Hemi Chrome extension: privacyHemi privacy

Only on the work sites your company listed and you agreed to, and only after you click I agree, Hemi records a step each time you:

• open a page,
• click a button or a link,
• fill in a field,
• change a choice (a list, a checkbox, an option),
• submit a form.

For each step it keeps:

• the time, the site and who you are in Command;
• the page address, with anything that looks like an id hidden (a number, a code mixing letters and digits, an email), every value after the ? hidden, and anything after # dropped;
• the kind of control (a button, a link, a field) and its label as it reads on screen, such as “Send to billing” or a field called “Origin”. A link’s label is its text, which can be a customer’s or a carrier’s name;
• when a page opens or a form is submitted, the words on that page (up to 4,000 characters). Emails, phone numbers, money amounts and any number of 4 or more digits are replaced before anything leaves your browser. Other words, including names, are kept.

• Screenshots or video of your screen.
• What you type into a field. Hemi keeps only the field’s name.
• The option you pick in a list. Hemi keeps only the list’s name.
• Password, card number and one-time code fields, at all.
• Anything on a site that is not on your company’s list.
• Anything new while you have Hemi paused, or before you agree.

One limit to know: if something you typed or picked later shows on a page as ordinary text (for example after you save it), it can appear in that page’s words, with the same details hidden.

Hemi only watches. It never clicks, types or changes anything for you.

Steps are sent over an encrypted connection to your company’s account in Hemut Command. Command hides those details again when they arrive, then stores them in Hemut’s database in the United States (Amazon Web Services). Each company’s steps are kept apart: no other company can see them.

No one browses the steps in Command: no page and no Hemi chat shows them. Hemi uses them, inside your company’s account, to notice how your team does a task the same way each time. It then asks your company’s admins, in Command, whether it should follow that way of working; it shows the task’s name and how often it was seen, never the steps. Nothing is followed until an admin says yes.

In Command, under Settings › Hemi learning, your company’s admins (and anyone your company has given access to company settings, which can include Hemut staff your company added to support its account) see who agreed and how many steps each person has kept, never the steps themselves. They can delete the steps kept for any person at any time.

Steps are kept for 90 days, then deleted automatically. Your answers on the consent screen (I agree, Not now, Stop), with the date and the wording you answered, are kept as a record of what you agreed to.

• Pause: on a work site, a small Hemi dot (two eyes) sits in the bottom-left corner; point at it and click Pause. Or use the Hemi button in your Chrome toolbar. Nothing new is recorded while you are paused. Steps from just before you paused may still be sent.
• Stop and delete: in the Hemi toolbar button, choose Stop and delete my steps. Hemi stops recording and deletes every step it kept for you in Command. You can agree again later.
• An admin can delete the steps kept for you at any time, in Command under Settings › Hemi learning. Your answer stays, so Hemi keeps learning from what you do next unless you stop it.
• Not now: if you choose Not now on the consent screen, nothing is recorded.
• Removing Hemi from Chrome stops recording, but steps already sent stay until they are deleted after 90 days. To delete them sooner, choose Stop and delete my steps before you remove Hemi.
• When your company adds a work site, Hemi stops recording and asks you again, with the new list, and records nothing until you answer. When your company removes one, Command stops accepting steps from it at once.

Ask your company’s admin, or write to privacy@hemut.com. Hemut’s full Privacy Policy covers everything else.