Privacy Policy
Last updated: 01/01/26
Schild Technologies ("we", "us", or "our") is committed to protecting the privacy and security of the data entrusted to us. This privacy policy describes how we collect, use, store, share, and protect information when you use our software-as-a-service (SaaS) platform ("Platform") designed for security organizations.
1. Information We Collect
We collect and process the following types of information:
a. Account and Organization Data
- Name, email address, phone number of account administrators and users
- Organization name and contact details
- Billing and payment information (processed through our payment processor, Stripe)
- Account preferences and settings
b. Operational and Employment Data
- Personnel information including type of employment and pay rate
- Client and site details
- SecOps parameters
- Uploaded files
- Internal messages
- Assignment history, shift records, and activity logs
c. Technical Data
- IP addresses, device information, browser type, and operating system
- Log data and usage analytics (for security and performance monitoring)
- Session cookies necessary for platform functionality
- Access logs and authentication records
2. How We Use Information
We use the information we collect for the following purposes:
- Provide, operate, and maintain the Platform and its features
- Process transactions and manage billing
- Ensure compliance, operational accountability, and regulatory requirements
- Monitor and improve system reliability, security, and user experience
- Provide customer support and respond to inquiries
- Fulfill legal and regulatory obligations
- Assist with account access recovery when requested by authorized administrators
- Detect, prevent, and address technical issues, fraud, or security threats
- Send notices about service changes, updates, or security alerts
3. Data Sharing and Disclosure
We do not sell, rent, or trade your data. We may share data only under the following limited circumstances:
a. Service Providers
We work with trusted third-party service providers who assist us in operating our Platform. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information. Our service providers include:
- Cloud hosting providers for data storage and infrastructure
- Stripe for payment processing
b. Account Recovery
We may share information with you or your authorized representatives to assist with account access recovery in cases of root administrator lockout, following appropriate verification procedures.
c. Legal Obligations
We may disclose your information when required by law or in response to valid legal requests, including to:
- Comply with legal process
- Enforce our Terms of Service or other agreements
- Protect the rights, property, or safety of Schild Technologies, or its customers
- Detect, prevent, or address fraud, security, or technical issues
d. Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
4. Data Security
We take data security seriously and have implemented technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:
- Encryption of data in transit
- Encryption of data at rest in our databases and storage systems
- Multi-layer access controls with role-based permissions
- Audit logging and monitoring of system access
- Regular security assessments, vulnerability scanning, and penetration testing
- Prompt security patching and updates
- Training on data protection and security best practices
- Secure authentication mechanisms and password requirements
While we implement strong security measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your information using industry best practices.
5. International Data Transfers
Our Platform and data infrastructure are located in the United States. If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States.
By using our Platform, you consent to the transfer of your information to the United States. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws.
6. Data Retention
We retain your information for different periods depending on the type of data and purpose:
- Active accounts: We retain all data for as long as your organization maintains an active account with us
- After cancellation: Following account cancellation, we will delete uploaded operational data within months, unless retention is required for legal, regulatory, or contractual obligations
- Inactive accounts: We may delete accounts and associated data after a period of inactivity. We will provide advance notice before such deletion occurs
- Legal requirements: Some data may be retained longer when necessary to comply with legal obligations, resolve disputes, enforce agreements, or as required by applicable employment and tax laws
Upon request and subject to legal requirements, we can provide information about specific data retention periods applicable to your account.
7. Your Rights and Choices
You have certain rights regarding your personal information. Depending on your jurisdiction, these may include:
General Rights
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal and contractual obligations
- Portability: Request a copy of your data in a structured, commonly used format
- Objection: Object to certain processing activities
- Restriction: Request restriction of processing under certain circumstances
California Residents (CCPA)
Under the California Consumer Privacy Act (CCPA), California residents have specific rights including:
- Right to know what personal information we collect, use, disclose, and sell
- Right to request deletion of personal information
- Right to opt-out of the sale of personal information (note: we do not sell personal information)
- Right to non-discrimination for exercising your CCPA rights
To exercise these rights, please contact us here.
European Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten") under certain circumstances
- Right to restrict processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time (where processing is based on consent)
- Right to lodge a complaint with your local data protection authority
Our legal basis for processing your data includes: performance of contract, compliance with legal obligations, legitimate interests, and consent where applicable.
Exercising Your Rights
To exercise any of these rights, please contact us here. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request to protect your privacy and security.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and secure our Platform. Here's what we use:
Essential Cookies
We use essential session cookies that are necessary for the Platform to function properly. These cookies enable core functionality such as user authentication, session management, and security features. These cookies cannot be disabled as they are required for the Platform to operate.
9. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you and, where required, relevant regulatory authorities within 72 hours of becoming aware of the breach.
Our notification will include information about the nature of the breach, the data affected, potential consequences, and the measures we are taking to address the breach and prevent future incidents.
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from minors.
If we become aware that we have inadvertently collected personal information from someone under 18 who is not a business owner or personnel, we will take steps to delete such information promptly. If you believe we have inappropriately collected information from a minor, please contact us immediately.
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the date at the top of this policy.
For material changes that significantly affect your rights or how we use your information, we will provide prominent notice through the Platform or by email to your registered email address at least 30 days before the changes take effect.
Your continued use of the Platform constitutes acceptance of this privacy policy. If you do not agree with the changes, please discontinue use of the Platform.
12. Contact Us
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us here. We will respond to your inquiry as promptly as possible.
