DATA, COOKIES & IP

Other Policy

Data Protection Policy

Last updated: 18 Oct 2026

Helium Smart Air Private Limited (“Helium”, “we”, “us”) respects your privacy. This policy explains what personal data we collect, why we collect it, and the rights you have over it under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 and its rules.

It applies to heliumair.in, the Helium app, our Helium Air devices, our customer support channels (calls, WhatsApp, email), and dealers.heliumair.in.

1. Who is responsible for your data

Helium Smart Air Private Limited is the Data Fiduciary for your personal data.

Address: C-23A, Ashok Marg, C-Scheme, Jaipur – 302001, Rajasthan, India

Contact for data-related questions: grievance@heliumair.in

2. What we collect

CategoryExamplesWhen
Identity & contactName, phone number, email addressAccount creation, orders, enquiries, support
Order & deliveryDelivery and billing address, pincode, GSTIN (if provided), order historyPlacing an order
PaymentTransaction ID, payment status, payment method typeCheckout. Card, UPI and bank details are collected and stored by our payment partners, not by us.
EMI / financingDetails you give to our financing partners for eligibility checksOnly if you choose EMI. The partner processes this under its own policy.
Installation & serviceInstallation address, photos/videos you share, service historyInstallation, complaints, warranty claims
Device & app dataDevice ID, temperature settings, usage patterns, energy consumption, performance and gas-health readings, app usage, connectivity statusUse of the Helium app and connected AC
CommunicationsCall recordings, chat and WhatsApp transcripts, emailsWhen you contact us or we contact you
Website usageIP address, browser and device type, pages visited, referral sourceVisiting our website. See our Cookie Policy.
Dealer & partner dataBusiness name, owner details, GSTIN, bank details for payoutsDealer onboarding

We do not knowingly collect data that we do not need for the purposes listed below.

3. Why we use it

  • To process, deliver and track your order, and to send order, delivery and installation updates
  • To install, service and repair your product, and to honour warranty claims
  • To run the Helium app and connected features such as remote control, alerts and gas-health monitoring
  • To respond to queries, complaints and grievances
  • To improve our products, cooling algorithms and services, using aggregated or de-identified data wherever possible
  • To send product updates and offers, only with your consent. You can opt out at any time.
  • To prevent fraud and keep our systems secure
  • To comply with legal obligations, such as tax, invoicing and consumer protection laws

We process your data based on your consent, or for legitimate uses permitted under Section 7 of the DPDP Act. For example, when you give us your address for delivery, we use it to deliver your order.

4. Who we share it with

We do not sell or rent your personal data.

We share data only with service providers who help us run our business. They act on our instructions and are bound by contract to protect your data:

  • Checkout and payment partners (e.g. [GoKwik, Razorpay, Snapmint])
  • Logistics partners (e.g. [Delhivery, Shadowfax])
  • Installation and service partners and authorised dealers, but only for your order or service request
  • Cloud hosting and infrastructure (e.g. [Amazon Web Services])
  • Communication, CRM and customer-support tools (SMS, email, WhatsApp, calling)
  • Analytics and advertising platforms, limited to what is described in our Cookie Policy

Your device usage data is used only to operate and improve Helium services. It is never shared with third parties for their own purposes.

We may also disclose data when the law requires it, for example to a court or government authority.

5. Storage and transfer

Your data is stored on secure servers [in India]. Some service providers may process data outside India. We transfer data only as permitted under Indian law.

6. How long we keep it

DataRetention
Account & contact detailsWhile your account is active, plus [12 months] after closure
Order, invoice & payment recordsAs required under tax and company law (currently up to 8 years)
Warranty & service recordsFor the warranty period of your product, plus [1 year]
Call recordings & chat transcripts[90 days], unless needed to resolve an open complaint
Device & app usage dataWhile your device is linked to your account. After that it is deleted or de-identified.
Security & access logsAt least 1 year
Marketing consent recordsUntil consent is withdrawn, plus the period needed to prove consent

Once the retention period ends, or you withdraw consent and no legal obligation applies, we delete or de-identify your data. We also instruct our service providers to do the same.

7. How we protect it

We use reasonable security safeguards, including:

  • Encryption of data in transit and at rest
  • Role-based access, so only staff who need the data can see it, with multi-factor authentication on internal systems
  • Logging and monitoring of access to personal data
  • Regular backups and security reviews
  • Contracts requiring our service providers to maintain equivalent safeguards

We never ask for your password, OTP or full card details over call, email or WhatsApp.

8. Data breaches

If a breach affects your personal data, we will notify you and the Data Protection Board of India as required by law. We will tell you what happened, what the likely impact is, what we are doing about it, and what steps you can take.

9. Your rights

You have the right to:

  • Access: get a summary of the personal data we hold about you and how we use it
  • Correct and update: fix inaccurate or incomplete data
  • Erase: ask us to delete your data, unless we are legally required to keep it
  • Withdraw consent: at any time. This is as easy as giving it, and it does not affect processing already done.
  • Nominate: name a person to exercise these rights for you in case of death or incapacity
  • Grievance redressal: raise a complaint with our Grievance Officer and, if unresolved, with the Data Protection Board of India

How to exercise these rights: email grievance@heliumair.in from your registered email, or use [Profile → Privacy settings]. We may verify your identity before acting on a request. We aim to respond within 30 days.

To stop marketing messages, use the unsubscribe link, reply STOP, or tell our team.

10. Children

Our products and services are meant for people aged 18 and above. We do not knowingly collect children’s personal data. If you believe a child has given us their data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the revised version on this page with a new “Last updated” date, and notify you of significant changes by email or in the app.

12. Contact & grievances

For questions or complaints about your personal data, contact our Grievance Officer. Details are on our Grievance Redressal page.