DRAFT FOR ATTORNEY REVIEW. This page has not been reviewed by a lawyer yet.
Privacy Policy
Who we are
Customer Portal is provided by Access Patrol, Incorporated.
About Customer Portal
The public gateway to Access Patrol. Request security services, training and support, follow a request with a reference number, and join the affiliate program or apply for work.
Who uses it: Visitors, clients, affiliates and job applicants, and the Access Patrol team.
What we collect
Depending on how you use the app, we hold the following kinds of information.
- Account details: Your name, email address and role when you sign in or are invited. Roles are set by an authorised administrator.
- Contact inquiries: Name, email, phone, organization, inquiry type, message, and your consent.
- Service requests: Company and contact name, email, phone, service address, city, state, ZIP, coordinates, requested dates and times, guards needed, site type, risk notes and special instructions.
- Access requests: Name, email, phone, organization, the role and module you ask for, and your reason.
- Job applications: Name, email, phone, position, years of experience, certifications, availability and message.
- Newsletter subscription: Email address, the wording you agreed to, dates, and whether you confirmed. You get the weekly issue only after you confirm, and every issue has an unsubscribe link.
- Campaign and referral details: When you submit a form with consent: the page you landed on, the host of the site you came from, campaign tags in the link, an affiliate reference, and a random per-tab key.
- Article likes: An anonymous code made from a random value kept in your browser. It does not identify you.
- Affiliate program records: Affiliate profile, referral links, conversions and commissions.
- Client accounts: Client name, contact name, email, phone, billing and service address, account status and payment terms, kept by staff.
- Agreements: Staff record each agreement: who it is with, a contact name and email, dates, key terms, and an uploaded copy. Uploaded copies are private files that open through links expiring after five minutes.
- Identity registry: Email address, display name, phone, which Access Patrol app first saw you, and links showing which Access Patrol apps hold a record for that email and in what role. Only the founder and administrators can read it. Agent Link and Academy can add to it through a signed server call.
- Audit events: Important actions are recorded in a tamper-evident log.
Why we use it
- To provide Customer Portal to you.
- To answer the messages and requests you send us.
- To keep the service secure and to keep a record of what happened and when.
Who else handles information
These services take part in running the app. The table says what each one does and what it receives.
| Service | What it does | What it receives |
|---|---|---|
| Base44 (hosting platform) | Hosts the app: the website, database, sign-in, backend functions, scheduled jobs, private file storage and image delivery. | All information entered in the app. |
| Email sending (provided through the hosting platform) | Sends the internal notice when a service request arrives, and the Sleuth Reports newsletter emails (a confirmation message and the weekly issue) to people who subscribe. | For a service request: the request reference, service type, contact details and notes go to an Access Patrol administrator inbox. For the newsletter: the subscriber's address and the message text. |
| Google reCAPTCHA Enterprise | Tells people from automated abuse on public forms. | Your browser loads Google's script on pages with a form and shares the signals that service needs; our server sends Google a token. |
| Google Fonts | Delivers the typefaces used on the pages. | Your browser asks Google for the font files, so Google receives your IP address and browser details. |
| Base44 image hosting (media.base44.com) | Delivers the logos and pictures shown on the pages. | Your browser asks for the image files, so the host receives your IP address and browser details. |
| Agent Link (an Access Patrol app) | Receives a service request for human review when a staff member chooses to deliver it. Agent Link can also add accounts to the identity registry. | For a delivered request: the request details staff include in the delivery packet. For the registry: an email address, a name and the role it holds in Agent Link. |
| Academy (an Access Patrol app) | Can add accounts and outcomes (for example an enrollment or a purchase) to the identity registry kept here. | An email address, a name and the role it holds in Academy, plus the type of outcome. |
| Watchman (an Access Patrol internal tool) | Receives a short notice when a request or an application arrives, so the team can follow the workload. | The type of request, the organization or person's name in the notice title, an internal reference and the form it came from. No message text. |
| AI research and drafting (provided through the hosting platform) | Researches public news and drafts articles for the News page. Staff review articles before publication unless automated publishing is turned on. | Our instructions, a topic list and titles of published articles. No customer data. |
| QR Server (api.qrserver.com) | Draws a QR code when a signed-in affiliate asks for one. | The affiliate's referral link. |
| Unsplash | Delivers one photo on the signed-in course browser. | Your IP address and browser details. |
- Service
- Base44 (hosting platform)
- What it does
- Hosts the app: the website, database, sign-in, backend functions, scheduled jobs, private file storage and image delivery.
