1. Overview
Smoke Signal Dispatch LLC ("we," "us," or "our") operates the SmokeSignal platform. Development and technical support services are provided under contract by Chance IT Studio LLC. This Privacy Policy explains what information we collect, how we use it, and how we protect it. By using the Service, you agree to the collection and use of information as described here.
2. Information We Collect
Account information: name, email address, and securely hashed password via Supabase Auth. API credentials: Twilio and Resend keys, encrypted using AES-256-GCM before storage — we cannot view these in plaintext. Crew member data: names, phone numbers, email addresses, and trade classifications entered by Dispatchers. Job data: job names, locations (address and GPS coordinates), dates, scope, and crew assignments. Usage data: IP addresses, browser type, and session activity for security monitoring.
3. How We Use Information
We use collected information to: provide and operate the Service; authenticate users and secure accounts; enable SMS and email dispatch on your behalf; maintain audit logs for compliance; respond to support requests; detect and address security incidents; and comply with legal obligations. We do not sell, rent, or trade your data or crew member data to any third party for marketing purposes.
4. Third-Party Services
The Service integrates with: Supabase (database and auth), Twilio (SMS delivery), Resend (email delivery), Google Maps API (location services), and Netlify (hosting). Data shared with these providers is governed by their respective privacy policies. Smoke Signal Dispatch LLC does not control these third parties.
5. Dispatcher Responsibility for Crew Data
Dispatchers are data controllers for crew member personal data. Smoke Signal Dispatch LLC acts as a data processor on your behalf. Dispatchers are solely responsible for: obtaining a lawful basis for collecting and storing crew member data; obtaining required SMS/email consent under TCPA, GDPR, or CCPA; honoring opt-out and deletion requests; and notifying crew members of their data rights.
6. Security
We implement: AES-256-GCM encryption of API credentials at rest; TLS/HTTPS for all data in transit; Supabase row-level security (RLS) ensuring each Dispatcher only accesses their own data; JWT-based authentication with short-lived tokens; and rate limiting on authentication endpoints. No method is 100% secure. Smoke Signal Dispatch LLC is not liable for breaches originating from third-party infrastructure or from a Dispatcher's own credential mismanagement.
7. Data Retention
Account data is retained for the duration of your subscription or license term plus a reasonable compliance period. Crew member records are retained until you delete them or close your account. Notification logs are retained for 12 months. You may request account and data deletion by contacting us.
8. Your Rights
Depending on your jurisdiction, you may have the right to: access data we hold about you; correct inaccurate data; request deletion; object to or restrict processing; and data portability. Contact [email protected] to exercise these rights.
9. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors.
10. Contact
Privacy questions, data requests, and breach reports: Smoke Signal Dispatch LLC · [email protected] · State of Incorporation: Illinois.