Privacy Policy

Your privacy is important to us. This policy explains what data we collect, how we use it, and your choices regarding your information when you use DispatchLink.

1. Information We Collect

Account Information: Email address when you register or log in.
Usage Data: Analytics events (page views, play/pause, errors) via Firebase Analytics.
Cookies & Local Storage: "Remember me" preferences and Firebase session tokens stored in your browser.
reCAPTCHA Tokens: To protect against automated abuse (Google reCAPTCHA v3).

2. How We Use Your Data

Authenticate and authorize access to streams.
Monitor service health and performance.
Prevent abuse through reCAPTCHA verification.
Improve the app by analyzing feature usage and errors.

3. Data Sharing & Security

We do not sell or rent your personal data. We share limited analytics with Google (Firebase) under strict privacy controls. All streams and authentication are served over HTTPS.

4. Your Choices

You can opt out of "Remember me" and clear local storage at any time.
You may disable cookies in your browser (though this may impact functionality).
For GDPR/Data subject requests, contact us at privacy@dispatchlink.org.

5. Changes to This Policy

We may update this privacy policy as our service evolves. The date at the top reflects the last update.

Last updated: April 20, 2025

6. Subscriptions & Payments

Processor: Auto-renewable subscriptions and purchases are processed by Apple. We do not receive or store your full payment card details.
Purchase Data: We receive limited purchase metadata from Apple (e.g., product ID, country/region, transaction status) to activate and maintain your access.
Managing Subscriptions: You can manage or cancel at any time in your Apple account settings (Manage Subscriptions).
Receipts: Apple provides transaction receipts; we may verify them to confirm your entitlement and prevent fraud.

7. Additional Information We May Collect

Device & Log Data: IP address, device identifiers, app version, and diagnostic logs (including crash reports) to secure the service and troubleshoot issues.
Push Notifications: A device push token (if you enable notifications) to deliver alerts.
Approximate Location: If you grant permission, we may use approximate location to improve stream discovery and relevance. Location access is optional and can be changed in system settings.
Authentication: If you sign in with Google, we receive your email and basic profile info as permitted by Google.
Content Metadata: Stream engagement metadata (e.g., what you play and for how long) to operate features like “recently played” and to improve quality.

8. Legal Bases for Processing (EEA/UK)

Contract: To provide you the app, subscriptions, and requested features.
Legitimate Interests: To secure, maintain, and improve the service; to prevent fraud and abuse.
Consent: For optional things like analytics, notifications, or location where applicable.
Legal Obligations: To comply with tax, accounting, and regulatory requirements.

We share data with service providers who help us operate DispatchLink. These include:

Apple: In-app purchases, subscription status, and receipts.
Google Firebase: Analytics, performance monitoring, crash reporting, and authentication.
Hosting/CDN and Security Providers: To host our website/app and protect against abuse.

We require providers to protect your data and use it only for our instructions.

10. Data Retention

Account and subscription records: kept while your account is active and as required by law (e.g., tax, fraud prevention).
Analytics and diagnostics: kept for a commercially reasonable period to analyze performance and improve reliability.
Push tokens: removed when you disable notifications or uninstall the app.

11. Security

We use industry-standard safeguards including transport encryption (HTTPS), access controls, and monitoring. No method of transmission or storage is 100% secure, but we continuously work to protect your information.

12. International Data Transfers

Your information may be processed in the United States and other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

13. Your Rights & Choices (GDPR/CCPA/CPRA)

Access/Correction/Deletion: You can request access to, correction of, or deletion of your personal information.
Portability & Restriction: Where applicable by law.
Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. You may still contact us using the link below for CCPA/CPRA requests.
Marketing Communications: You can opt out of non-essential emails by following unsubscribe instructions if we send any.

Submit a request by emailing privacy@dispatchlink.org with the subject line “Privacy Request.” If you are in the app and can access your account, you may also use in-app controls where available (e.g., account deletion). If you cannot access the app, email us.

14. Children’s Privacy

DispatchLink is not directed to children under 13 (or the minimum age in your jurisdiction). If you believe a child provided us personal information, contact us and we will take appropriate steps to remove it.

15. Contact Us

If you have questions about this policy or our practices, contact us at privacy@dispatchlink.org or support@dispatchlink.org.

16. Effective Date

Effective: August 18, 2025