Privacy Policy

1. Who We Are

Dispact is the data controller responsible for the personal data you provide through our platform. We serve dispatch teams, command centres, and moderation operations with secure incident management tools.

2. What We Collect

We collect only the data necessary to make Dispact work for your team. This includes:

• Account data: name, email, organisation, role, and login credentials.
• Operational data: incident notes, dispatch events, moderation actions, and status updates.
• Usage data: login times, feature usage, device information, and IP addresses.
• Support data: messages, support requests, and feedback.

3. Why We Process Data

We process data to deliver the Service, keep it secure, and improve your experience. Our main purposes are:

• to operate and maintain the platform;
• to authenticate users and manage accounts;
• to share service updates, security alerts, and support information;
• to analyse usage and improve features;
• to comply with legal obligations and protect our lawful interests.

4. Legal Bases

Under GDPR/AVG, we rely on the following legal bases depending on the processing:

• contract performance to provide the Service;
• legitimate interests in protecting the Service and preventing abuse;
• legal compliance where required by law;
• consent for optional cookies and non-essential processing.

5. Sharing and Disclosure

We do not sell your personal data. We may share data with:

• service providers who support hosting, analytics, security, and support;
• affiliates when needed for business continuity;
• authorities when required by law or to protect our rights.

We require third parties to process data only for authorised purposes and under appropriate security standards.

6. International Transfers

If data is transferred outside the EEA, we use safeguards such as standard contractual clauses or transfers to jurisdictions with adequate protection levels under GDPR/AVG.

7. Retention

We keep personal data only as long as needed for the purposes described in this policy or as required by law.

• Account data is retained until deletion plus any required legal retention period.
• Usage data is retained for up to 12 months for analytics and improvement purposes.
• Operational records are retained as needed for service delivery and compliance.
• Voice and moderation artifacts are kept only as long as necessary for safety or legal investigation.

8. Security

We protect data with industry-standard controls including encryption, access management, and regular security testing. While we strive to safeguard data, no platform is completely immune to risk.

9. Your Rights

Under GDPR/AVG, you have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion when permitted;
• restrict or object to processing;
• request portability of your data;
• withdraw consent for optional processing.

Contact us to exercise your rights or make a privacy request.

10. Cookies and Tracking

We use cookies and similar technologies for essential functionality, analytics, and performance. Non-essential cookies are enabled only with your consent.

11. Third-Party Services

We may use third-party providers for hosting, analytics, payments, and support. They process data only as necessary under contracts with Dispact.

12. Data Breach Notification

If personal data is affected by a security incident, we will notify affected individuals and authorities without undue delay when required by law.

13. Children

Dispact is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we discover such data, we will delete it promptly.

14. Links

This policy may link to external sites. We are not responsible for the privacy practices or content of third-party websites.

15. Policy Changes

We may update this Privacy Policy periodically. We will publish the revised policy here with a new "Last updated" date. Continued use of Dispact after changes means you accept the updated policy.

16. Contact

Questions about this policy can be directed to us through the Service or via email.