Scope
This Privacy Policy applies to Heller Networks LLC website pages, contact forms, firmware update infrastructure, the HENcloud management platform and accounts, and related hosted services for NOTBOX.
This policy does not control how you handle traffic, packet captures, or test data inside your own environment when using a NOTBOX device. You are responsible for your own internal privacy, security, and compliance requirements.
Information We Collect
We collect only what each service needs.
- Website contact form submissions (if you send one): your name, email address, and message.
- Firmware update / activation service data: device identifier(s) and request data needed to validate and serve firmware updates or activation-related services.
- Basic server logs: standard web server request logs (such as IP address, request path, and timestamp) used for operations and security.
- Abuse prevention verification: challenge/verification responses used to reduce spam on the contact form.
- Purchase information (if you buy online): your name, email address, billing and shipping address, phone number, and order details. Payment card and bank details are entered directly with our payment processor, Stripe, and are never stored on our servers. Order records (name, contact details, shipping address, items, and invoice number) are kept in our order system for as long as tax and accounting rules require.
- HENcloud account data (if you create an account): your email address, your name if provided, organization name, team member email addresses and roles, invitations, and authentication and account-security records needed to operate and protect the service.
- HENcloud device data (if you connect a device): device identity and claim/link history, names you assign, connection and control state, last-seen time, the public IP address the device connects from, and operational status and network metadata reported by the device, such as firmware version, hostname, management addressing, uptime, memory, Wi-Fi state, monitor count, and current capture or impairment state.
- HENcloud connection (if you connect a device): a linked device keeps one outbound encrypted connection to HENcloud open and reports its status about every 15 seconds. Commands you issue in HENcloud pass through our servers to the device over that connection.
We do not collect packet-capture payloads or the contents of your customer traffic through normal use of the website, firmware update service, or HENcloud.
How We Use Information
We use collected information to:
- Respond to inquiries and support requests
- Fulfill online orders: process payment through Stripe, calculate sales tax, ship your order, email your tracking number, and keep the records tax and accounting rules require
- Measure our advertising, as described under Cookies and Verification Services below
- Operate and protect firmware update and activation services
- Prevent abuse, spam, and unauthorized access attempts
- Maintain, troubleshoot, and improve our website and hosted services
NOTBOX Device Data and Packet Captures
NOTBOX is designed to process network testing data locally on the device and, if you choose, save captures on network storage you configure, such as SMB or NFS shares.
If you stream or download a capture through HENcloud, the capture travels from your NOTBOX to your browser over encrypted WebRTC. A direct connection is used when possible. If a direct path is unavailable, the encrypted stream may pass through a Heller Networks TURN relay. The capture remains encrypted end to end, and HENcloud does not read or persist its payload.
HENcloud Accounts and Cloud Services
HENcloud is an optional management platform for NOTBOX. You can use a NOTBOX entirely without it. This section applies only if you create a HENcloud account and connect a device.
- What we store: the account, organization, team, device, and operational data described above. We also keep an organization audit log of security and management actions, including when an action occurred and the acting user's email address. HENcloud separates device and team access by organization.
- Captures and live traffic: HENcloud coordinates the encrypted browser-to-device connection described above but does not store capture payloads.
- Your control: you can disconnect a device from HENcloud at any time from its local settings. You may delete your account after confirming your password unless you are the only owner of an organization; in that case, you must first make another member an owner or delete the organization. Deleting your account removes its login, sessions, and memberships. Organization records and device data are not deleted solely because one member deletes an account, and audit entries may retain the acting user's email for the organization's security history.
- Organization deletion: an owner may delete an organization after its devices have been removed. Deleting the organization removes its team, device, invitation, and audit records.
Firmware Updates and Activation Services
When using firmware update or activation services, your device may send limited information needed to validate eligibility and serve the correct firmware package (for example, device ID/serial-style identifiers and request metadata).
We use this information only to operate update and activation infrastructure. We do not use it to inspect your local network traffic or packet captures.
Sharing of Information
We do not sell your personal information.
We may share limited information only as reasonably necessary to operate services, comply with legal obligations, prevent abuse, or protect Heller Networks, our customers, and third parties. Today those providers are DigitalOcean (hosting), Cloudflare (security and content delivery), Resend (email delivery), and Stripe (payments).
Online purchases are processed by Stripe, Inc. Stripe receives the information needed to process your payment, calculate sales tax, and issue receipts and invoices, and handles it under its own privacy policy.
Data Retention
We retain information only for as long as reasonably necessary for support, operations, abuse prevention, legal compliance, and record-keeping.
Retention periods vary by data type. HENcloud organization and audit records remain with the organization until it is deleted or until they are no longer reasonably needed, while contact requests, access logs, and update-service logs may follow separate operational or legal retention periods.
Security
We use reasonable technical and operational measures to protect website and service data. No system is completely secure, and we cannot guarantee absolute security.
You are responsible for securing your own network environment, storage shares, and any data captured using NOTBOX.
Your Choices and Contact
If you have questions about this Privacy Policy or want to request correction or deletion of information you submitted directly to us (where applicable), contact:
Heller Networks LLC
26140 Crocker Blvd #1014
Harrison Township, MI 48045-2454
United States
Cookies and Verification Services
HENcloud uses an essential session cookie to keep you signed in and protect access to your account. It is not used for advertising.
Our website contact form and checkout use Cloudflare Turnstile, a verification service that helps prevent spam submissions. This service may set cookies or use browser-based signals to distinguish human visitors from automated bots.
We use Google Ads and Google Analytics to measure how our ads perform, including whether a visit leads to a purchase. These services may set cookies or use similar technologies on your device. We do not send them your name, email address, or order details. You can opt out of interest-based advertising through the Digital Advertising Alliance and the Network Advertising Initiative. California residents may also ask us not to share information for cross-context advertising by emailing [email protected].
Children's Privacy
NOTBOX products and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can remove it.
International Users
If you are located in a jurisdiction with specific data privacy rights (such as the European Economic Area, United Kingdom, or California), you may have additional rights regarding your personal information. Please contact us at the address below to exercise any applicable rights.
Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will include an updated "Last updated" date.