Welcome to HelloGov, Inc

Privacy Policy

Effective: February 22, 2024
Updated: April 25, 2025

1. Overview

HelloGov is a platform that uses artificial intelligence (AI) to simplify the application process for customers who need government documents and connect them with registered hand-carry couriers.

This Privacy Policy describes how HelloGov processes your information and explains the choices available to you with respect to your information.

If you have any questions or concerns about how HelloGov processes your information or about this Privacy Policy, you can email us any time at privacy@hellogov.com.

2. What’s Changing With This Update

We updated our Privacy Policy to include information about relevant privacy and data protection laws, our business practices, compliance frameworks, and more detailed descriptions of your rights.

3. Our Roles With Regard to Personal Data

3.1. Users (HelloGov as Data Controller)

For Organizers, HelloGov determines what Personal Data to collect from you and how that Personal Data is used and/or disclosed, as described in this Privacy Policy.

3.2. Visitors (HelloGov as Data Controller)

For Visitors, HelloGov determines what Personal Data to collect from you and how that Personal Data is used and/or disclosed, as described in this Privacy Policy.

4. Compliance Frameworks

HelloGov complies with the following globally recognized privacy and security standards:

• ISO/IEC 27001 (ISMS) — Comprehensive information security management.
• SOC 2 (Type I & II) — Trust Services Criteria: security, availability, and confidentiality.
• NIST Cybersecurity Framework (CSF) 2.0 — Identify, Protect, Detect, Respond, Recover.
• ISO/IEC 27701 — Privacy extension to ISO 27001 for PII and privacy management.
• GDPR (EU) — Legal framework for protecting personal data of EU residents.
• CCPA / CPRA (California) — Consumer privacy protections including access, deletion, and opt-out.

5. Information We Process

HelloGov processes information:

• Received directly from you
• Automatically collected when you use HelloGov
• Collected from third-party integrations

Note: This Privacy Policy does not apply to third-party services accessed via our services. Review their policies for additional privacy details.

6. Information HelloGov Receives Directly From You

To create an account:

• First and last name, company, email, mobile and office numbers
• Shipping and billing address
• Credit card information (tokenized via third-party processors)

During government form completion:

Passport Applications

• Full name, date of birth, place of birth, gender, Social Security number, email, phone number, mailing/residential address, marital and parental information
• Previous passport numbers, issue/expiration dates
• Passport-sized photograph
• 🔐 This data is encrypted at rest.

Vehicle Registrations

• Personal data: name, DOB, SSN, driver’s license, address
• Vehicle data: VIN, make, model, year, plate number
• Insurance details
• 🔐 This data is encrypted at rest.

Travel Visa Applications

• Full name, DOB, place of birth, gender, nationality, marital status
• Passport details, travel purpose, duration, itinerary, prior travel
• Employment/income, financial documentation
• 🔐 This data is encrypted at rest.

Immigration Documents

• Full name, DOB, citizenship, family details, gender, marital status
• Background: education, job history, criminal/immigration history
• Biometric info: photos and fingerprints
• 🔐 This data is encrypted at rest.

Additional Information:

• Emails to/from HelloGov
• Support requests, feedback, sweepstakes entries
• Identity verification info
• Social media or marketing data
• Device data, geographic location, browser/device preferences

Automatically collected:

• Clickstream and heatmap data
• Session replays
• IP address, cookie IDs, browser headers
• Device types and OS
• App interaction metrics

For more, see our Cookie Policy.

7. How We Use Your Information

To operate and improve HelloGov services:

• Provide, maintain, and improve features
• Personalize your experience
• Prevent fraud and secure systems
• Debug issues, analyze engagement

For communication:

• Notify you of changes or updates
• Send support or transactional messages
• Offer relevant marketing content (opt-out available)

8. Aggregated & De-identified Data

We may aggregate or de-identify your information for analytics or marketing. This data is no longer personally identifiable.

9. Artificial Intelligence and Machine Learning

HelloGov uses AI and machine learning to:

• Train models using metadata
• Provide suggestions, autofill features, document assistance
• Support customer interactions through bots

You agree HelloGov may retain and use non-personal data for model training and enhancement.

