version, and Customer-provided task or tenant tags.

•Communication information, such as your contact information when you send us email.

•Geolocation data, such as the general area from which your device accesses our Service based on your IP address.

•Your account credentials.

13.2 Use of Personal Data

•We use this information for the following purposes, as described above:

•Provide, analyze, maintain, secure, and support our Service. Legal basis: performance of a contract, legitimate interests, and compliance with legal obligations, as applicable.

•Generate and analyze Derived Feature Metadata and prepare billing, account, reliability, routing, security, abuse-prevention, and product-planning reports. Legal basis: legitimate interests and performance of a contract.

•Communicate with you, including to send information about our Service and events. Legal basis: consent, legitimate interests, or performance of a contract, as applicable.

•Prevent fraud, illegal activity, or misuse of our Service and protect the security of our systems. Legal basis: legitimate interests and legal obligations.

•Comply with legal obligations and protect rights, privacy, safety, or property. Legal basis: legitimate interests and legal obligations.

13.3 Disclosure of Personal Data

•We may disclose this information in the following circumstances, as described above:

•Upstream AI model providers, to process your API requests.

•Vendors, service providers, and affiliates, to process in accordance with our instructions.

•Payment processors, to facilitate billing transactions.

•Government authorities or other third parties, for the legal reasons described above.

•Parties involved in corporate transactions.

13.4 California Residents (CCPA/CPRA)

•If you are a California resident, you may have additional rights including the right to know, the right to delete, the right to correct, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination. We do not sell or share your personal information as defined under the CCPA/CPRA. To exercise any of these rights, please contact us at privacy@heliosx.ai.

13.5 Data Processing Agreement

•Enterprise customers who require a Data Processing Agreement (DPA) in compliance with the GDPR or other applicable data protection regulations may request one by contacting us at legal@heliosx.ai.

14. Changes to This Privacy Policy

•We may update this Privacy Policy from time to time. For any changes that materially modify the Customer’s rights or obligations, including material changes to how we collect, use, or disclose personal data or changes that materially impact privacy rights, we will provide thirty (30) days’ advance notice via email or in-product notification. We may also post the updated Privacy Policy on our Site, and the "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Service following receipt of notice constitutes consent to the changes. If you do not agree, you must stop using the Service.

15. Contact Us

•If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

•HELIOSX AI PTE. LTD.

•Country of Incorporation: Singapore

•Email: privacy@heliosx.ai

•Website: https://heliosx.ai/

•For data protection or privacy-specific inquiries, you may also contact our Data Protection Officer at: dpo@heliosx.ai.