Privacy Policy

This policy applies to simpli-fi-logistics.vercel.app and to the Concierge service we run for fire departments. It is written by Hunter Lott in plain English, not by a lawyer, on the theory that you should be able to read what we collect and why in five minutes.

What we collect

• Account data: email, display name, and the role (admin or captain) on accounts that sign in to the captain portal or admin console.
• Vote data: which option a captain voted for on each item and any optional note the captain leaves with the vote.
• Engagement data: the budget, floor plan, and product selections for the station we are working with you on. We hold this for the duration of the engagement plus a retention window described below.
• Activity log: who took which action and when, for the duration of the engagement. This is so the chief can see who decided what, not for surveillance.
• Communications: emails you send Lindsey and Hunter, and any documents you share with us as part of the engagement.

What we do not collect

• Captain personal data beyond name, work email, and shift assignment.
• Any analytics tracking, third-party cookies, or session-replay tools.
• Marketing-attribution data from third parties.
• Anything covered under HIPAA, CJIS, or SEC client-data rules. If your engagement would touch those, we route it through a compliant environment first.

Where the data lives

Application data lives in Google Cloud Firestore (us-central1). Authentication is Firebase Auth. Static hosting is Vercel. Email is sent through Firebase Auth’s default service today and may move to Resend when our domain is verified. We do not export your data to other analytics or marketing platforms.

Who sees what

• You and your captains see your engagement and your votes.
• Hunter and Lindsey (the only two admins) see all engagements, all votes, and the activity log.
• Vendors receive only what they need to fulfill a purchase order: their item, quantity, ship address, and contact. They do not receive vote data or captain identities.
• Nobody else. We do not sell, lease, or share your data with third parties. We do not run ads.

How long we keep it

We keep engagement records for seven years after engagement close (matches Texas public- records and financial-recordkeeping norms). You can request earlier deletion of any data that does not have a legal retention obligation. Email lindsey@simpli-fi-life.com.

Your rights

You can request a copy of your engagement data, or its deletion (subject to retention rules above), at any time by emailing lindsey@simpli-fi-life.com. We respond within ten business days.

Cookies

We use first-party browser storage (localStorage and sessionStorage) for sign-in state and for remembering which orientation cards you have dismissed. We do not use third-party tracking cookies.

Changes to this policy

If we materially change what we collect or how we use it, we update this page and tell every active engagement contact in writing. The version that applies to your engagement is the one in effect on the date your scope was signed.

Children

This service is for adult professionals running fire department procurement. We do not intentionally collect data from anyone under 18.