Security and privacy
What you tell us is small: an email address and the territories you watch. Here is where it lives and what we do with it.
Your pursuit list is private
The records are public. Which territories and utilities you watch is not. Nobody outside your account can see your territories, your exports or your "Wrong record?" reports, and we don't sell or share them.
What we store
- Your email address and the territories you set.
- How you use the site and app: pages, clicks and session recordings in PostHog, with password and payment fields masked. We record this to fix what confuses people.
- Where you came from (the link, campaign or referrer) on your first and latest visit.
- Reports you send us ("Wrong record?", call requests, feedback).
Who processes it
- Fly.io hosts the site and app (United States).
- Convex runs the database and the API.
- PostHog (EU cloud) stores analytics and session recordings.
- Resend sends our email.
- When billing opens, Stripe processes payments. We never see or store card numbers.
How it is protected
- HTTPS everywhere, with HSTS and a strict content security policy on this site.
- Sign-in by a one-time email code; no passwords to leak.
- Secrets are kept in a vault and never in code.
- Automated traffic is labelled and kept out of our numbers, and probing requests are refused.
Deleting your data
Ask, and we delete your account, your territories and the analytics tied to your email. Use the form on Book a call and say "delete my data", or write to Helios One Oy, 3075 Clay St, San Francisco, CA 94115. The full policy is on Privacy.
Found a security problem?
Tell us through Book a call (put "security" in the note) and we'll reply to the email you give us. Please don't test against other customers' data.