Get started
Legal

Terms of Service

This is the agreement between you and Codemint Labs LLP (India) for use of the Helix platform. It covers what each side is responsible for, what agents may be used to do, and how subscriptions, renewals, and refunds are processed via Paddle as Merchant of Record.

Last updated 31 October 2026 · Effective 1 November 2026

The agreement

Helix ("the Service") is operated by Codemint Labs LLP, a limited liability partnership registered in India ("Helix", "we", "us", or "our"). By creating an account or using Helix you accept these terms. If you accept on behalf of an organisation, you confirm you may bind it, and "you" means that organisation.

Where a signed order form or enterprise agreement exists, it prevails over these terms to the extent they conflict.

Accounts and workspaces

You are responsible for the credentials used to reach your workspace and for what members do with them. Tell us promptly if you suspect unauthorised access.

  • · A workspace owner sets the governance ceiling and is accountable for what agents in that workspace are permitted to do.
  • · Approvals are attributable: approving a held tool call records your identity against that decision.
  • · You must be sixteen or older, and you must not share a seat between people.

Acceptable use

Helix gives agents real capability: shell access, network calls, writes to your systems. The following are prohibited, and we may suspend a workspace immediately where we believe they are happening.

  • · Using agents to access systems you are not authorised to access, or to circumvent another party’s security controls.
  • · Disabling or working around the gate pipeline, sandbox isolation or audit logging, or presenting Helix output as unaudited when it was gated.
  • · Generating or distributing malware, credential harvesters or material that exploits or sexualises children.
  • · Sustained automated activity designed to exhaust shared capacity, or resale of sandbox compute as a standalone service.
  • · Using Helix to make decisions about a person’s employment, credit, housing, insurance or legal rights without meaningful human review.

Your content

You keep all rights in what you put into Helix and in the artifacts your agents produce. We claim no ownership.

You grant us the narrow licence needed to operate the service: to store your content, transmit it to the model provider bound to your workspace, execute it in sandboxes, and show it back to your members. That licence ends when you delete the content.

Agent output and your responsibility

Agents are probabilistic. They misread code, mistake intent, and occasionally report confidently something that is not so. Helix exists to make that visible and reversible, not to eliminate it.

  • · Output is not professional advice, and you remain responsible for what you ship, merge, send or publish from it.
  • · Where an agent acts on your systems, you are responsible for the ceiling you set and the approvals you grant.
  • · Similar objectives may produce different results for different customers; output is not exclusive to you.

Regulated domain packs (Healthcare, Finance, Legal)

Helix provides specialized domain packs for Healthcare (HIPAA Safe Harbor 18-identifier PHI scrubbing and HL7 FHIR R4 validation), Finance (double-entry ledger reconciliation, PCI-DSS masking, and SOX dual-custody controls), and Legal (clause risk scoring and privilege-log boundaries).

  • · Technical guardrails assist compliance workflows but do not replace qualified clinical, financial, accounting, or legal judgment.
  • · Customers processing Protected Health Information (PHI) or regulated financial data in cloud workspaces must maintain an Enterprise plan with a countersigned Business Associate Agreement (BAA) or Data Processing Addendum (DPA), or deploy on self-hosted air-gapped infrastructure.

Fees, billing and Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.

Personal workspaces are free and include a one-time $1.00 starter credit upon email verification. Paid plans are billed in advance: Team ($24/seat/month with a two-seat minimum on monthly billing, or $20/seat/month billed annually at $240/seat/year) and Enterprise ($299/month self-serve base tier or custom annual agreement), plus optional prepaid credit packs ($10, $25, $100) for unified Helix AI Router inference. Connecting your own encrypted API keys (BYOK) or local model substrates incurs no additional platform fee.

  • · Prices are listed in USD and automatically localized into your local currency at checkout; applicable Sales Tax, VAT, or GST is calculated and collected by Paddle as Merchant of Record.
  • · Automatic renewal and cancellation: Paid subscriptions renew automatically at the end of each monthly or annual billing period unless canceled prior to renewal. You may cancel or downgrade at any time in Settings → Governance or via the Paddle Customer Portal; cancellation takes effect at the end of your current paid billing period with no penalty.
  • · 14-day refund policy: If you are not satisfied with your initial subscription purchase or an unused prepaid credit pack, you may request a full refund within fourteen (14) days of the transaction date in accordance with Paddle's Buyer Terms.
  • · Invoices are issued directly by Paddle upon payment. Unpaid or past-due subscriptions may be downgraded or suspended after written notice.

Availability and changes

We aim for high availability and publish incidents as they happen. Enterprise agreements may carry a specific uptime commitment with service credits; other plans are provided without one.

We may change or remove features. Where a change materially reduces functionality you rely on, we will give at least thirty days’ notice.

Data processing

Where we process personal data on your behalf under the GDPR or India DPDP Act, we act as processor and you as controller. Our Data Processing Addendum is incorporated into these terms for customers who need it, covering processing purposes, subprocessors, AES-256-GCM credential encryption, breach notification, and self-serve data portability and right-to-erasure.

The privacy policy describes what we collect and how long we keep it. Request a countersigned DPA at legal@helixloop.ai.

Confidentiality

Each side will protect the other’s confidential information with at least reasonable care and use it only to perform under this agreement. This does not apply to information that is public, independently developed, or lawfully received from someone else.

Termination

You may stop using Helix and delete your workspaces at any time. We may terminate for material breach that is not cured within thirty days, or immediately for prohibited use.

On termination your right to use the service ends. You can export your workspaces for thirty days, after which the data is deleted as described in the privacy policy.

Disclaimers

Except as expressly stated, Helix is provided as is. We disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement, and we do not warrant that agent output will be accurate or that the service will be uninterrupted or error-free.

Limitation of liability

Neither side is liable for indirect, incidental, special or consequential damages, or for lost profits, revenue or data, even if advised of the possibility.

Each side’s total liability is capped at the fees you paid in the twelve months before the claim. These limits do not apply to unpaid fees, breach of confidentiality, indemnity obligations, or liability that cannot be limited by law.

Indemnities

You will defend and indemnify us against third-party claims arising from your content or your use of agents in breach of these terms. We will defend and indemnify you against third-party claims that the service itself infringes their intellectual property.

Governing law and disputes

These terms are governed by the laws of India, without regard to conflict-of-laws rules. The courts of India have exclusive jurisdiction over any dispute arising between you and Codemint Labs LLP.

Before filing, raise the dispute with us in writing and give us thirty days to resolve it. Most things are settled faster that way.

General

These terms, with any order form and the DPA, are the entire agreement. If a provision is unenforceable the rest stands. Neither side may assign without consent, except to a successor in a merger or sale of substantially all assets. Failure to enforce a provision is not a waiver of it.

Questions about this document

Write to legal@helixloop.ai . For data requests, include the workspace name so we can locate the right records.