Privacy Policy

Who this policy applies to

This Privacy Policy applies to the OpenResQ dashboard and related account, billing, and support workflows made available through `dashboard.openresq.org` and connected OpenResQ services.

Information we collect

Depending on how you use the service, OpenResQ may process:

• Account details such as name, email address, role, and organization membership.
• Authentication data needed to sign in securely, including Firebase authentication identifiers.
• Operational data such as incidents, responder assignments, team records, device-related dashboard activity, and administrative settings.
• Billing and subscription information, including plan details, payment status, customer identifiers, and Stripe checkout session metadata.
• Location data when you choose to grant browser geolocation access for setup, team, or billing features.
• Technical data such as IP address, browser type, device information, timestamps, and diagnostic logs used to secure and maintain the service.
• Support and communications data you send to OpenResQ.

How we use information

• Provide, secure, and maintain the dashboard and associated services.
• Authenticate users, manage organization access, and prevent unauthorized use.
• Process subscriptions, upgrades, invoicing, and related billing support.
• Support incident response, team coordination, mapping, and service administration features.
• Remember product preferences, such as theme selection and basic session continuity.
• Investigate bugs, abuse, fraud, and service reliability issues.
• Comply with legal obligations and enforce contractual rights.

Legal bases

Where applicable data protection laws require a legal basis, OpenResQ generally relies on contract performance, legitimate interests, legal obligations, and consent when a feature specifically asks for it, such as optional geolocation permission granted through your browser.

How information is shared

OpenResQ may share information with service providers that help operate the platform, including:

• Firebase and Google services for authentication, hosting-related functions, and database support.
• Stripe for subscription billing and payment processing.
• Infrastructure, security, communications, and support vendors acting on OpenResQ's behalf.
• Authorities or counterparties when required by law, court order, or to protect rights, safety, and the integrity of the service.

OpenResQ does not sell personal information or share dashboard data for cross-context behavioral advertising through this product.

Retention

Information is retained for as long as reasonably necessary to provide the services, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may differ by data category and customer configuration.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export certain personal information, and to object to particular processing. Organization administrators may also be able to update some account information directly within the dashboard.

To request privacy assistance, please contact OpenResQ through your organization's account contact or support channel and include enough information for verification and response handling.

Children

OpenResQ is intended for business, municipal, and organizational use and is not directed to children under 13.

International transfers

OpenResQ and its service providers may process information in countries other than the country where it was collected. When that happens, OpenResQ aims to use appropriate safeguards required by applicable law.

Changes to this policy

OpenResQ may update this Privacy Policy from time to time. Material updates will be posted here with a revised effective date.