Section 1Introduction
Piran Command is a product of Trillix Labs, LLC, a Massachusetts limited liability company (“Company,” “we,” or “us”). We respect your privacy and are committed to protecting it through our compliance with this policy.
This policy describes the types of information we may collect from you or that you may provide when you visit or use www.PiranCommand.com (the “Website”), the Piran Command web application at app.PiranCommand.com, and the Piran Command mobile application for iPhone and iPad (together, the “Platform,” and with the Website, the “Services”), including any content, functionality, and services offered on or through them, and our practices for collecting, using, maintaining, protecting, and disclosing that information.
Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using the Services, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy); your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
Section 2Scope
This policy applies to information we collect:
- On the Website.
- Through the Platform, including the Piran Command web application and the Piran Command mobile application for iPhone and iPad.
- In email, text, and other electronic messages between you and the Services.
It does not apply to information collected by us offline or through any other means, including on any other website operated by the Company or any third party, or by any third party, including through any application or content that may link to or be accessible from or through the Services.
Health information. This policy does not apply to health information and data that is created or displayed within, or processed by our customers through, the Platform. We are a “business associate” of our customers and we engage with any such health information pursuant to our business associate agreements with them.
Section 3Children Under the Age of 18
The Platform is provided to fire departments and other public-safety agencies under written agreements and is intended for use by adults acting for their department. Our Services are not intended for children under 18 years of age. If you are under 18, do not use the Services or provide any information on or through them.
No one under age 16 may provide any information to or on the Services. We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information.
Section 4Information We Collect About You and How We Collect It
We may collect several types of information from and about users of our Services, including information by which you may be personally identified, such as name, postal address, email address, or telephone number (“personal information”); information that is about you but individually does not identify you; and information about your internet connection, the equipment you use to access our Services, and usage details.
We may collect this information:
- Directly from you when you provide it to us.
- From your department and its administrators, who create accounts and enter roster, scheduling, and operational records.
- Automatically as you navigate through and use the Services, including usage details, IP addresses, and the limited cookies described below.
- From third-party systems a department chooses to connect, such as a scheduling system (CrewSense) or a computer-aided dispatch feed.
Cookies and Do Not Track
The Platform uses only the cookies needed to keep you signed in and to remember your workspace and display settings. Our marketing Website sets no cookies; it counts visits without them. We do not use cookies, web beacons, or similar technologies for advertising. We do not track users across third-party websites or online services, so there is no cross-site tracking for a “Do Not Track” browser signal to switch off.
Section 5Information Collected Through the Piran Command Platform
Piran Command is provided to fire departments under a written agreement. Accounts are created by the department, and the information in the Platform is entered by the department’s personnel and belongs to the department. We process it on the department’s behalf and only to provide the Platform.
Information needed to use the Platform. Your name, work email address, and sign-in credentials; your department role and rank; and records of activity in the Platform, such as which records you created or changed, when you last signed in, and your acceptance of our terms, along with your IP address and browser type. We also keep incident records your department creates: addresses, times, units, and narratives.
Information collected only if your department uses a feature. Personal contact details, such as phone numbers, home address, and an emergency contact. Scheduling and payroll records, such as shifts, time off, leave balances, overtime, and pay codes. Training records and certifications, including license numbers. Photos and documents you choose to upload. Firefighter rehabilitation vitals and medical clearance. Location information as described below.
Health information. Emergency medical call details, and other health information processed for a department that is a HIPAA covered entity, are handled under our business associate agreement with that department and are not governed by this policy.
Federal reporting. When your department files an incident report with the National Emergency Response Information System (NERIS), we transmit the information the department submits, which can include casualty and patient-care details, as required for federal incident reporting.
Section 6Location Information
Fire apparatus. When your department turns on apparatus tracking, tablets mounted in fire apparatus report the vehicle’s GPS position, including while the application is in the background. This position is tied to the vehicle, not to a person, and is used for the live map, dispatch, and closest-unit suggestions.
Personal devices. If your department enables responder features and you accept your device’s location permission prompt, the Platform collects your device’s location, including in the background, while you are responding to or operating at an incident, so that your department can see responder status and arrival. We collect personal-device location only after you grant the operating system’s location permission, and you can withdraw that permission at any time in your device settings. Declining or withdrawing location permission disables only location-based features; the rest of the Platform continues to work.
Navigation. When you use in-app navigation, your device sends its position to Google to calculate the route. We do not store those navigation traces.
Section 7Microphone, Camera, and Photos
Camera and photos. The Platform requests camera or photo-library access only when you choose to take or upload a photo or document, for example for inspections, apparatus checks, floor plans, or incident records. We do not access your camera or photos otherwise.
Microphone. If your department enables an audio feature (such as voice notes or push-to-talk) and you choose to use it, the Platform will request microphone access through your device’s permission prompt and will record audio only while you are actively using that feature. We do not collect ambient audio, and we do not access the microphone for any other purpose. You can withdraw microphone permission at any time in your device settings.
Section 8No Tracking Across Apps or Websites; No Advertising
We do not “track” you as that term is defined by Apple’s App Tracking Transparency framework: we do not link information collected in the Services with information collected by other companies’ apps, websites, or offline properties for advertising or advertising-measurement purposes, and we do not share your information with data brokers. The Piran Command mobile application therefore does not request tracking permission.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not show advertising in the Services. We do not use the information in the Platform to train artificial-intelligence models.
