HiBOS Privacy Policy

HiBOS Inc., a Delaware corporation (“HiBOS,” “we,” “us,” or “our”), provides assessments, benchmarking, consulting, business improvement, technology, and related services for internet service providers.

This policy explains how we collect, use, share, keep, and protect personal information and company-specific business information. It applies when you use a HiBOS website or service, take MyISPScore™, join a HiBOS Study, speak with our team, work with us through a partner or sponsor, or otherwise interact with HiBOS.

HiBOS Inc. is responsible for the personal information covered by this policy. This policy also explains how we handle company-specific business information, even when that information does not identify a person.

In some engagements, HiBOS may process information for a client or partner under a separate written agreement. If that agreement has different privacy or data-processing terms, those terms also apply and control for the subject they cover. We may also provide a separate partner, regional, or cookie notice when needed.

1. What We Collect

We may collect the following information:

• Contact and work information, such as your name, email, phone number, job title, country, company or ISP name, and other professional details.
• Business and operational information, such as subscriber counts, services offered, retention and churn, customer experience, staffing, workflows, management practices, internal processes, systems, sales, marketing, goals, challenges, and financial or operational measures.
• Assessment and Study information, such as answers, progress, completion status, scores, category results, reports, recommendations, documents, report or profile IDs, and other information from MyISPScore™, a HiBOS Study, an intake session, an interview, a consultation, or another HiBOS service.
• Communications and meeting information, such as emails, SMS messages, forms, files, support requests, appointments, recordings, transcripts, summaries, and notes.
• Website, device, and source information, such as IP address, browser or device type, timestamps, request URLs, pages viewed, website activity, referral or campaign information, and information collected through cookies, pixels, or similar tools.
• Consent and preference information, such as opt-in status, communication choices, the terms or notices shown to you, and the date and time of your response.
• Information from other sources, such as your employer, another member of your team, a partner or sponsor, an event organizer, a referral, a business directory, a public source, or a business data provider.

If more than one person from the same ISP takes an assessment, we may connect their assessments to one company profile for reports, comparisons, and service delivery. If individual results will be shown to other people, we will explain that before or when the information is collected.

You do not have to give us information we do not ask for. If you do not provide information that is needed for a service, we may not be able to provide that service or complete the related assessment, Study, or deliverable.

Please do not send us highly sensitive information unless we ask for it and give you an approved way to send it. This includes passwords, payment card numbers, government ID numbers, health information, or lists and files that identify individual subscribers. When possible, remove names and other identifying details before sharing files with us.

2. How We Use Information

We use information to provide the service you asked for and to run HiBOS. For example, we may use it to:

• Run MyISPScore™, HiBOS Studies, intake sessions, interviews, consultations, and other services.
• Record assessment progress, calculate scores and category results, connect assessments to company profiles, and create report links or IDs.
• Create scores, diagnostic reports, recommendations, improvement plans, benchmarks, and other deliverables.
• Identify business constraints, patterns, and opportunities for improvement.
• Communicate with you by email, SMS, phone, or other approved channels about results, appointments, services, support, and your relationship with HiBOS.
• Manage contact records, appointments, account access, follow-up, and approved automated workflows.
• Provide relevant HiBOS resources, products, services, and marketing communications where allowed.
• Manage client, partner, sponsor, vendor, and contract relationships.
• Operate, maintain, secure, and improve our websites, services, methods, systems, and customer experience.
• Prevent misuse, investigate security concerns, and protect HiBOS, our clients, and others.
• Meet legal duties and establish, exercise, or defend legal rights.

Where the law requires a legal basis for using personal information, that basis may include providing a service or contract you requested, our legitimate business interests, your consent, or a legal obligation.

Some assessments use set rules to calculate scores and category results from your answers. These scores are used for business guidance. They are not used to make decisions about a person’s legal rights, employment, credit, or access to essential services.

3. Confidential Business Information and Benchmarking

We understand that ISPs may share sensitive business and operational information with HiBOS. We treat company-specific information shared through MyISPScore™, a HiBOS Study, intake sessions, interviews, and related services as confidential business information.

Access is limited to authorized people who support HiBOS services and to service providers who reasonably need the information for their work. Confidential information may also be protected by the HiBOS Mutual NDA or another agreement between HiBOS and your organization.

We do not share company-specific assessment responses, internal operational information, or diagnostic findings with other ISPs or unrelated third parties, except with the service providers, approved partners, professional advisers, and legal recipients described in this policy, or with your permission.

We may combine information from many ISPs to spot trends, create industry benchmarks, improve our methods, and develop research or educational insights. When we do this, we aggregate or de-identify the information so individual companies or people are not identified.

We take reasonable steps to keep de-identified information from being linked back to a person or company.

We will not publicly name your ISP or connect private business information to your company without your permission.

4. When We Share Information

We may share information in limited situations, including:

• With service providers that help us run assessments or our business, such as hosting, customer relationship management, automation and integration, email and SMS, scheduling, document storage, meetings, transcription, analytics, security, and other business systems.
• With analytics and advertising providers when those tools are enabled. They may receive browser, device, referral, campaign, or interaction information to measure marketing or support advertising. We provide notice and choices where required by law.
• With an approved partner when an assessment or service is offered through that partner. If a partner will receive participant-level information, we will name the partner and explain what it receives and why before you submit your information. The partner's own privacy terms may also apply.
• With a sponsor, such as a trade show or association. Unless we clearly tell you otherwise before submission, sponsors receive aggregated or de-identified insights, not your individual assessment data.
• With professional advisers, such as lawyers, accountants, auditors, insurers, or consultants, when reasonably needed for their work.
• When required by law, legal process, or a valid government request, or when reasonably needed to protect HiBOS, our clients, or others.
• As part of a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to applicable law.

