Privacy Policy
This Privacy Policy explains how OneTactiQ, LLC handles information when agencies and authorized users access and use the OneTactiQ Command Platform.
1. Scope
This policy applies to the OneTactiQ Command Platform hosted on OneTactiQ domains and related Cloudflare-hosted application services.
2. Role of OneTactiQ and Agency Ownership
- Agency-entered operational data belongs to the agency that entered it.
- OneTactiQ provides and secures the platform infrastructure used to process and store agency data.
- OneTactiQ does not claim ownership of agency incident records, witness data, victim data, training logs, or similar operational data.
3. Information We Process
Depending on agency usage, the platform may process:
- Account and access information required for authentication and authorization.
- Operational records entered by agencies, including incident and training information.
- Limited diagnostic and service telemetry, such as login/authentication errors, error events, and high-level usage counts (for example, number of users or activity volume).
- Browser and device metadata needed to secure, deliver, and troubleshoot the service.
4. Cookies and Similar Technologies
The platform uses strictly necessary cookies and similar technologies for authentication, session management, security, and core site functionality. These essential cookies are always active and do not require consent. We may also use local storage or session storage to preserve in-progress work, draft data, and offline state so users do not lose operational information while navigating the app.
With your consent, we use Google Analytics (a service provided by Google LLC) to understand how the platform is used, such as which pages are viewed and how often. Google Analytics sets cookies (such as _ga and _ga_*) and collects information including your device and browser details, approximate location derived from your IP address, and pages visited. These cookies are set only after you choose "Accept all cookies" in the cookie banner. If you choose "Essential cookies only," or take no action, the Google Analytics script is not loaded and no analytics cookies are set. Analytics data is used solely to operate and improve the platform; it is never combined with agency operational records.
Your consent choice is stored in a cookie on the onetactiq.com domain (and in your browser's local storage) so it applies across all OneTactiQ sites and subdomains and is honored on future visits. You can change your choice at any time using the button below. If you withdraw consent, analytics cookies set by this site are removed and Google Analytics is no longer loaded.
We do not use advertising or marketing cookies, and we do not use cross-site tracking cookies.
5. What We Do Not Do
- We do not sell agency data or personal data.
- We do not use agency-entered operational content for advertising purposes.
- We do not use non-essential advertising or marketing cookies by default.
6. Encryption and Security Controls
- Data is transmitted over TLS/HTTPS to protect data in transit.
- Application data is stored on Cloudflare services with security controls provided by Cloudflare infrastructure.
- Access controls, authentication checks, and tenant scoping are used to limit data access to authorized users.
7. Service Providers and Infrastructure
OneTactiQ uses Cloudflare services to host frontend, API, and data components. OneTactiQ also uses Supabase for backend database and application services, and Clerk for authentication. These providers may process data, logs, and metadata necessary to operate and secure the service, authenticate users, and support platform functionality.
8. How We Use Diagnostic Data
Diagnostic information is used to maintain reliability, detect and investigate faults, improve performance, and support account/security operations. We limit diagnostic collection to what is needed for platform operation and troubleshooting.
9. Data Retention
- Agency operational data is retained according to agency configuration, contractual terms, and legal obligations.
- Diagnostic and security logs are retained only as long as reasonably necessary for support, security, auditing, and compliance needs.
10. Data Sharing and Disclosure
We share data only as needed to provide the platform (including with subprocessors such as Cloudflare), to comply with legal obligations, or to protect security and rights. We do not share data for third-party marketing.
11. Agency and User Responsibilities
- Agencies are responsible for lawful collection and entry of data into the platform.
- Agencies should manage user access, role permissions, and operational retention practices according to their policies and applicable law.
12. Children's Privacy
The platform is intended for authorized professional/public-safety use and is not directed to children.
13. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date.
14. Contact
For privacy questions, contact [email protected].