Privacy Policy

This Privacy Policy explains how HanoIT LLC (“HanoIT,” “we,” “our,” or “us”) collects, uses, discloses, stores, and protects personal information when you visit our website, use our applications, request services, communicate with us, receive SMS verification messages, or interact with our geospatial, cloud, software development, and AI-assisted technology services.

HanoIT LLC provides software development, geographic information system (“GIS”) solutions, cloud-based services, data engineering, mapping, automation, artificial intelligence-assisted services, and technology consulting for businesses and organizations.

By using our website, applications, or services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect personal information directly from you, automatically through your use of our website or applications, from business communications, from service providers, or from customers who authorize us to process information on their behalf.

1.1 Information You Provide to Us

We may collect information that you voluntarily provide, including:

• Name, company name, job title, and business role.
• Email address, phone number, and mailing address.
• Account registration information.
• Login credentials or authentication-related information.
• Project requirements, technical documentation, support requests, and service inquiries.
• Payment, billing, invoicing, and tax-related information.
• Communications you send to us by email, website form, phone, SMS, video meeting, chat, or other channels.
• Information submitted through demos, portals, applications, forms, or customer onboarding workflows.

1.2 Geospatial and Location-Related Information

Because HanoIT provides GIS, mapping, geospatial analytics, routing, infrastructure, and location-based technology solutions, we may process geospatial data depending on the service being provided. This may include:

• Addresses, coordinates, latitude and longitude, routes, polygons, map layers, points of interest, and service areas.
• Property, infrastructure, utility, transportation, telecom, or asset location data.
• Approximate location derived from IP address.
• Precise location data only when authorized by the user, customer, device setting, application configuration, or contractual service requirement.
• GIS files, datasets, shapefiles, GeoJSON, KML, raster files, point clouds, imagery, or other geospatial records provided by customers.

We use geospatial information only for the purposes described in this Privacy Policy, in the applicable agreement, or as instructed by the customer or authorized user.

1.3 Cloud, Application, and Technical Information

When you use our website, applications, APIs, cloud services, or hosted systems, we may collect technical information such as:

• IP address, browser type, operating system, device type, and device identifiers.
• Application logs, security logs, authentication logs, error logs, and audit logs.
• Usage data, pages visited, session duration, referring URLs, and interaction data.
• API requests, request metadata, timestamps, system events, and diagnostic data.
• Cookies, pixels, and similar technologies, where applicable.

1.4 SMS and Phone Verification Information

If you register, log in, request account verification, enable two-factor authentication, or request password recovery, we may collect and process your mobile phone number and SMS consent information.

SMS-related information may include:

• Mobile phone number.
• SMS opt-in status and consent records.
• SMS consent text version.
• Timestamp, IP address, user agent, and page URL associated with consent.
• Verification event logs, delivery status, and authentication-related records.

1.5 AI-Assisted Service Information

We may use artificial intelligence-assisted tools to support software development, geospatial analysis, documentation, automation, data processing, customer support, and business operations.

Depending on the service, AI-assisted processing may involve:

• Text, documents, code, tickets, logs, or support requests.
• GIS datasets, map metadata, spatial queries, or project documentation.
• Business requirements, user stories, technical specifications, or workflow descriptions.
• Aggregated, de-identified, or anonymized information used to improve internal operations.

We do not use customer confidential information, customer GIS datasets, customer source code, or customer project data to train public AI models unless expressly authorized in writing by the customer or permitted by the applicable agreement.

2. How We Use Information

We may use personal information and service-related data for the following purposes:

• To provide, operate, maintain, and improve our website, applications, APIs, and services.
• To design, develop, deploy, support, and maintain GIS, cloud, software, AI-assisted, and automation solutions.
• To create and manage user accounts.
• To authenticate users and send one-time verification codes.
• To provide account verification, login verification, two-factor authentication, and password recovery.
• To communicate with customers, users, vendors, partners, and service providers.
• To process payments, invoices, contracts, statements of work, and business transactions.
• To provide customer support, troubleshooting, maintenance, and incident response.
• To monitor system performance, security, fraud prevention, and abuse prevention.
• To comply with legal, regulatory, contractual, tax, accounting, and audit obligations.
• To enforce our agreements, policies, and terms of service.
• To develop internal analytics, reporting, and business intelligence.
• To protect the rights, privacy, safety, security, and property of HanoIT, our customers, users, and others.

3. SMS Communications

HanoIT LLC may collect your mobile phone number when you register, log in, request account verification, enable two-factor authentication, or request password recovery.

