PRIVACY DIRECTIVE

01. OPERATOR IDENTITY & SCOPE

HELIOS (“we”, “us”, or “our”) is an open-source and developer-focused AI governance project operated by Satvik Anand. For all inquiries, data deletion requests, or security matters regarding this public website and beta waitlist, the primary contact is:

02. STRICT DATA MINIMIZATION (WHAT WE COLLECT)

In accordance with principles of data minimization under India's Digital Personal Data Protection Act (DPDP) 2023 / DPDP Rules 2025 and the European Union General Data Protection Regulation (GDPR), this public landing page requests and collects only the minimal information required to evaluate and communicate beta access:

• Operator Email: Used to communicate waitlist status and admission instructions.
• Industry / Sector: Used to understand your agent environment (e.g. AI Agent Systems, Cloud Infra, Cybersecurity).
• Agent Use Case: Brief description of the autonomous AI agent architecture you are governing.

We explicitly DO NOT collect phone numbers, passwords, physical locations, financial accounts, or social profiles. We do not enrich your submission with external data.

03. TECHNICAL & SECURITY TELEMETRY

When interacting with the serverless endpoint, ephemeral network information is processed purely for operational defense:

• Client IP Address: Processed ephemerally in memory for sliding-window rate limiting (maximum 5 requests per 10-minute window) to prevent denial-of-service and bot spam. IP addresses are not stored in a persistent database.
• Diagnostic Logs: Server logs record generated Request IDs, HTTP status codes, latency, and timestamp. Raw email addresses are never output to standard log streams.

04. THIRD-PARTY PROCESSORS

We do not sell, rent, or lease personal information. To operate the waitlist dispatch pipeline, the following service providers process data solely on our instructions:

• Vercel Inc.: Hosting provider and serverless compute environment.
• FormSubmit.co: Free form processing and email forwarding pipeline used to deliver submissions directly to the operator inbox (satvikndxd@gmail.com).
• Resend Inc.: Secondary transactional delivery pipeline (if configured).

05. DATA RETENTION & LIFECYCLE

Submitted email addresses are delivered to the operator's secure mailbox (satvikndxd@gmail.com). We retain applicant email addresses only for the duration of the beta program evaluation period (up to 365 days from submission) or until you request deletion. We do not claim automated background database deletion because no separate marketing database is maintained.

06. COOKIES & TRACKERS (ZERO-TRACKING POLICY)

This website operates on a zero-tracking architecture. We do not set advertising cookies, analytics cookies, session recording tools (such as Hotjar or FullStory), or behavioral retargeting pixels (Meta, Google, TikTok). Because no non-essential cookies are utilized, no intrusive consent pop-up is required or displayed.

07. USER RIGHTS & DELETION REQUESTS

Regardless of your geographic location, you retain the right to:

• Request confirmation of whether your email address is on file.
• Request immediate and permanent deletion of your submission.
• Withdraw consent for beta access communications.

To exercise any of these rights, email satvikndxd@gmail.com with the subject line [HELIOS PRIVACY REQUEST]. We verify and process deletion requests manually within thirty (30) calendar days.

08. ACCURATE LEGAL DISCLOSURE

We do not make unsubstantiated claims such as “100% unbreachable security” or “universally certified compliance.” Instead, we build HELIOS with defensive, privacy-by-default software engineering, transparent operational practices, and verifiable control planes.