01
Who we are and what this covers
Phantom Helix is a registered business name operated by Yuhao Jian, an Australian sole trader, ABN 52 512 969 796. In this policy, "Phantom Helix", "we", and "us" refer to that business.
This policy covers PhantomHelix.com, SIERRA Desktop and SIERRA Cloud, Helix, Phantom Agent, billing, support, access requests, product email, and the newsletter. It describes the current service rather than unshipped retention, residency, certification, or access controls.
We do not sell personal information. We do not use investigation content to train or fine-tune models, to evaluate or optimize models or prompts, or for general human quality review. A user-authorized review of one run for a specific support issue is treated as support, not as a secondary use of the investigation.
02
Information we handle
Account and access information
Email address, account identifiers, authentication records, organization, role, intended use, target categories, jurisdiction, expected volume, access-review status, and information you add to an access request.
Account data
Investigation information
Questions, targets, instructions, follow-ups, tool inputs and results, public-source extracts, model requests and responses, reports, graph nodes and edges, reviews, downloads, media, and generated files. This information may concern people who do not have a Phantom Helix account.
Customer content
Service and security information
Run identifiers, status, timing, limits, usage, errors, browser and device information, IP-derived abuse-prevention records, application logs, and content-free lifecycle telemetry.
Operational data
Billing and communications
Transaction and subscription records supplied by Stripe, support messages, transactional-email delivery records, and newsletter subscription information. Phantom Helix does not receive full card numbers or CVCs.
Business records
Where information comes from
We receive information directly from account users and customers, from their organizations, from public records and public websites, from customer-directed APIs and research sources, and from service providers that operate the product. Investigation information is often collected indirectly because the customer chooses the subject and purpose of the research.
03
How each product handles data
SIERRA Desktop
Local case files, graphs, and notes stay on the user's device by default. Data leaves the workspace when the user signs in to a cloud feature, invokes an external service, or otherwise chooses to transmit it.
Local by default
Helix
Helix stores account, organization, membership, invitation, case, lead, graph, and operational records needed for the hosted workspace. Sensitive Org Mode encrypts protected case content in the browser when that mode is enabled; ordinary Helix data must not be assumed to have that protection.
Hosted service
Phantom Agent
Phantom Agent stores the submitted investigation, intermediate service state, source and tool results, report, graph, assets, and operational metadata so the run can execute and its results can be displayed. Model and research-source requests are cloud processed.
Cloud processed
Cloud Invokers and capabilities
When a user runs a cloud-backed tool, the request fields used by that tool may be sent to its external API, website, registry, or data source. The receiver and country depend on the selected capability and may be outside Australia or the user's country.
User directed
04
Purposes and data-protection roles
We use information to provide and secure the service, authenticate users, execute requested investigations, display and share results, administer Phantom Agent access, process payments, send requested messages, prevent abuse, provide authorized support, comply with law, and maintain required business records.
B2B investigation content
For a professional customer's investigation content, the customer normally decides why and how the investigation is performed and acts as controller. Phantom Helix processes that content to provide the requested service and normally acts as processor. The customer is responsible for its authority, legal basis, notices, source terms, and decisions made from the results.
Phantom Helix business data
Phantom Helix acts as controller for account, authentication, billing, marketing, product-security, abuse-prevention, access-review, support, and required business records. Depending on applicable law, those activities rely on performing a contract, legitimate business and security interests, consent where required, or legal obligations.
05
Providers and international transfers
Core Phantom Agent hosting was last verified as primarily United States-based. Firebase Authentication is a Google-managed global service. Model requests and customer-directed research requests may be processed in the United States or other countries used by the selected provider or source. Phantom Helix does not promise Australian or EU data residency.
Core providers include Google Cloud and Firebase, Ollama, Stripe, PostHog, Google reCAPTCHA, Upstash, Resend, and Mailchimp. Their purpose, data categories, location information, and policy links are listed in the Service Providers and Research Sources directory.
An external research source may operate as an independent controller under its own terms rather than as a Phantom Helix subprocessor. The directory distinguishes core service providers from sources selected to answer a research request.
06
Retention, sharing, and access
Retention and deletion
Retention differs by record and service. Investigation records are kept while needed to execute and present a run, support follow-up, and apply configured lifecycle settings, unless a user deletes an eligible terminal personal run earlier. Phantom Agent does not currently promise one fixed deletion period that removes every class of run record and derivative.
Security, access-review, support, billing, tax, and other required business records may be kept longer for their separate purposes. An account-wide self-service export and deletion workflow is not currently available; requests can be made using the contact details below.
Public sharing
A public result is created only when a user chooses to share a run. Anyone with the bearer link may be able to view the shared snapshot. Current share links default to 30 days and cannot exceed 90 days, and the owner may revoke access. Search-engine exclusion is requested but is not an access-control guarantee.
Support and privileged access
Routine support does not use investigation content. If content is needed to resolve a specific issue, the account user must explicitly authorize access to the identified run. Separate limited access may be required to investigate a security incident, comply with law, or protect the service and its users.
07
Website analytics, security, and email
Public-site analytics
Public marketing pages may use PostHog to collect pseudonymous page views, interactions, browser information, and session recordings. The configured PostHog project region is deployment-specific. Blocking the analytics host or browser storage may prevent this collection.
Public pages
Private product routes
PostHog page views, automatic interaction capture, and session replay are disabled on Helix and Phantom Agent private routes, including run, report, graph, result, share, and invitation views. The Phantom Agent access-request form sends only manual, content-free funnel stages with bounded campaign, interface revision, requester-state, placement, and coarse failure metadata. The event contract excludes form fields, investigation content, page URL and referrer properties, and recordings. Investigation content is also excluded from dedicated lifecycle analytics.
Limited funnel only
Authentication and abuse prevention
Firebase generates and verifies one-time sign-in links, Resend delivers the branded login email, and Google reCAPTCHA and Upstash process browser, IP, risk, and hashed rate-limit identifiers for abuse prevention. Rate-limit state may expire within 24 hours; application and security logs follow separate operational retention.
Security use
Resend processes recipient addresses and message content to deliver login links, invitations, access notices, and run-status messages. Newsletter addresses and subscription status are sent to Mailchimp. Newsletter recipients can unsubscribe using the link in a message.
Service providers
08
Rights, complaints, and contact
Account users and customers
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or portability of personal information. We may need to verify identity and authority and may retain information where law or another permitted purpose requires it.
People described in an investigation
The B2B customer is normally the controller for investigation content. Phantom Helix will route or assist with a properly scoped request where possible and lawful, without unnecessarily revealing another customer's investigation. Legal and regulator requests are handled separately.
Contact and complaints
Email [email protected] or write to Privacy Contact, Phantom Helix, PO Box 6437, South Yarra VIC 3141, Australia. Please describe the account or data involved and the requested action. We will verify and respond within the timeframe required by applicable law.
If a concern is not resolved, you may be able to complain to the Office of the Australian Information Commissioner or the data protection authority that applies where you live. This policy does not claim that every privacy regime applies to every processing activity.
Changes
We update this policy when products, providers, or data practices materially change. The date above identifies the current published version.