This Privacy Policy describes how Cetruces LLC, a Wyoming limited liability company (“Cetruces”, “we”), handles personal information in connection with the cetruces.com website, the Cetruces platform, and the Cetruces mobile applications for iOS and Android (together, the “Service”).

Cetruces is sold to security companies, which use it to run their own workforces. That makes our role a split one:

• Where a security company is our customer(the “Customer”), the Customer decides what information about its guards, supervisors, clients, and sites goes into the Service. The Customer is responsible for that information, and we process it on the Customer’s instructions. If you are a guard or supervisor and want to see, correct, or delete your records, contact your employer — we will support their response rather than acting on our own.
• Where we deal with someone directly— a website visitor, a person enquiring about the product, or an administrator we correspond with — we are responsible for that information ourselves, and this Policy governs it.

The Service is a workplace tool. Accounts are created by Customers for their own personnel; there is no public sign-up, and the Service is not directed to consumers.

Most information in the Service is entered by a Customer or by its Authorized Users in the course of work. It falls into these categories:

• Identity and contact information— name, work username, personal and work telephone numbers, personal and work email addresses, residential address, date of birth, profile photograph, and designated emergency contact details.
• Employment and personnel records— job title and role, professional licenses and certifications, onboarding records, documents presented for signature together with the resulting electronic signatures, work schedules, time and attendance records, training records, and human-resources documentation the Customer chooses to store.
• Payroll-related information— where a Customer uses onboarding to collect them, Social Security numbers and bank account details. These fields are encrypted with AES-256 encryption before they are stored and remain encrypted at rest.
• Location information— precise GPS location captured by the mobile apps for work purposes, described in detail in the next section.
• Photographs, media, and signatures— patrol checkpoint photographs, incident and site-report photographs, equipment hand-out and return records, and finger-drawn signatures.
• Device and notification information— device platform and model information and the token required to deliver push notifications through Apple’s and Google’s notification services.
• Usage and audit records— a record of significant actions taken in the Service, kept to preserve the accuracy and integrity of operational records.
• Business contact information— where someone enquires about the product, the name, company, email address, and telephone number they give us.

Location is central to how a security workforce is verified, so we want to be precise about when and why the apps use it. A Customer enables these features for its own sites:

• Time clock— when an Authorized User clocks in or out, the app records their GPS position to confirm the punch occurred at the assigned work site.
• On-duty presence— while clocked in, the app periodically reports position so supervisors can confirm site coverage and respond if an officer may need assistance.
• Site perimeter alerts— a site may define a designated work area. If an on-duty officer leaves that area, the Service records the event and notifies supervisors. Where enabled, this uses background location so the alert works when the app is not open on screen.
• Patrol verification— patrol tours verify checkpoint visits using near-field (NFC) tag scans or GPS presence at the checkpoint, and the result is stored with the tour record.
• Officer welfare— location and duty status feed the welfare-check system, which contacts officers who may be unresponsive and escalates to supervisors when appropriate.

The CETRUCES iPhone and Android apps support passkey sign-in using a device’s built-in biometric authentication, such as Face ID on iPhone or fingerprint unlock on Android. The website does not offer biometric sign-in. Biometric verification happens entirely on the device using the industry-standard passkey system. Face data and fingerprint data never leave the device and are never transmitted to, stored by, or accessible to Cetruces. We store only the cryptographic credential the device presents after a successful verification.

Cetruces LLC sends work-related text messages and places automated voice calls to Authorized Users on behalf of its Customers, as part of the Cetruces workforce messaging program. These are limited to: password-reset verification codes, officer welfare and shift-coverage calls, and time-sensitive work notifications. They are transactional and operational; the Service does not send marketing messages. Consent is collected in the Customer’s contract paperwork and during employee onboarding, at the point the mobile number to be used for work is provided.

• Message frequency varies based on work activity.
• Message and data rates may apply, depending on your mobile carrier and plan.
• Reply STOP to any message to opt out; one final confirmation message may follow. Reply START, or contact your employer, to opt back in. Because these messages support core work functions such as password recovery and safety checks, opting out may limit those functions.
• For help, reply HELP to any message or contact your employer.

• Providing the Service— scheduling, timekeeping, patrol and site-check verification, incident and operational reporting, equipment tracking, and workforce messaging on our Customers’ behalf.
• Verifying that work occurred— confirming that shifts and patrols happened as scheduled, which is the core function Customers subscribe for.
• Supporting Customers— responding to support requests, diagnosing faults, and generating the exports and reports a Customer asks for.
• Communicating— delivering work notifications, alerts, and messages to devices, and sending service notices to administrators.
• Security and integrity— authenticating users, enforcing role-based access, auditing significant actions, and detecting fraud and misuse.
• Billing and business records— administering subscriptions and meeting our own legal, tax, and accounting obligations.

