Privacy Policy

This Privacy Policy explains how PatrolWizzard, a product of Red Obsidian Security, LLC ("PatrolWizzard," "we," "us," or "our"), collects, uses, shares, and protects information. It covers our marketing website at www.patrolwizzard.com (the "Site") and the PatrolWizzard security guard management software, including the manager portal, dispatch console, officer web app, and Android application (together, the "Platform" or "Service").

By using the Site or the Service, you agree to the practices described here. If you do not agree, please do not use the Site or the Service.

1. Information we collect

Account & contact information

When you request a demo, start a trial, or create an account, we collect information such as your name, business or company name, email address, phone number, role, and login credentials. Passwords are stored in hashed form and are never visible to us in plaintext.

Billing & payment information

For paid subscriptions we collect billing contact details and the information needed to process payment. Card and bank details are handled by a third-party, PCI-DSS-compliant payment processor — we do not store full payment card numbers on our own systems. We retain limited records such as billing history, the last four digits of a card, and invoice data for accounting and tax purposes.

Operational data you put into the Platform

The core of the Service is data that a security company and its officers enter or generate during operations. Depending on how each company configures PatrolWizzard, this can include:

• Officer & employee records — names, badge or employee IDs, contact details, schedules, shift and time-and-attendance records.
• Location & GPS data — an officer's device location during active shifts, checkpoint and NFC/QR scan events, and geofence entry/exit (see Location data).
• Patrol & property activity — runsheets, property checks, tour logs, and route history.
• Incident reports — narrative reports and associated details, and any photos, images, or attachments uploaded with them.
• Sites, clients & contacts — property addresses, client and site-contact information, and report-routing preferences.

This operational data is owned and controlled by the subscribing security company. We process it to provide the Service and under that company's instructions.

Device & technical information

When you use the Site or the Service we automatically collect technical information such as IP address, browser type, device type and operating system, app version, time zone, pages or screens viewed, and diagnostic or error logs. On the officer app we may collect device identifiers and connectivity status to keep patrols and sync working reliably.

Communications

If you contact us for sales or support, we keep a record of that correspondence and the contact details you provide so we can respond and improve the Service.

2. How we use information

We use information to:

• Provide, operate, secure, and maintain the Site and the Service.
• Authenticate users, enforce access controls, and keep accounts secure.
• Process subscriptions, payments, and renewals.
• Deliver core features such as patrols, checkpoint scans, scheduling, dispatch, and incident reporting.
• Generate reports, dashboards, and analytics for the security companies that use the Platform.
• Respond to sales inquiries and provide customer support.
• Detect, investigate, and prevent fraud, abuse, security incidents, and other harmful or unlawful activity.
• Comply with legal obligations and enforce our agreements.
• Improve and develop new features, measure performance, and fix problems.

3. AI features & automated processing

PatrolWizzard includes optional AI-assisted features — for example, help drafting and refining incident reports, importing or structuring property information, and searching alerts. To provide these features, the relevant text or content is sent to a third-party AI provider (Anthropic, PBC) through its commercial API, which returns a generated result.

• Content is sent only when an AI feature is used and is processed to return that specific result.
• Under our provider's commercial API terms, customer content submitted through the API is not used to train its models.
• AI output is intended as a drafting and productivity aid. A human reviews and is responsible for the final report or record — these features are not a substitute for professional judgment.

4. Location data

Location and GPS data is central to patrol verification, so we treat it with particular care:

• The officer app collects device location to record checkpoint scans, property checks, geofence events, and patrol routes, primarily during active shifts, as configured by the employing security company.
• Location data is made available to that security company's authorized managers and dispatchers for operational oversight, accountability, and client reporting.
• Officers can typically control location permissions through their device's operating-system settings; disabling location may prevent patrol and checkpoint features from working correctly.
• We do not sell location data, and we do not use it for advertising.

5. How we share information

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these circumstances:

• With the controlling security company. Operational data is accessible to the subscribing company that controls it and its authorized users.
• With service providers (subprocessors). We use vetted vendors to run the Service. They may process data only to perform services for us and are bound by confidentiality and data-protection obligations.
• For legal reasons. When required by law, subpoena, or valid legal process, or to protect the rights, safety, and security of users, the public, or PatrolWizzard.
• In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Our current categories of subprocessors:

Provider	Purpose
Cloud / server hosting	Hosting of the application, database, and uploaded files
Cloudflare	Content delivery, DNS, and edge security / DDoS protection
Google Workspace	Business email and related communications
Anthropic, PBC	AI features (incident-report drafting, property import, alert search)
Payment processor	Subscription billing and payment processing (PCI-DSS compliant)

6. Cookies & analytics

We use a small number of cookies and similar technologies. Strictly necessary cookies keep you logged in, maintain your session, and protect against fraud and abuse — these are required for the Service to function. We and our infrastructure providers may also use cookies for security and basic, aggregate performance measurement. We do not use cookies to build advertising profiles. Most browsers let you block or delete cookies; blocking strictly necessary cookies may break sign-in and other features.

7. Data retention

We retain personal and operational data for as long as an account is active and as needed to provide the Service, and afterward as required to meet legal, accounting, security, or reporting obligations or to resolve disputes. Security and patrol records — such as incident reports and tour logs — are often kept by the controlling security company for evidentiary and compliance reasons; the retention period for that operational data is set by that company. When data is no longer needed, we delete or anonymize it.

8. Data security

We use technical and organizational safeguards designed to protect information, including encryption in transit (HTTPS/TLS), hashed password storage, access controls and role-based permissions, tenant isolation in our multi-tenant architecture, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify affected parties and authorities as required by applicable law.

9. Your privacy rights

Depending on where you live, you may have rights over your personal information, including the right to access the data we hold, to correct inaccurate data, to delete it, to obtain a portable copy, and to opt out of the sale or sharing of personal information. PatrolWizzard does not sell or share personal information for advertising, and we will not discriminate against you for exercising your rights.

If you are an officer, employee, or client of a security company that uses PatrolWizzard, that company controls your operational data. Please direct access, correction, or deletion requests to your employer or the company that provided you access; we will assist them as their service provider.

California residents (CCPA/CPRA) and residents of other states with comparable laws may exercise the rights above and may designate an authorized agent. We will verify requests before acting on them.

To make a request about data for which PatrolWizzard is the controller (for example, your website account or sales/support contact), email [email protected].

10. Children's privacy

PatrolWizzard is a workforce tool intended for businesses and adult employees. The Site and Service are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

11. Data location & transfers

PatrolWizzard is operated from the United States and our systems are hosted in the United States. If you access the Service from outside the U.S., you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country.

12. Changes & contact

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Site or Service after an update means you accept the revised Policy.

Questions about this Policy or our privacy practices? Contact us:

• Email: [email protected]
• Entity: Red Obsidian Security, LLC — Sioux Falls, South Dakota, United States