Privacy Policy

Introduction

Innovation Studio Inc. (“Heliz,” “we,” “us,” or “our”) provides a workspace-based business platform for teams to manage work items, projects, and related business data. This Privacy Policy describes how we collect, use, share, and protect information when you use the Heliz web application, mobile applications (including Heliz for iOS), and related services (collectively, the “Services”).

Heliz is designed for business and organizational use. If you access Heliz through a customer organization, your organization and its administrators may control how your account is provisioned and how certain data is used within the workspace.

Information We Collect

The information we collect depends on how you use the Services and how your organization configures its workspace.

Account and workspace information

When you sign in or are invited to a workspace, we may collect information such as your name, email address, profile details, authentication identifiers, workspace and organization membership, role assignments, and preferences you set within the product.

Work item, project, and business data

Heliz stores the business data your organization enters into the platform, including work items, projects, assignments, statuses, estimates, financial summaries, custom fields, and other workspace configuration chosen by your organization.

Comments, attachments, and user-generated content

If your organization uses these features, we may process comments, rich descriptions, file attachments, images, and other content you or your colleagues submit in connection with work items and projects. This content is generally controlled by your organization and its administrators.

Usage, diagnostics, logs, and device/app information

We collect technical and operational information needed to operate, secure, and improve the Services. This may include log data, IP address, browser or app version, device type, operating system, timestamps, feature usage, error reports, and performance diagnostics.

AI features / Ask Heliz

If your organization enables AI-assisted features such as Ask Heliz, we may process prompts, workspace context needed to answer a request, and generated responses. AI features are provided to assist users within the workspace. Your organization may control whether and how these features are available.

Do not submit sensitive personal information, regulated health information, or other data you are not authorized to share when using AI features unless your organization has approved that use.

How We Use Information

We use information to provide, maintain, and secure the Services; authenticate users; support workspace collaboration; operate AI features where enabled; troubleshoot issues; improve performance and reliability; communicate about the Services; comply with legal obligations; and enforce our terms and policies.

How We Share Information

We do not sell personal information. We may share information:

With service providers that help us host, secure, deliver email, monitor performance, and operate the Services, subject to appropriate contractual protections.
Within a customer organization's workspace, according to role permissions and workspace settings configured by that organization.
When required by law, legal process, or to protect the rights, safety, and security of Heliz, our customers, and users.
In connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality obligations.

Organization-Managed Accounts

Heliz accounts and workspace access may be created, assigned, suspended, or removed by the customer organization or workspace administrator. If you use Heliz through an employer or other organization, that organization is responsible for account provisioning, role assignment, and many decisions about how data is accessed and retained within the workspace.

To request access changes or account removal, contact your workspace administrator or Heliz support. Workspace records may be retained by your organization according to its retention, audit, and legal requirements.

Data Retention

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Customer organizations may retain workspace data according to their own business, audit, and legal requirements. Retention practices may vary by organization and feature.

Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information processed through the Services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices and Requests

Depending on your relationship with Heliz and your organization, you may be able to update certain profile or preference settings within the product. For workspace access, role changes, export requests, or account removal, contact your workspace administrator first.

You may also contact Heliz support at support@heliz.io for privacy-related questions or requests we can address directly. We may need to verify your identity and coordinate with your organization where appropriate.

Contact

For privacy questions or requests, contact us at support@heliz.io.

Effective date

This Privacy Policy is effective as of June 17, 2026.