1. Who we are
HeMi Technology Services, LLC (“HeMi”, “we”, “us”), 3708 S Baker Side Rd, Sault Ste. Marie, MI 49783, installs and looks after security cameras, door access, networks, phone systems and IT for businesses and organizations. This policy explains what we collect through our website (hemits.com), the HeMi client portal, HeMi Field, HeMi Signage, our text messages and our emails, and what we do with it. We don’t sell personal information.
2. What we collect
When you contact us
Your name, business, email, phone, location, the systems you’re interested in and anything you write in a quote request, plus whether you agreed to texts. To stop spam, the website also notes the internet (IP) address a request came from and when.
Portal accounts
Your name, email, phone, role and organization; your notification and text-message choices; and security records: when and from which IP address and device you signed in, failed sign-in attempts, and two-step verification settings. Passwords are stored only in scrambled (hashed) form by our sign-in provider.
The work we do for you
Tickets, requests and replies; photos and files you or our technicians upload; job and site-visit records; quotes, agreements and who accepted or signed them; invoices and payments. Card and bank payments are handled by Stripe; we receive the payment’s result, never your full card or account number.
The systems we look after
For customers with monitoring or support: equipment and software lists, device and internet status, network and switch-port maps, site layouts, camera snapshots you or we add, backup status, phone-system details and call records from GoTo Connect, SiteSense sensor readings, and the names and contact details on alert lists. Passwords kept in the portal’s vault are stored encrypted.
HeMi Signage
For advertisers and community posters: your contact and billing details and the words and images you submit.
Text messages
Your mobile number, your consent to texts (when and for which number), and the messages we exchange.
The blog newsletter
If you sign up for our monthly blog roundup: your email address, when you signed up and confirmed, the wording you agreed to, and the internet (IP) address the sign-up came from (to stop spam and as a record of your consent).
3. How we use it
- to answer your request, quote, schedule and carry out the work, and support you afterward;
- to monitor the equipment you’ve asked us to, and alert the people on your alert lists;
- to send the emails you’ve agreed to, and the texts you’ve agreed to (customer care messages, two-factor authentication messages and account notification messages only);
- to send the monthly blog newsletter, only if you signed up for it and confirmed from your inbox;
- to bill you and keep business and tax records;
- to see how our public website is used and improve it, only if you accept analytics cookies;
- to keep accounts and systems secure, and to stop spam and misuse;
- to meet legal obligations and to protect our rights and yours.
4. Text messages
We only text people who have agreed to it, by ticking the unticked box on our website form or on their portal profile, or by texting us first. Our texts are customer care messages, two-factor authentication messages and account notification messages only, never marketing. See the text message terms for message frequency and rates.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We share your number only with the messaging providers that deliver our texts (GoTo Connect and Twilio), for that purpose alone.
You can opt out at any time by replying STOP or UNSUBSCRIBE to any message; reply HELP or INFO, or text HELP to (906) 379-2004, for help. You can also turn texts off on your portal profile.
5. Who we share it with
We share information only with service providers that help us run HeMi, and only what they need:
- Supabase (database, sign-in and file storage) and DigitalOcean (hosting for the website and portal);
- Resend (sending our emails), and GoTo Connect and Twilio (phone calls and texts);
- Stripe (card and bank payments);
- Google Analytics (how our public website is used), only if you accept its cookies; set up so Google uses the information only to give us the reports, not for advertising or its own purposes;
- the companies behind the systems we manage for you, such as Ubiquiti UniFi, NinjaOne and MSP360;
- Anthropic, for HeMi Signage’s writing help and content check, which see the text of an ad or post and nothing else, and for the portal’s “Ask your portal” box, which sees your question and only the records from your own account it needs to answer it (never passwords, payment details or our internal notes). We keep each question and answer so we can check and improve the answers.
The only other time we disclose information is when the law requires us to, such as a court order or subpoena, and then only what is required. Within the portal, people in your organization see what your organization’s settings allow, and one customer never sees another’s information.
6. Consumer data protection
Your data will not be sold, rented, transferred, shared or disclosed to external organizations for their own purposes.
We use strictly necessary service providers (listed above) only where required to operate and deliver our services on our behalf. They may access your data solely for that limited purpose, and only under binding confidentiality and data-protection obligations. They are not permitted to use, retain, disclose or process your data for their own purposes.
This applies in all cases, including where consent might otherwise be asked for: we will not ask you to agree to any other sharing.
7. Cookies
The portal uses only the cookies needed to keep you signed in and secure. We don’t use advertising cookies or tracking pixels anywhere.
On our public website (hemits.com), and only if you click Accept on the cookie notice, we use Google Analytics to count visits and see which pages are read, how people found us (for example, which search engine) and roughly where they are (city or region). It sets cookies named _ga and uses your internet (IP) address to work out the region; Google doesn’t keep it. We see totals, not who you are. If you click No thanks, Google Analytics never loads. You can change your choice anytime with Cookie settings at the bottom of any page on hemits.com. It never runs in the portal, HeMi Field or HeMi Signage.
8. How we protect it
Access to personal information is limited to authorized HeMi personnel who need it for their work, and to the approved service providers listed above, who are bound by confidentiality and data-protection obligations and may use it only to provide their service to us. We use administrative, technical and organizational safeguards designed to prevent unauthorized use, sharing, disclosure, alteration or loss of personal information:
- Administrative safeguards: staff get only the access their role needs, accounts are removed when someone leaves, and staff are required to keep customer information confidential.
- Technical safeguards: everything travels encrypted (HTTPS); the database enforces who can see what, row by row, so each customer reaches only their own information; staff accounts use two-step verification; sign-ins are rate limited and recorded; vault passwords are encrypted, and every look at one is logged.
- Organizational safeguards: written procedures for handling customer information, daily backups kept on equipment HeMi controls, and regular reviews of access and security settings.
9. How long we keep it
We keep account, work and billing records while you’re a customer and afterward for as long as business, tax and legal record-keeping needs (typically seven years for billing). Security and sign-in records are kept for as long as they help protect accounts. Backups are kept for 30 days, plus one per month for a year, then deleted. When you leave, your people can no longer sign in, and we can delete what we don’t need to keep; just ask.
10. Your choices
- see or correct your details on your portal profile, or ask us for a copy of what we hold about you;
- ask us to delete information we don’t need to keep for legal or billing reasons;
- turn email notices and texts off on your profile, or reply STOP or UNSUBSCRIBE to any text;
- turn Google Analytics on or off with Cookie settings at the bottom of any page on hemits.com;
- unsubscribe from the blog newsletter with the link at the bottom of any newsletter email, or by asking us;
- ask your organization’s portal admin, or us, to remove your access.
11. Children
Our services are for businesses and organizations and are not meant for children under 13. We don’t knowingly collect their information; if you think we have, tell us and we’ll delete it.
12. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change makes a real difference to your privacy, we’ll post notice on this website, and tell portal users, before it takes effect.
13. Contact us
HeMi Technology Services, LLC, 3708 S Baker Side Rd, Sault Ste. Marie, MI 49783. Call (906) 379-2004, email [email protected], or text HELP to (906) 379-2004.