This Privacy Policy explains how BAW International Inc. ("BAW," "we," "us," or "our"), the operator of the Helix Field field-service management platform (the "Service"), collects, uses, discloses, and protects information. Helix Field is offered to businesses in the United States only.
The Service involves two different kinds of data, and our responsibilities differ for each:
If you are an end customer of a business that uses Helix Field and you have questions about your data, please contact that business directly.
| Category | Examples | Source |
|---|---|---|
| Account & contact | Name, business name, email, phone, role (admin/dispatcher/technician), password (stored hashed) | You, at signup or when invited |
| Billing | Subscription plan, seat count, billing status, last-four/card brand, transaction records. Full card numbers are handled by Stripe and never stored by us. | You / Stripe |
| Business & job data | Your customers, properties, addresses, jobs, schedules, estimates, invoices, time entries, payroll inputs, notes, job photos, and e-signatures you or your crew enter | You and your users |
| Location | Property/job addresses; approximate or precise device location when a technician uses the mobile app for mapping, routing, or clock-in geofencing (only when enabled and permitted by the device) | You / device (with permission) |
| Device & usage | IP address, device/browser type, app version, log and diagnostic data, push-notification tokens, and general usage of features | Automatically |
Sensitive information. Precise geolocation may be considered sensitive under some state laws. We use it only to provide requested features (mapping, routing, and optional clock-in geofencing), never to build advertising profiles, and we do not use or disclose it for purposes other than providing the Service.
We do not use the end-customer data a subscribing business enters (which we hold as a processor) for advertising or to train third-party models. Our use, sharing, and sale of our own first-party account, usage, and device data is described in Section 5, along with your right to opt out.
We share information only as needed to run the Service, and with vendors ("sub-processors") bound by contract to protect it and use it only for us. Current sub-processors:
| Sub-processor | Purpose |
|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, and encrypted file storage (job photos, signatures) |
| Stripe | Subscription billing and payment processing; in-field customer card payments via Stripe Connect |
| Google Firebase | Push notifications to the mobile app |
| Mapbox & Geocodio | Address geocoding and maps |
| [Email/SMTP provider] | Transactional and account email delivery |
We keep a current sub-processor list here and will update it as it changes. We may also disclose information to comply with law, respond to lawful requests, protect our rights and users' safety, or in connection with a merger, acquisition, or sale of assets (with notice as required).
End-customer payments. When a subscribing business collects payment from its own customers through Helix Field, those funds settle directly to that business's own connected Stripe account. BAW does not take custody of, hold, or control those funds.
BAW may share, and may sell or "share" (as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws), certain information to or with third parties, including analytics, advertising, and data partners. This may include de-identified or aggregated data derived from use of the Service, and categories of personal information such as identifiers, commercial and usage information, and device/online-activity data associated with the businesses and individual users of Helix Field — that is, our own first-party data.
You have the right to direct us not to sell or share your personal information. To opt out, email privacy@helixfielddispatch.com with the subject "Do Not Sell or Share My Info," or use the "Do Not Sell or Share My Personal Information" link in our website footer. We also honor opt-out preference signals such as Global Privacy Control (GPC) sent by your browser as a valid opt-out. We will not discriminate against you for exercising this right.
Depending on your state, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to confirm whether we process it, and to be free from discrimination for exercising these rights. Because we act as a processor for end-customer data, we will forward or assist with requests that concern data controlled by a subscribing business, and that business will direct the response.
To make a request, email privacy@helixfielddispatch.com. We will verify your request and respond within the time required by applicable law (generally 45 days). You may use an authorized agent where the law allows.
We keep account and billing records for as long as your account is active and as needed for legal, tax, and audit purposes. Business and end-customer data is retained while your subscription is active; on termination we will return or delete it on request, subject to a short wind-down window and legal retention requirements. Backups are purged on a rolling schedule. A more detailed retention schedule is available on request.
We use reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit (TLS) and at rest, per-tenant data isolation, least-privilege access controls, secrets management, and audit logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a breach affecting your information occurs, we will notify affected parties as required by law.
Helix Field is a business tool not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child provided us information, contact us and we will delete it.
We may update this Policy. We will post the new effective date at the top and, for material changes, provide additional notice as required. Your continued use of the Service after an update means you accept the revised Policy.
BAW International Inc.
Attn: Privacy — Helix Field
[BAW mailing address — add before launch]
Email: privacy@helixfielddispatch.com