Privacy policy

Who this applies to

Visitors to our public website, account holders, and agency personnel who access the operational application on behalf of a municipality, PSAP, or regional center.

Information we may collect

• Account and contact data: name, work email, agency identifier, and role, provided during onboarding or sign-in.
• Service and product data: operational content you generate in the application (for example, incident records, transcript segments, and related metadata) in accordance with your deployment and contract.
• Technical data: device/browser type, general location from IP, logs, and cookies as described in our Cookie policy.

How we use information

To provide, secure, and improve the service; authenticate users; support agencies under contract; meet legal and safety obligations; and communicate with you about the product. We do not sell personal information.

Sharing

We use infrastructure and subprocessors appropriate to a cloud-hosted emergency-communications product (for example, identity, hosting, and email delivery). We share data when required by law, to protect life and safety, or as directed by a valid agency agreement. Cross-border transfers, if any, follow the safeguards in your order form or addendum.

Ring integration and live video handling

For Ring-connected workflows, Rapid Cortex is designed for live operational viewing only. We do not record, retain, or store Ring video in Rapid Cortex systems (retention period: 0 days). Camera-owner consent is obtained through Ring's standard OAuth authorization flow and can be revoked at any time in the Ring application. When a law-enforcement request requires owner action, the camera owner is contacted directly through Ring processes.

Retention

We retain data as long as needed to provide the service and meet contractual and legal obligations, including your agency’s retention and audit settings where configured.

Your rights and choices

Depending on your location and role, you may have rights to access, correct, export, or delete certain information. Many requests for operational records are handled through your agency administrator. For general privacy questions, contact us at privacy@rapidcortex.us (or the address in your order documentation).

Data Subject Access Requests (DSAR) and deletion requests can also be submitted to support@rapidcortex.us. We acknowledge requests within 5 business days and target fulfillment within 30 days. DSAR responses include data held in Rapid Cortex systems for the requestor; Ring video is not included because it is not stored by Rapid Cortex.

Account deletion requests are processed within 30 days. Agencies may request deletion through their administrator workflows or via support, and individual users may request deletion through support. Where required by contract or law, limited audit metadata may be retained for compliance.

Consent, opt-out, and withdrawal

Ring camera owners manage consent through Ring OAuth and may withdraw consent by revoking authorization in Ring. Agency users provide consent through account onboarding terms and can opt out of non-essential data processing through account settings or support channels.

When consent is withdrawn, connected access tokens are invalidated, active access sessions are terminated, and no further live camera access is permitted.

Human access and user controls

Authorized agency operators may view live operational data, including live camera streams when enabled for an incident workflow. Rapid Cortex support or security personnel may access limited customer data only when necessary for troubleshooting, incident response, legal compliance, or approved support requests.

Users can review and manage data through role-based application interfaces, agency administration controls, and support-assisted exports/deletions where applicable. For Ring integrations specifically, control of video history and footage remains with Ring and the camera owner.

AI updates and training choices

We communicate material AI capability updates (including new features, quality/accuracy changes, and detection enhancements) through product release notes, in-app notices, and direct agency communications as appropriate.

If an agency opts out of eligible data usage for model training or product improvement workflows, core contracted service functionality remains available, but certain improvement-driven capabilities may progress more slowly for that deployment.

Children

Rapid Cortex is not intended for use by children as consumers of the product. The service is provided to agencies and their authorized workforce.

Changes

We may update this policy and will adjust the "Last updated" date. Material changes may be announced through the product, email, or the website as appropriate.