Rescuezu is operated by Intellizu LLC (“we”, “us”). It provides managed websites and lightweight admin tools to volunteer fire departments, rescue squads, combination departments and small municipal fire departments. This policy explains what we do with personal information. It covers four groups of people, and which parts apply to you depends on which one you are:
- Departments: the department members who hold a Rescuezu account and manage their department’s site.
- People who contact or apply to a department through a form on its Rescuezu site. For this information we are a processor: the department decides what it collects and why, and we act on its instructions.
- Visitors to department sites hosted on Rescuezu.
- Visitors to rescuezu.com, including people who request a pilot.
Information we collect
From department members
Account details: name, email address and the role the department assigns. We record sign-in activity (time and browser) and sensitive actions in the admin for security and audit purposes. If a member sets up two-factor sign-in, we store the authenticator secret encrypted.
If your department turns on Sign in with Microsoft, Microsoft tells us the member’s name, email address and Microsoft account identifier when they sign in. Their password never reaches us.
We also host the content your department publishes: pages, news, events and photos.
From people who use a department’s forms, on the department’s behalf
- Contact form: the name, email address, phone number, subject and message the sender chooses to give.
- Volunteer interest form: first and last name, email address, phone number, city, postal code, the roles the person is interested in, their availability, an optional message, and their consent to be contacted.
We never ask applicants for a Social Security number, date of birth or medical information. We use this information only to deliver it to the department. We do not sell it, we do not use it to market to anyone, and we do not use it to train models. If you submitted a form and want your information corrected or removed, contact the department first; it controls the record. We will help it act on your request.
Spam protection on forms
Forms on department sites are checked by Cloudflare Turnstile, which runs in your browser and sends Cloudflare technical signals, such as your IP address and browser details, to tell people from bots. We also use your IP address briefly to limit repeated submissions. We do not store it with your submission.
From website visitors
Basic request data (IP address, browser, referring page) is logged by our hosting and content delivery providers for security and troubleshooting. If you request a pilot on rescuezu.com, we receive what you typed into the form: your department name, your name, your email address, your department type and your message.
Payments
Rescuezu does not process payments. Donation buttons on department sites link to the provider the department already uses, and we never see those payment details. We do not store card numbers for Rescuezu subscriptions.
How we use information
- To run each department’s website and admin tools.
- To deliver contact and volunteer interest submissions to the department, including email alerts to the people the department chooses.
- To send transactional email: invitations, sign-in and security notices, and service announcements.
- To reply to pilot requests and support questions.
- To keep the service secure, including auditing sensitive actions.
- To improve the product, using aggregate usage patterns rather than the contents of any department’s records.
- To meet legal, accounting and tax obligations.
We do not sell personal data, and we do not share it with third parties for their own marketing.
Cookies and analytics
This website and department sites run no analytics, no advertising pixels and no cross-site tracking. Rescuezu does not set cookies on them. The admin keeps your sign-in session in your browser’s local storage, and sets one short-lived cookie only while you sign in with Microsoft.
Service providers
We rely on a short list of providers to run the service. Each is bound by contract to protect data processed on our behalf:
- Amazon Web Services: hosting, database, file storage, content delivery, and transactional email via SES (United States).
- Cloudflare: the Turnstile spam check on department site forms.
- Google Workspace: receives email sent to rescuezu.com addresses.
- Microsoft: signs department members in, only when the department turns on Sign in with Microsoft. Microsoft does this under the department’s own agreement with Microsoft.
We will provide the current list, and reasonable notice of material changes to it, on request from any department.
Where data is held
Rescuezu data is hosted in the United States.
Retention
- Account data is kept for the life of the department’s account.
- Content and submissions are kept as long as the department’s account is active, because the department decides its own retention.
- After cancellation, we provide a full export on request and delete the department’s data within 90 days, backups included, or sooner on request. Database backups are kept for seven days.
- Financial records may be kept longer where tax and accounting law requires it.
- Support correspondence is kept for two years.
Security
All traffic is served over HTTPS. Uploaded photos and files are encrypted at rest. Passwords are hashed with Argon2, and members with administrative roles must use a second factor. Each department’s data is kept separate from every other department’s, and access is checked on the server for every request. More detail is on our security page.
No system is perfectly secure. If a breach affects your data, we will notify the affected department directly with what happened, what was affected and what we are doing about it.
Your rights
Depending on where you live, you may have the right to access, correct, export, delete or restrict the processing of your personal information, and to object to certain processing.
- Department members can correct their own details in the admin, or email us.
- People who used a department’s form should contact that department, which controls the record. We will help the department respond.
Email privacy@rescuezu.com and we will respond within 30 days. We will not charge you for a reasonable request and we will not discriminate against you for making one.
Data processing agreement
We will sign a data processing agreement with any department that needs one. Rescuezu is not used to record patient care, so it does not handle protected health information and a business associate agreement does not apply.
Children
Rescuezu is not directed at children, and we do not knowingly collect personal information from anyone under 13. Some departments run junior or cadet programs; a department that accepts interest from minors is responsible for any parental consent its program requires. If you believe we hold information about a child under 13, contact us and we will delete it.
Changes to this policy
We may update this policy. If a change is material, we will notify account holders by email before it takes effect, and the “last updated” date above will change. Prior versions are available on request.
Contact
Privacy questions and requests: privacy@rescuezu.com
Intellizu LLC, United States