We use your mobile number only to send transactional SMS messages, including one-time security verification codes, account verification codes, login verification codes, two-factor authentication codes, and password recovery codes.

Message frequency varies based on your activity. Message and data rates may apply. You may opt out at any time by replying STOP. For help, reply HELP or contact us atadmin@hanoit.com.

We do not send marketing or promotional SMS messages from our toll-free verification number unless you have separately provided legally valid consent for such messages.

HanoIT LLC does not sell, rent, share, transfer, or disclose SMS opt-in data or SMS consent information to third parties, affiliates, or lead generators for marketing or promotional purposes.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties except as necessary to provide SMS delivery, comply with law, prevent fraud or abuse, or operate the requested service.

4. How We Share Information

We may share information only as reasonably necessary for the purposes described in this Privacy Policy, including with:

• Service providers and vendors: cloud hosting providers, SMS providers, email providers, payment processors, analytics providers, customer support tools, security providers, and infrastructure vendors.
• Customer-authorized parties: project stakeholders, client administrators, integration partners, or users authorized by the customer.
• Professional advisors: attorneys, accountants, auditors, insurers, and consultants.
• Legal and regulatory authorities: when required by law, subpoena, court order, government request, or legal process.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
• Security and fraud prevention: when necessary to protect systems, users, customers, or the public from fraud, abuse, security threats, or illegal activity.

We do not sell personal information in the traditional sense of exchanging it for money. We also do not sell or share SMS opt-in data or SMS consent information for marketing or promotional purposes.

5. Cookies and Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to operate our website, remember preferences, improve performance, analyze traffic, secure sessions, and understand how users interact with our services.

You may control cookies through your browser settings. Some features of our website or services may not function properly if cookies are disabled.

6. Cloud Hosting and International Processing

HanoIT may use cloud infrastructure, hosting providers, software platforms, and technology vendors located in the United States and other countries. Your information may be processed or stored in jurisdictions where privacy laws may differ from those in your location.

When we process customer data as a service provider, contractor, processor, or subprocessor, we process such data according to the applicable customer agreement, data processing terms, and customer instructions.

7. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information and customer data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Security measures may include access controls, authentication, encryption where appropriate, logging, monitoring, secure software development practices, cloud security controls, backups, and incident response procedures.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect information using commercially reasonable measures.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide services, operate our business, maintain security, comply with legal obligations, resolve disputes, enforce agreements, and fulfill the purposes described in this Privacy Policy.

Retention periods may vary depending on the type of information, the service involved, legal requirements, contractual obligations, security needs, and operational requirements.

SMS consent records and authentication logs may be retained as needed to demonstrate compliance, prevent fraud, maintain account security, and respond to carrier, provider, regulatory, or legal requests.

9. Artificial Intelligence and Automated Processing

HanoIT may use AI-assisted tools to support software development, geospatial analysis, documentation, code review, automation, customer support, internal productivity, and service delivery.

We do not intentionally use customer confidential information, customer source code, customer GIS datasets, or customer project data to train public AI models unless the customer has expressly authorized such use in writing or the applicable agreement permits it.

AI-assisted outputs may be reviewed by human personnel when appropriate. Customers are responsible for reviewing and validating outputs, recommendations, maps, analysis, code, reports, and other deliverables before relying on them for operational, legal, financial, safety, or mission-critical decisions.

10. Geospatial Data and Sensitive Location Information

Some GIS and mapping services may involve location-related information, including precise or approximate location data. We process such information only as necessary to provide the requested service, fulfill contractual obligations, operate or improve systems, support customer workflows, or comply with applicable law.

We do not knowingly use precise geolocation data to infer sensitive personal characteristics unless authorized by the user or customer, or unless such processing is necessary for the requested service and permitted by law.

Customers who provide GIS datasets, map layers, coordinates, addresses, infrastructure data, or other geospatial data are responsible for ensuring they have the necessary rights, consents, notices, and legal basis to provide that data to HanoIT for processing.

11. Customer Data Processed on Behalf of Customers

In many cases, HanoIT processes data on behalf of business customers. When we process information as a service provider, contractor, processor, or subprocessor, the customer controls the data and is responsible for providing appropriate notices, obtaining required consents, and responding to privacy rights requests, unless otherwise agreed in writing.

If you are an end user of one of our customer’s applications or systems, you should contact that customer directly regarding privacy requests related to your information.

