Thank you for choosing Command Bridge by DP Cloud LLC! We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and disclose your personal information in connection with the app. Going forward the website, webapp, service, or app shall be known as one in the same and referred to as the "app".
Information we collect
We collect and transmit information only as described in this Privacy Policy and as needed to provide the features you choose to use. Some information is collected automatically while those features are active, including location updates during an active live location share.
Information you provide
When you use our app, we collect personal information that you choose to provide in connection with the app's features. This information may include your name, email address, phone number, and content that you upload, post, or otherwise transmit through the app ("User Content"). You authorize us to process, store, and display User Content only as needed to provide Command Bridge and meet the legal or security obligations described in this policy. This authorization ends when the content or associated account data is deleted, except for records we are legally required to retain.
Usage information
We may collect your most recent login date and time, device registration and notification preferences, operational activity such as incident response updates, and security or audit events. We use this information to provide and protect Command Bridge, support incident coordination, deliver requested notifications, and troubleshoot the service. We do not use this information for advertising.
Device information
On supported mobile devices, we may collect the device platform and name or model, operating-system version, Command Bridge app version, push-notification token, last-seen time, and notification preferences. We use this information to register your device, deliver the notifications you request, apply device-specific preferences, and troubleshoot the service. Location data is handled separately as described below.
Limited live location sharing
Live location sharing is an optional feature limited to active incident response on supported mobile devices. It is available only when your station has authorized the feature, you have enabled it for your account, your device has granted the required location permission, and you separately choose to share your location for a specific incident. Enabling the account setting or device permission does not start sharing by itself, and your choice does not carry over to future incidents.
Location data we collect and how we use it
While you are actively sharing, including when the app is closed or not in use, the app collects your latest geographic position and related information such as accuracy, speed, and the time of the update. We use this information to show your current response location to authorized users associated with the incident, update your estimated time of arrival, and detect when you have arrived. Your current position may be sent to Google Routes about every two minutes to calculate or refresh your estimated time of arrival. We do not use location data for advertising.
Storage and deletion
We store only your latest known position for the active share; each new position replaces the previous one, and we do not save a history of your traveled route. Sharing stops and the stored location fields are cleared when you stop sharing, arrive, become unavailable, sign out, disable the account setting, lose your station's authorization, or the incident closes. We may retain a limited operational record that sharing occurred and why it stopped, but that record does not retain your location coordinates.
How we use your information
To provide the app
We use your personal information to provide you with access to the app and its features.
To communicate with you
We may use your personal information to communicate with you about the app, including updates, new features, and promotional offers.
Disclosure of your information
We do not sell or rent your personal information to third parties. We may disclose your personal information to third-party service providers who perform services on our behalf, such as billing services. We may also disclose your personal information if required by law or to protect our legal rights.
Retention and account deletion
We retain account data, user content, login information, and operational records while your account is active and as needed to provide Command Bridge. You may request permanent deletion of your account and associated personal data from Profile → Settings → Delete account in the app. If you cannot access the app, use our public account deletion request page. We may contact the email address associated with the account to verify your identity before completing the request.
We process verified deletion requests within 30 days. After deletion, backups containing your personal data are purged within 45 days. We retain only records required for legal or security obligations, and only for as long as those obligations require. Your account remains active until the deletion request has been verified and processed.
Security
We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. However, please be aware that no security measures are perfect, and we cannot guarantee the security of your personal information. To help us protect personal data, we encourage you to use a strong password, protect that password from unauthorized use and not use the same log-in credentials (e.g. password) for your Command Bridge account as you do with other services or accounts.
All customer data is securely hosted on Google Cloud Platform (GCP) and Amazon Web Services (AWS) in the U.S. All user data is being processed in the United States. Please do not provide any personal information that you can't afford to have exposed should there be a security incident or breach.
GCP and AWS certify their physical security with comprehensive compliance and controls, including allowing physical access to personnel with a validated business need, logged and monitored access, electronic surveillance and professional security personnel at all datacenter entry points.
GCP and AWS are accredited against multiple security industry certifications including ISO 27001. More details are available from the GCP and AWS websites.
Each and every connection made is end-to-end encrypted over HTTPS. Command Bridge forces HTTPS for all services, including our public website. Data is stored in encrypted form using state-of-the-art encryption.
Payment methods are provided by Stripe, a trusted partner. We do not separately host or store any payment data outside of Stripe.
Limitation of liability
IN NO EVENT SHALL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE APP, WHETHER BASED ON CONTRACT, TORT, STRICT LIABILITY, OR ANY OTHER LEGAL THEORY.
Indemnification
You agree to indemnify and hold us and our affiliates, officers, agents, employees, and licensors harmless from any claim or demand, including reasonable attorneys' fees, made by you or any third party due to or arising out of your breach of these Terms, your violation of any law or the rights of a third party, or your use of the app or service.
Changes to this policy
We may update this Privacy Policy from time to time. If we make any material changes, we will post a new copy on our website and in the app.
Take down requests or contact us
If you have any questions or concerns about this Privacy Policy, please contact us at contact@commandbridge.app. To delete your account and associated personal data, submit a request in the app or use our public account deletion request page.