- What it receives
- All information entered in the app.
- Service
- Email sending (provided through the hosting platform)
- What it does
- Sends the internal notice when a service request arrives, and the Sleuth Reports newsletter emails (a confirmation message and the weekly issue) to people who subscribe.
- What it receives
- For a service request: the request reference, service type, contact details and notes go to an Access Patrol administrator inbox. For the newsletter: the subscriber's address and the message text.
- Service
- Google reCAPTCHA Enterprise
- What it does
- Tells people from automated abuse on public forms.
- What it receives
- Your browser loads Google's script on pages with a form and shares the signals that service needs; our server sends Google a token.
- Service
- Google Fonts
- What it does
- Delivers the typefaces used on the pages.
- What it receives
- Your browser asks Google for the font files, so Google receives your IP address and browser details.
- Service
- Base44 image hosting (media.base44.com)
- What it does
- Delivers the logos and pictures shown on the pages.
- What it receives
- Your browser asks for the image files, so the host receives your IP address and browser details.
- Service
- Agent Link (an Access Patrol app)
- What it does
- Receives a service request for human review when a staff member chooses to deliver it. Agent Link can also add accounts to the identity registry.
- What it receives
- For a delivered request: the request details staff include in the delivery packet. For the registry: an email address, a name and the role it holds in Agent Link.
- Service
- Academy (an Access Patrol app)
- What it does
- Can add accounts and outcomes (for example an enrollment or a purchase) to the identity registry kept here.
- What it receives
- An email address, a name and the role it holds in Academy, plus the type of outcome.
- Service
- Watchman (an Access Patrol internal tool)
- What it does
- Receives a short notice when a request or an application arrives, so the team can follow the workload.
- What it receives
- The type of request, the organization or person's name in the notice title, an internal reference and the form it came from. No message text.
- Service
- AI research and drafting (provided through the hosting platform)
- What it does
- Researches public news and drafts articles for the News page. Staff review articles before publication unless automated publishing is turned on.
- What it receives
- Our instructions, a topic list and titles of published articles. No customer data.
- Service
- QR Server (api.qrserver.com)
- What it does
- Draws a QR code when a signed-in affiliate asks for one.
- What it receives
- The affiliate's referral link.
- Service
- Unsplash
- What it does
- Delivers one photo on the signed-in course browser.
- What it receives
- Your IP address and browser details.
Cookies and local storage
The app stores a few small items in your browser. The Cookies and local storage page lists them.
Other Access Patrol apps
Other Access Patrol apps collect different information and may have their own privacy page. Check the page of the app you use. This page covers Customer Portal and the company contact details.
Safeguards and controls
- Public request forms are checked on the server with Google reCAPTCHA Enterprise. If the check cannot be completed the submission is refused.
- The public status page needs the reference number and the email used for the request, limits repeated attempts, and gives the same answer for every failed lookup.
- Important actions are written to an append-only audit log, and each finished day is sealed with a fingerprint chained to the previous day.
- Roles are set only by invitation or by an authorised administrator.
- Uploaded agreements are private files that open only through links that expire after five minutes.
- Connections to this site use HTTPS, provided by the hosting platform.
Your requests about your information
To ask for a copy of your information, to correct it, or to ask us to delete it, write to info@accesspatrol.net.
Contact us about privacy
- Email: info@accesspatrol.net
- Phone: 443.435.3777
- Mail: Access Patrol, Incorporated, 1301 York Road, Suite 800-1114, Lutherville-Timonium, Maryland 21093