Service providers may process information for us as needed to provide their services. We do not authorize them to use confidential HiBOS client information for unrelated purposes. Information may move between connected systems when needed to complete an assessment, update a contact record, send a message, schedule an appointment, create account access, or complete another approved workflow.

HiBOS does not sell confidential Study information, internal business information, or company-specific diagnostic findings. Some privacy laws use the words "sell" or "share" more broadly for certain advertising technologies. Where those laws apply, we provide the required notice and choices.

5. Recordings and Transcriptions

HiBOS meetings, intake sessions, interviews, and consultations may use recording, transcription, note-taking, or similar tools. These tools help us keep accurate notes and prepare reports, recommendations, and other work for your engagement.

When we record or transcribe a meeting, we provide clear notice through the meeting invitation, the meeting or recording tool, or at the start of the meeting. We ask for consent when the law requires it. Recordings, transcripts, summaries, and notes are covered by the confidentiality practices in this policy and any applicable confidentiality agreement.

6. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, change, or disclosure. Access is limited to people and service providers who have a legitimate need for it.

No electronic system is completely secure, so we cannot guarantee absolute security. If a security incident requires us to notify affected people or authorities, we will provide the notice required by law.

Some reports may be delivered through a unique link or account. Share report links and login details only with people who should see the report.

7. Data Retention

We keep information only as long as reasonably needed to provide services, maintain business, consent, and agreement records, support client relationships, improve our services, resolve disputes, enforce agreements, and meet legal requirements.

Retention periods may vary based on the type of information, our relationship with you, contract terms, service-provider settings, legal duties, the need to establish or defend legal rights, and legitimate business needs. We may keep consent and agreement records longer when needed to show what terms applied.

When information is no longer reasonably needed, it may be deleted, de-identified, or securely disposed of, subject to legal and technical limits.

8. International Data Processing

HiBOS is based in the United States and may serve clients in more than one country. Information may be processed or stored in the United States or other countries where HiBOS or its service providers operate.

If applicable law requires extra safeguards when personal information is transferred across borders, we will use appropriate legal or contractual protections as required.

9. Your Privacy Rights and Choices

Depending on where you live and which laws apply, you may have the right to:

• Ask for access to certain personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete certain information.
• Ask us to restrict certain uses of information or object to certain processing.
• Ask for a portable copy of certain information.
• Withdraw consent when our use of information is based on your consent.
• Opt out of certain marketing, targeted advertising, or data-sharing activities when the law gives you that choice.

These rights may have legal exceptions or limits. To make a privacy request, email legal@hiboslabs.com. We may need to confirm your identity or authority before completing a request. If the law gives you a right to appeal our decision, our response will explain how.

Where applicable, you may also have the right to lodge a complaint with the data protection authority in your country or region.

You can unsubscribe from marketing emails using the unsubscribe link in those emails. This will not stop service, security, administrative, or other messages needed for your relationship with HiBOS. Where required by law, we also honor supported browser-based privacy signals and provide other required opt-out choices.

10. Additional Information for EEA and UK Users

If you are in the European Economic Area or United Kingdom and applicable data protection law applies, HiBOS may process your personal information to provide services you request or perform a contract; for legitimate interests such as operating, securing, and improving our services and managing business relationships; with your consent where required; or to meet legal obligations.

Your information may be processed in the United States or other countries. Where required, HiBOS uses legally recognized safeguards for international transfers. You may contact legal@hiboslabs.com for information about safeguards that apply to your information.

You may also have the right to object to certain processing, withdraw consent, and lodge a complaint with the data protection authority in your country or region. These rights may be subject to legal exceptions.

11. Website Data and Cookies

Some pages use essential cookies to keep sessions working and help protect the site. Some assessment pages may also use non-essential cookies to recognize returning users and connect later visits with an existing lead or assessment.

Certain pages may use analytics tools, advertising pixels, or similar technologies to measure campaigns and understand how people interact with our services. These tools may send browser, device, referral, campaign, or interaction information to the applicable provider. Not every HiBOS or MyISPScore™ page uses the same tools.

Where required by law, we provide a cookie notice, preference tool, or other choices before using non-essential tracking technologies.

12. Third-Party Services and Links

HiBOS websites and services may link to or connect with third-party websites, platforms, applications, or services that are not acting as HiBOS service providers.

When you interact directly with an independent third party, its own privacy terms may apply. HiBOS is not responsible for the privacy practices of independent third parties.

13. Children's Privacy

HiBOS services are business services for professionals. They are not intended for children, and we do not knowingly collect personal information from children through MyISPScore™ or other HiBOS business services.

14. Updates to This Policy

We may update this policy as our services, technology, business practices, or legal requirements change. The latest version will show the date it was last updated. If the law requires extra notice or consent for a material change, we will provide it.

15. Contact Us

If you have questions about this policy or how HiBOS handles information, contact:

HiBOS Inc.
9450 SW Gemini Dr. #33000
Beaverton, OR 97008-7105
legal@hiboslabs.com