Privacy Policy

Who this policy covers

StaCom (“Station Command”) is a web-hosted, multi-tenant software service for fire and EMS departments. A department subscribes to StaCom and invites its own members into the platform.

In this policy, “you” means both the department that holds the subscription and the individual members who sign in. The department decides who may join, what roles those members hold, and what operational records are entered.

Information we collect

We collect only the information needed to operate the platform and support the departments that use it.

• Account information: the name, email address, and role of each member, plus sign-in credentials handled by our authentication provider.
• Department information: department name, type, profile details, membership lists, invitations, and role assignments.
• Operational data your department enters: inventory items, locations, stock movements, schedules, time entries, leave requests, certifications, training records, notifications, and related records.
• Billing information: the selected plan, modules, billing cadence, subscription status, and invoice records. Card details are entered on Stripe-hosted pages and are not collected or stored by StaCom.
• Service and technical data: activity and audit history within your department, and standard technical records such as request and error information generated when the service runs.
• Demo requests: the contact name, department, email, phone number, and message you submit through the demo request form.

How we use information

We use the information described above to provide and maintain the platform, authenticate members, apply role-based access, deliver the modules a department subscribes to, send operational notifications and emails your department has enabled, process subscriptions and invoices, respond to demo requests and support questions, keep accurate activity history, and diagnose and correct technical problems.

We do not sell personal information, and we do not use department operational data for advertising.

Operational data belongs to your department

Records that a department enters into StaCom remain that department's records. StaCom processes them to provide the service. Each department's operational data is kept separate from other departments and is reachable only by members of that department, according to the roles the department assigns.

StaCom personnel access department data only where it is necessary to operate, support, or troubleshoot the service.

Service providers

StaCom relies on a small number of service providers to run the platform. These currently include our cloud hosting and database provider, our authentication provider, Stripe for payment processing and subscription billing, and our transactional email provider for account, invitation, and notification messages.

These providers process information only to perform the services they provide to StaCom.

Cookies and similar technologies

StaCom uses browser storage and cookies that are necessary for the service to function, primarily to keep a member signed in and to maintain the session. We do not use advertising cookies or third-party advertising trackers on the platform.

Security practices

We take reasonable steps to protect the platform. These include per-department data separation enforced at the database level, role-based permissions, controlled access to operational areas, encrypted connections, activity and audit history, and payment handling through Stripe-hosted pages so that StaCom never receives raw card numbers.

No online service can guarantee absolute security, and this policy does not make such a guarantee. Departments are responsible for protecting their own sign-in credentials and for removing members who should no longer have access.

Retention and deletion

We retain department accounts and operational data for as long as the department maintains an account with StaCom, and afterwards for a limited period as needed to complete billing, resolve disputes, and meet our own record-keeping obligations.

A department may request deletion of its data. Some records, such as billing and invoice records, may need to be retained after an account closes. Activity and audit history is retained to preserve accountability while the account is active.

Your choices

Members can review and update their own profile information in the platform. Department administrators can manage members, roles, invitations, and department settings, and can adjust the notifications their department sends.

If you would like a copy of, correction to, or deletion of information held about you, contact us through your department administrator or through the demo and contact request form, and we will respond.

Children

StaCom is an operational tool for departments and their personnel. It is not directed to children and is not intended for use by anyone who is not authorised by a subscribing department.

Changes to this policy

We may update this policy as the platform develops. When we do, we will change the effective date shown at the top of this page. Material changes affecting how department information is handled will be communicated to department administrators.

Contact

Questions about this policy, or about information StaCom holds, can be sent through the contact and demo request form on this site, and we will follow up directly. Organisations with specific privacy, records, or procurement requirements are welcome to raise them with us before subscribing.