10. How We Disclose Your Information

We may disclose your information to:

• Service providers and subprocessors
• Government agencies and hand-carry couriers (only when authorized)
• Marketing/advertising vendors (via hashed/pseudonymized IDs)
• Legal authorities (subpoenas, fraud, emergencies)
• Buyers during business transfers (mergers, acquisitions, bankruptcy)

We do not sell or share your information for third-party direct marketing.

Subprocessor List:

Entity Name	Subprocessing Activity	Country
Google LLC	Adwords search ads	U.S.
Meta Platforms Inc.	Facebook/Instagram ads	U.S.
Microsoft Corp.	Bing Ads, Clarity, AI, OCR, Cloud hosting	U.S.
Nextroll Inc.	Adroll remarketing	U.S.
Outbrain Inc.	Outbrain remarketing	U.S.
Vibe.tv	Connected TV ads	U.S.
Sentry (Functional Software)	Bug tracking	U.S.
OpenAI OpCo LLC	AI processing	U.S.
Preferred Merchant Services	Payment processing	U.S.

11. Protection, Storage, and Retention

11.1 Security

• SSL/TLS encryption in transit
• Encryption at rest for sensitive personal data
• Role-based access controls, secure development practices

11.2 Storage Location

• Data is stored in secure environments in the United States.

11.3 Retention

• Personal data is retained only for as long as necessary for service delivery
• All data is deleted within 60 days after service is completed unless legally required otherwise

12. Children’s Privacy

While HelloGov’s services are intended for adults, we do process data for children under 13 when an adult or guardian is completing a passport application or related government document on their behalf.

We comply with the Children’s Online Privacy Protection Act (COPPA) and state-level laws by:

• Requiring verifiable parental consent prior to collecting or processing a child’s PII
• Limiting use and disclosure strictly to application fulfillment
• Retaining data only as long as needed
• Encrypting all child-related PII at rest
• Offering parents the right to access, delete, or restrict use of their child’s data

13. Marketing and Opt-Out Choices

You may opt out of marketing communications:

• By using the “unsubscribe” link in emails
• By emailing privacy@hellogov.com

Even if you opt out, we may still send service-related emails (e.g., account changes, receipts).

14. Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) signal where legally required.
We do not currently respond to Do Not Track (DNT) signals. Learn more at allaboutdnt.com.

15. Legal Bases for Processing

Our legal bases include:

• Contract performance
• Legitimate business interest
• Legal obligations
• Your consent (where required)

16. Your Privacy Rights

You have the right to:

• Access or correct your information
• Delete your personal data
• Request data portability
• Restrict processing
• Revoke consent

Submit a request by emailing privacy@hellogov.com. We may verify your identity or relationship to the data subject.

17. State-Specific Rights (CA, CO, CT, VA, OR, TX, UT, MT)

• California: CCPA/CPRA rights include the Right to Know, Delete, and Limit Sensitive PI use.
• Colorado/Virginia/Connecticut: Right to opt out of profiling, targeted ads, and sensitive data use.
• Utah, Oregon, Texas, Montana: Similar rights with slight variations.

For more, see your state-specific privacy laws or contact privacy@hellogov.com.

18. Changes to This Policy

The Service and our business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right, in our sole discretion, to update or modify this Privacy Policy at any time (collectively, “Modifications”). In certain circumstances HelloGov may, but need not, provide you with notice of such Modifications, such as via email or with in-Service notifications. Modifications will be effective 30 days following the “Last Updated” date or such other date as communicated in any other notice to you. Please review this policy periodically, and especially before you provide any Personal Data. This Privacy Policy was last updated on the date indicated above. Your continued use of the Service following the effectiveness of any Modifications to this Privacy Policy constitutes acceptance of those Modifications. If any Modification to this Privacy Policy is not acceptable to you, your sole remedy is to cease accessing, browsing and otherwise using the Service.

19. Contact Us and Privacy Questions

If you wish to contact us or if you have any questions about or complaints in relation to this notice or wish to contact our Data Protection Officer, please contact us at:

HelloGov AI
1111 Brickell Avenue, Floor 10
Miami, FL 33131
privacy@hellogov.com