Privacy Policy

HIEBA SYSTEM SOLUTIONS LLC ("Company," "we," "us," or "our") provides a web-based Software as a Service platform (the "Platform") to business customers ("Customers") pursuant to a Master Services Agreement ("MSA"). This Privacy Policy describes how we collect, use, and disclose information in connection with the Platform, including account-related notifications configured by Customers through the Platform.

This Platform is a business-to-business (B2B) service. It is not a consumer-facing notification service. Notifications described below are configured and enabled by our business Customers under their executed MSA, for their own authorized users, in connection with their use of the Platform.

1. Scope

This Policy applies to information collected through the Platform, including information about authorized users of a Customer's account ("Authorized Users"). Where a Customer submits data to the Platform on behalf of its own end customers or personnel, that data is processed as Customer Data under the terms of the applicable MSA and Data Processing Agreement, not under this Policy.

2. Information We Collect

2.1 Account and Authorized User Information

Name, business email address, and company affiliation
Business phone number, where provided for account notification purposes
Role and permissions within the Customer's account
Billing and subscription information

2.2 Platform Usage Data

We automatically collect technical data related to Platform access and use, including IP address, browser and device information, session logs, and feature usage analytics.

3. Account Notifications (SMS and Other Channels)

3.1 Nature of Notifications

Under the MSA, Customers configure notification preferences within the Platform for their own Authorized Users. Notifications relate solely to account and operational activity on the Platform, including:

Account and system status alerts
Security notifications and authentication codes
Operational and workflow notifications configured by the Customer within the Platform
Service-related administrative notices

These notifications are account-only in nature. The Platform is not used to send marketing, promotional, or consumer advertising messages via SMS.

3.2 Opt-In Basis

Provision of a mobile number for SMS notification purposes, and enablement of SMS as a notification channel, occurs as part of the Customer's acceptance of the MSA and the Authorized User's account configuration within the Platform. This is a business communications relationship established under contract, not a general consumer opt-in.

Message Frequency: Message frequency varies depending on the notification settings configured by the Customer and the Authorized User's account activity.

Message and Data Rates: Message and data rates may apply. Standard rates from the Authorized User's wireless carrier apply to any SMS messages sent or received through the Platform.

3.3 Opt-Out

Authorized Users may opt out of SMS notifications at any time by replying STOP to any message received, or by updating notification preferences within the Platform. Reply HELP for assistance. Opting out of account-related SMS notifications may limit an Authorized User's ability to receive time-sensitive account or security alerts.

3.4 Non-Sharing of Mobile Number Information

We do not sell, rent, or share mobile phone numbers or SMS opt-in data with third parties or affiliates for marketing or promotional purposes.

Mobile phone numbers collected for account notification purposes are used exclusively to deliver the notifications described in Section 3.1 and are not disclosed to:

Third-party marketers or advertisers
Data brokers or aggregators
Any party outside the notification delivery chain described below

Mobile number data is shared only with subprocessors strictly necessary to deliver notifications (e.g., SMS gateway and carrier infrastructure providers), under contractual confidentiality and data protection obligations, or as required by law.

4. How We Use Information

Operate, maintain, and secure the Platform
Deliver account and operational notifications as configured by Customers
Authenticate Authorized Users and prevent fraud or unauthorized access
Provide support and respond to Customer and Authorized User inquiries
Meet contractual obligations under the MSA and comply with applicable law

5. How We Share Information

We may share information with:

Subprocessors: hosting, infrastructure, analytics, payment, and SMS/communications delivery providers, bound by confidentiality and data protection terms
Legal authorities: where required by law, regulation, or valid legal process
Successors: in connection with a merger, acquisition, or asset transfer, subject to equivalent privacy commitments

We do not sell personal information. As stated in Section 3.4, mobile phone numbers are not shared for marketing purposes.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction, consistent with the security terms of the applicable MSA. No method of transmission or storage is completely secure.

7. Data Retention

Account and Authorized User information is retained for as long as necessary to provide the Platform and fulfill the MSA, and is deleted or returned upon contract termination in accordance with the applicable agreement and Data Processing Agreement.

8. Your Rights and Choices

Depending on applicable law, Authorized Users may have rights to access, correct, or request deletion of their personal information, and to opt out of SMS notifications as described in Section 3.3. Requests should be directed to the Customer administering the account, or to us directly at the contact information below.

9. Children's Privacy

The Platform is a business service not directed to individuals under 18, and we do not knowingly collect personal information from children.

10. International Data Transfers

Information may be processed in the United States and other jurisdictions in which HIEBA SYSTEM SOLUTIONS LLC or its subprocessors operate, consistent with the terms of the applicable MSA.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to Customers via email or Platform notice. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

12. Contact Us

HIEBA SYSTEM SOLUTIONS LLC
Website: hiebasystemsolutions.com
‍Email: privacy@hiebasystemsolutions.com

This document reflects the notification and data practices of the HIEBA SYSTEM SOLUTIONS LLC Platform as described by the Company. It is provided for general informational purposes and does not constitute legal advice. Legal counsel should review this Policy for compliance with applicable law prior to reliance in any regulatory submission.