Privacy Policy

Effective Date: October 24, 2025

Entity: CrisisCommand Inc., a Texas corporation (“CrisisCommand,” “we,” “our,” or “us”)

Contact: privacy@crisiscommand.ai

1. Overview

Your privacy is important to us. This policy explains how we collect, use, and protect information related to your use of CrisisCommand, including our GPT-based products and future SaaS offerings.

2. Information We Collect

a. Information You Provide Directly

• Account and Billing Information: name, organization, email, and payment details (processed by Stripe).
• Support Information: content or chat transcripts you voluntarily share with us for troubleshooting or improvement.
• Communications: emails or feedback you send to us.

b. Information Processed by OpenAI

When you use a CrisisCommand GPT, all prompts, inputs, and outputs are processed directly by OpenAI through your own OpenAI account. CrisisCommand does not access or store this data. Your use of those GPT products is governed by OpenAI's Privacy Policy and Terms of Use, available at https://openai.com/privacy.

c. Technical and Usage Data (future enterprise platform)

When CrisisCommand launches its hosted Enterprise SaaS Platform (expected 2026), we may collect non-personal usage data such as session counts, feature use, and performance metrics to improve our knowledge base and user experience. We will update this policy before any such collection begins.

3. How We Use Information

We use the collected information to:

• Create and manage your account;
• Process payments and provide access to the Service;
• Respond to support requests or product feedback;
• Improve our knowledge base and overall platform performance;
• Comply with legal and financial obligations.

We do not use your information for advertising or profiling.

4. Information Sharing

We do not sell or rent your personal information. We may share limited information with:

• Stripe – for secure payment processing;
• OpenAI – for model hosting and inference when you use a GPT;
• Trusted vendors – such as hosting or analytics providers (for site operations only);
• Legal authorities – if required by law or valid legal process.

5. Data Retention

We retain account and billing information while your subscription is active and for up to twelve (12) months thereafter for accounting and compliance purposes.

Support content voluntarily shared with us may be retained for up to six (6) months to improve documentation and support training.

6. Data Security

We apply appropriate administrative, technical, and physical safeguards to protect your information. However, no system is entirely secure.

We rely on vendors such as OpenAI and Stripe, each of which maintains its own security and compliance standards.

7. International Access

CrisisCommand is based in the United States and primarily serves U.S. customers. If you access our products from outside the U.S., you consent to your information being transferred to and processed in the United States.

8. Your Rights

You may request access, correction, or deletion of your account information by emailing privacy@crisiscommand.ai. We will respond within 30 days.

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children.

10. Updates

We may update this policy periodically. The “Effective Date” above reflects the latest version. Significant changes will be posted on our website and linked within our GPT products. Continued use of the Service after updates constitutes acceptance of the revised policy.

11. Contact

For questions or concerns about this policy or our privacy practices:

Email: privacy@crisiscommand.ai

Mail: CrisisCommand Inc., Austin, Texas, USA

Governing Law: This policy is governed by the laws of the State of Texas, USA.