Privacy Policy

Last updated 2026-10-01

1. Who we are

canhelpto (canhelpto.com) is operated by MVPHub LLC, 1111B S Governors Ave STE 29827, Dover, DE 19904, United States. For the data of people who sign up to the Service (workspace owners and team members) and of visitors to this website, we are the controller. For the data of our customers' customers (the people who open tickets, write feedback, or reach support through an AI agent), our customer is the controller and we are the processor acting on its instructions. Contact for privacy matters: [email protected].

2. What we collect

  • Account data: email address or phone number (for one-time sign-in codes), name, role, workspace settings.
  • Support data: tickets, replies, attachments, feedback and ratings, the customer's name and email or phone when given, and the context an MCP server attaches to a ticket (an account identifier, the client name, recent tool calls and their error messages).
  • Knowledge base: the procedures and answers a customer writes for its team and its AI answers.
  • Connected channels: emails synced from a mailbox the customer connects, WhatsApp messages received on a number the customer connects.
  • Website analytics: for the public pages, the page path, the day, and the referring site. No IP address, no cookie, no device identifier, no user agent is stored. The dashboard uses one session cookie needed to keep you signed in.
  • Service logs: request logs kept by our hosting provider for security and debugging, for a limited time.

3. Why, and on what legal basis

  • To provide the Service and the contract with you (GDPR art. 6(1)(b)): accounts, tickets, replies, notifications.
  • To keep the Service secure and to improve it (legitimate interest, art. 6(1)(f)): logs, aggregate analytics, abuse prevention.
  • To meet legal obligations (art. 6(1)(c)): invoices, requests from authorities.
  • With your consent where we ask for it (art. 6(1)(a)), which you can withdraw at any time.

4. AI processing

Tickets are classified by an AI model (type, category, sentiment, priority) and the Service can draft replies for a person to send or, on paid plans and above a confidence level the customer sets, answer from the customer's knowledge base. No decision with legal or similarly significant effect on a person is taken automatically. We do not use personal data to train AI models, and our AI providers are contractually prevented from doing so.

5. Who processes data for us (sub-processors)

  • Railway (USA): application hosting and database.
  • Cloudflare (USA/EU): DNS, network security, caching.
  • Anthropic (USA): AI classification and drafting.
  • Postmark (USA): transactional email, inbound email.
  • Unipile (France): WhatsApp messaging for customers who connect a number.
  • Google (USA): Gmail sync for customers who connect a mailbox.
  • Stripe (USA/EU): payments, when a paid plan is bought.

When a customer connects an AI assistant (for example Claude, ChatGPT or Cursor) to its workspace, the assistant's provider processes what the assistant reads, under that provider's terms and the customer's own settings. We never sell personal data.

6. International transfers

MVPHub LLC is established in the United States and several sub-processors process data there. Transfers from the European Economic Area rely on the EU Standard Contractual Clauses and, where the recipient is certified, the EU-US Data Privacy Framework. A copy of the safeguards is available on request.

7. Retention

  • Account data: for the life of the account and 30 days after closure.
  • Tickets, replies, feedback and attachments: for the life of the workspace, or shorter when the customer deletes them or a signed Data Processing Agreement sets another period.
  • Website analytics: 13 months, aggregated.
  • Logs: up to 30 days.
  • Invoices: as long as tax law requires.

8. Your rights

Under the GDPR you may ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Write to [email protected]; we answer within one month. If you are a customer of one of our customers, we will pass your request to that customer or, where we can, act on it directly. You may lodge a complaint with your supervisory authority.

9. Security

Data is encrypted in transit; access is restricted to the people who need it; keys are stored per workspace and can be rotated; we review access and dependencies regularly. No system is perfectly secure; we notify affected customers of a personal data breach without undue delay and, where required, the supervisory authority within 72 hours.

10. Cookies

The public website sets no cookies and loads no third-party trackers. The dashboard sets one strictly necessary session cookie when you sign in. The widget on a customer's site keeps its state in the browser's local storage of that site and sets no cookie of ours.

11. Children

The Service is for businesses and is not directed at children under 16. We delete data we learn was collected from a child.

12. Changes and contact

We update this policy when the Service or the law changes and note the date at the top; material changes are announced to account holders. Questions and requests: [email protected], or by post to MVPHub LLC, 1111B S Governors Ave STE 29827, Dover, DE 19904, United States.