12. Your Choices and Privacy Rights

Depending on where you live, you may have certain privacy rights regarding your personal information. These rights may include:

• The right to know or access the personal information we collect about you.
• The right to request correction of inaccurate personal information.
• The right to request deletion of personal information.
• The right to request a copy of your personal information in a portable format.
• The right to opt out of the sale or sharing of personal information, where applicable.
• The right to opt out of targeted advertising, where applicable.
• The right to limit the use or disclosure of sensitive personal information, where applicable.
• The right to opt out of certain profiling or automated decision-making, where applicable.
• The right to appeal a denied privacy request, where applicable.
• The right not to be discriminated against for exercising your privacy rights.

To exercise your privacy rights, contact us atadmin@hanoit.com.

We may need to verify your identity before responding to certain requests. Verification may require information such as your name, email address, phone number, account information, or other details reasonably necessary to confirm your identity.

13. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

Subject to applicable limitations and exceptions, California residents may have the right to:

• Know the categories and specific pieces of personal information collected.
• Know the categories of sources from which personal information is collected.
• Know the business or commercial purposes for collecting, using, disclosing, selling, or sharing personal information.
• Know the categories of third parties to whom personal information is disclosed.
• Request deletion of personal information.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information, if applicable.
• Limit the use and disclosure of sensitive personal information, if applicable.
• Not receive discriminatory treatment for exercising privacy rights.

HanoIT does not sell personal information for money. HanoIT does not sell or share SMS opt-in data or SMS consent information for marketing or promotional purposes.

Categories of Personal Information We May Collect

In the past twelve months, we may have collected the following categories of personal information, depending on your interactions with us:

• Identifiers, such as name, email address, phone number, IP address, account ID, and business contact details.
• Commercial information, such as services requested, invoices, transactions, and customer relationship records.
• Internet or electronic network activity, such as logs, usage data, device data, and analytics data.
• Geolocation data, such as approximate IP-based location or GIS/location data provided for services.
• Professional or employment-related information, such as job title, company, and business role.
• Audio, electronic, or visual information, such as support communications, screenshots, meeting recordings, or files you provide.
• Inferences, such as service preferences or account usage trends.
• Sensitive personal information, where applicable, such as account login credentials, precise location data when required for a service, or authentication information.

Business Purposes for Collection

We collect and use personal information for the business purposes described in this Privacy Policy, including providing services, authentication, security, support, communications, compliance, billing, analytics, software development, GIS services, cloud operations, and business administration.

How to Submit a California Privacy Request

California residents may submit privacy requests by contacting:admin@hanoit.com.

Authorized agents may submit requests on behalf of California residents where permitted by law. We may request proof of authorization and may require the consumer to verify their identity directly with us.

14. Other U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights under state consumer privacy laws. Depending on your state of residence and subject to applicable limitations, you may have rights to access, correct, delete, obtain a copy of, or opt out of certain processing of personal information.

These rights may include the right to opt out of targeted advertising, the sale of personal information, or certain profiling decisions, where applicable.

You may exercise available state privacy rights by contacting us at:admin@hanoit.com.

If we deny your request and your state law provides a right to appeal, you may appeal by replying to our decision email or contacting us again with the subject line “Privacy Appeal.”

15. Children’s Privacy

Our website and services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you believe that a child has provided us with personal information, please contact us atadmin@hanoit.com, and we will take appropriate steps to delete the information where required by law.

16. Marketing Communications

If you subscribe to marketing communications, newsletters, or updates, you may unsubscribe at any time by following the unsubscribe instructions in the communication or by contacting us.

Transactional communications, service messages, security alerts, account notices, invoices, and authentication messages are not considered marketing communications.

17. Do Not Track and Global Privacy Signals

Some browsers or devices may transmit “Do Not Track” or similar signals. Because there is no uniform industry standard for responding to these signals, our website may not respond to all such signals.

Where required by applicable law, we will honor legally recognized opt-out preference signals or universal opt-out mechanisms in the manner required by that law.

18. Third-Party Websites and Services

Our website or services may contain links to third-party websites, platforms, integrations, or services. We are not responsible for the privacy practices, content, or security of third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you use.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, services, legal requirements, or business operations.

When we update this Privacy Policy, we will revise the “Last Updated” date above. If changes are material, we may provide additional notice, such as by posting a notice on our website or contacting you where required by law.

20. Contact Us

If you have questions about this Privacy Policy, our privacy practices, SMS communications, or your privacy rights, please contact us:

If you are a customer and have a separate written agreement with HanoIT LLC, that agreement may contain additional privacy, confidentiality, security, or data processing terms that apply to the services provided under that agreement.