• Encryption in transit— all connections between a device and the Service are encrypted using TLS.
• Encryption at rest for sensitive fields— Social Security numbers and bank account details are encrypted with AES-256-GCM encryption using keys held separately from the database, so these values are unreadable even with direct access to stored data.
• Checked on every request— each request is verified against the signed-in user’s account and role before any record is returned.
• Role-based access control— access is limited by position; personnel records, payroll details, and administrative functions are visible only to roles that require them.
• Audit logging— significant actions, including access to and changes of sensitive records, are logged with the acting user and time.
• Account protection— sign-in requires individual credentials, supports passkeys, and administrative password resets force a new password at next sign-in.

• We do not sell personal information, and we have not sold personal information.
• We do not use personal information for advertising, and the apps contain no third-party advertising or advertising trackers.
• We do not track users across other companies’ apps or websites, and the apps do not request the iOS App Tracking Transparency permission because no such tracking occurs.
• We do not use Customer Data to train general-purpose artificial-intelligence models.
• Because the Service does not track users across other sites or services, it does not respond to browser “Do Not Track” signals; there is no tracking to disable.

We share personal information only in the following circumstances:

• With the employer of record— the Customer whose account holds the information. Supervisors and administrators see the work information their role requires.
• With the Customer’s own clients— where a Customer chooses to share work products such as patrol results, site and incident reports, and shift summaries with the client whose site was protected. That decision is the Customer’s.
• With service providers— a small number of established providers that host the Service, store data and uploaded files, deliver push notifications (Apple and Google), and send text messages and place voice calls. They may process information only as necessary to provide those services to us, under written terms requiring protection at least equal to this Policy. A current list is available on request.
• For legal reasons— where disclosure is required by law, regulation, legal process, or a lawful governmental request, or where reasonably necessary to protect rights, property, or safety.
• Business transfers— if Cetruces is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

While a subscription is active, Customer Data is retained for as long as the Customer keeps it in the Service. After a subscription ends, data remains available for export for 30 days and is then deleted as described in the Data Processing Addendum, except where retention is required by law.

Customers are responsible for their own retention obligations. Records documenting security operations at protected sites — incident reports, patrol logs, and related audit records — are often kept for long periods for legal, insurance, and licensing reasons, and the Service is built to preserve them rather than expire them automatically.

• If your employer gave you your account— direct requests to access, correct, or delete your information to your employer. We forward requests we receive directly and support the employer’s response rather than acting on our own.
• Profile information— you can view your profile in the apps and, where your employer permits, update parts of it yourself.
• Device permissions— location, camera, and notification permissions are controlled in your device’s settings and can be changed at any time; permissions required for core work functions must be enabled to use those functions.
• Messaging— reply STOP to opt out of text messages, as described above.
• Withdrawing consent— where we rely on your consent, you may withdraw it at any time: reply STOP to stop text messages, turn off location, camera, or notification permissions in your device settings, or ask your employer or us to stop a specific use. Withdrawing consent does not affect anything done before you withdrew it, and it may prevent work functions that depend on that permission.
• Deleting your account— accounts are not created in the apps; a subscribing company creates them for its own personnel, so account deletion is performed by that company’s administrators, who can deactivate and remove an account at any time. You may also ask us directly, using the contact details below, and we will act with the company that holds the record. Employment, payroll, safety, and security records that the law or a legitimate business need requires us to keep are retained as described above, even after an account is removed.
• If you dealt with us directly— for example after enquiring about the product, you may ask us to access, correct, delete, or export the information you gave us, and to withdraw consent to further contact. We verify identity before acting and respond within the period applicable law requires.

Cetruces LLC is based in the United States, and the Service is hosted on servers located in the United States. If a Customer or its workforce is located elsewhere, information will be transferred to and processed in the United States, and the Customer is responsible for any notice or transfer mechanism its own law requires. Transfer terms available to Customers are set out in the Data Processing Addendum.

The Service is a workplace tool intended solely for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age.

We may update this Policy from time to time. If we make material changes, we will update this page and its effective date and, where appropriate, notify Customers before the changes take effect. Continued use of the Service after an update constitutes acceptance of the revised Policy.

Questions, concerns, or requests regarding this Policy — including access, correction, deletion, and withdrawal of consent — may be directed to support@cetruces.com, or by post to Cetruces LLC, 1621 Central Ave, Cheyenne, WY 82001-4531, United States. If your account was issued by an employer, please contact that employer first.