Privacy, terms and how we handle your data.

Privacy Policy

What we collect

• Account details: your email address and, if you verify it, your mobile number.
• Business profile: company details, capability statements, past projects and preferences you enter so Helm can score opportunities for you.
• Usage basics: which opportunities you view and track, so your dashboard, watchlist and reminders work.
• Billing: handled by Stripe. We never see or store your card number.

What we use it for

One purpose: running Helm for you. Your profile is used to score tenders against your business, send the digests and reminders you turn on, and nothing else. We do not sell personal information, we do not share it with advertisers, and we do not use your business profile to train AI models.

Who touches your data

• Supabase (database and authentication), Sydney region.
• Stripe (payments and billing).
• Resend (transactional email such as digests and reminders).
• Twilio (one-time codes for mobile verification).
• OpenAI (AI scoring and drafting). Text from your capability statement, public tender listings, and tender documents you upload is processed to produce scores, the compliance matrix and drafts. API data is not used by OpenAI to train models.

Tender documents you upload

Documents you upload into a Bid Workspace are your own copies, obtained under your own portal registration — Helm never downloads tender documents on your behalf. They are stored privately per account in the Sydney region, are never shared between accounts, and are deleted 90 days after the tender closes (or immediately when you delete them or your account).

Screenshots on support tickets

Screenshots you attach to a support ticket are stored privately in the same Sydney-region storage, visible only to you and the Helm team, and are deleted 90 days after the ticket closes.

Your choices

Every marketing and digest email carries an unsubscribe control, as the Spam Act requires. You can ask us to export or delete your account and its data at any time via the contact form and we will action it within 30 days.

Terms of Service

The service

Helm indexes publicly available government procurement notices and scores them against the business profile you provide. Helm links to source portals for official documents and lodgement. The source portal is always authoritative: closing dates, documents and conditions can change there at any time, and you are responsible for verifying details before you rely on them.

Scores are guidance, not advice

Relevance scores, Win Readiness Scores and AI-drafted text are decision support. They are itemised so you can check our reasoning, and they can be wrong. Bid decisions, tender responses and their outcomes are yours.

Billing and cancellation

Paid tiers bill monthly (or annually at a discount) in Australian dollars through Stripe. Prices are shown ex GST with the GST-inclusive total alongside; GST is added and itemised at checkout and on your invoice. There is no lock-in: cancel from the billing portal at any time and your tier runs to the end of the paid period. Prices can change with 30 days notice by email.

Fair use and liability

One account per business, no scraping or reselling of Helm data, no attempts to break or overload the service. Helm is provided as is. To the extent the law allows, AI Compass Pty Ltd is not liable for lost profits or missed opportunities arising from use of the service; where liability cannot be excluded, it is limited to the amount you paid in the previous 12 months. Nothing in these terms excludes rights you hold under the Australian Consumer Law.

Australian Privacy Principles

We run Helm in line with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth). In practical terms: we collect only what the service needs (APP 3), we tell you what we collect and why on this page (APP 1 and 5), we use it solely to provide Helm (APP 6), we do not send personal information overseas except to the processors listed above under contractual safeguards (APP 8), we take reasonable steps to secure it (APP 11), and you can access or correct your information by asking (APP 12 and 13). Complaints go first to us via the contact form; if we cannot resolve yours, you can raise it with the OAIC at oaic.gov.au.

Data residency

Your account data and business profile live in Australia: the database and authentication run in Supabase's Sydney region (AWS ap-southeast-2), and the application is hosted in Australia. Two categories of data leave the country in transit to processors: payment details go to Stripe, and text being scored or drafted is processed by OpenAI in the United States. Neither is stored by us offshore. If a future customer or contract needs stricter residency, talk to us before signing anything.