Section 9Third Parties That Collect Information Through the Website
Some content on the Website is served by third parties, which may receive your IP address when your browser requests that content: Google Fonts serves typefaces and Cloudflare serves a script library used for page animations. Our Website analytics count visits without cookies and without creating visitor profiles. We do not permit third-party advertising or ad-tracking technologies on the Services. We do not control these third parties’ technologies; their practices are described in their own privacy policies, linked in Service Providers below.
Section 10How We Use Your Information
We use information that we collect about you or that you provide to us, including any personal information:
- To provide the Services to you and your department, including incident response, dispatch, rosters and scheduling, payroll export, training records, inspections, and federal incident reporting.
- To present the Website and its contents to you and to respond to demonstration requests and other inquiries.
- To provide you with notices about your account and to notify you about changes to the Services.
- To secure and support the Services, investigate errors, and maintain audit records of changes.
- To carry out our obligations and enforce our rights arising from any contracts entered into between your department and us, including for billing and collection.
- To fulfill any other purpose for which you provide it, in any other way we may describe when you provide the information, or for any other purpose with your consent.
We never use your information for advertising.
Section 11Disclosure of Your Information
We may disclose aggregated information that does not identify any individual without restriction. We may disclose personal information that we collect, or that you provide, as described in this privacy policy:
- To your department. The information in the Platform belongs to the department that holds the account, and its authorized personnel can see it according to the permissions the department sets.
- To our service providers, who are bound by contractual obligations to keep personal information confidential and to use it only for the purposes for which we disclose it to them (see the list below).
- To the National Emergency Response Information System (NERIS), when your department files a federal incident report.
- To our subsidiaries and affiliates.
- To a successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets.
- To fulfill the purpose for which you provide it, for any other purpose disclosed by us when you provide the information, or with your consent.
We may also disclose your personal information to comply with any court order, law, or legal process, including to respond to any government or regulatory request; to enforce or apply our agreements, including for billing and collection purposes; or if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.
Section 12Service Providers
We use the service providers below. Each may access personal information only to perform services for us and is required by written agreement to protect it at least as well as this policy requires; where a provider handles health information for a covered-entity customer, we also put a business associate agreement in place with that provider.
- Microsoft Corporation. Cloud hosting and databases (Microsoft Azure) and our business email (Microsoft 365). Privacy policy.
- Anthropic, PBC. Artificial-intelligence features (for example, drafting assistance) via the Anthropic API. Under Anthropic’s Commercial Terms of Service, Anthropic does not use our API inputs or outputs to train its models. Privacy policy.
- Google LLC. Google Cloud services, including Google Maps (navigation, geocoding, and distance calculation) and Google Fonts. Privacy policy.
- Apple Inc.. Distribution of the iPhone/iPad application through the App Store and delivery of push notifications through the Apple Push Notification service. Privacy policy.
- Functional Software, Inc. (Sentry). Error and crash reporting, so we can find and fix faults. Privacy policy.
- Resend. Delivery of transactional email, such as invitations and notifications. Privacy policy.
- GitHub, Inc.. Source-code hosting and build infrastructure used to develop and deploy the Services. Privacy policy.
- UptimeRobot. Availability monitoring of our public endpoints; it does not receive personal information. Privacy policy.
- TCP Software (CrewSense). Scheduling data synchronization, only while a department keeps a CrewSense connection enabled. Privacy policy.
- Cloudflare, Inc.. Content delivery for a script library used on the Website. Privacy policy.
Categories we expect to add. As the Services grow, we expect to add providers in these categories, and will update this policy before they receive personal information: payment processing (when subscription billing begins); SMS/text-message delivery for notifications; computer-aided dispatch (CAD) integrations a department connects; and additional mapping or imagery providers. You may request a current list of our service providers at any time by emailing Hello@PiranCommand.com.
Section 13Choices About How We Use and Disclose Your Information
- Device permissions. Location, microphone, camera, and push-notification access each require your permission through your device’s own prompt, and you can withdraw any of them at any time in your device or application settings.
- Cookies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable the Platform’s sign-in cookies, you will not be able to stay signed in.
- Promotional offers from the Company. If you do not wish to have your contact information used by the Company to promote our own products or services, you can opt out by emailing Hello@PiranCommand.com or by using the unsubscribe link in any promotional email we send. This does not apply to operational messages, such as dispatch notifications or account notices.
- Third-party and targeted advertising. We do not share your personal information with unaffiliated third parties for promotional purposes, and we do not deliver targeted advertising.
- Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law (the “Permitted SPI Purposes”). You have the right to limit the use and disclosure of your sensitive personal information to the Permitted SPI Purposes by emailing your request to Hello@PiranCommand.com.
You may, directly or through an authorized agent, exercise your rights at any time by stating your request to Hello@PiranCommand.com.
Section 14Accessing, Correcting, and Deleting Your Information
Because the records in the Platform belong to your department and your department controls them, please direct requests to access, correct, or delete Platform information to your department; we will help it respond. Accounts are created and removed by your department’s administrators — you cannot create an account yourself — so to have your account and profile deleted, ask your department’s administrator, and we will assist the department in carrying out the deletion.
For information you have provided to us directly, for example through the Website’s demonstration form or by correspondence, you may email Hello@PiranCommand.com to request access to, correct, or delete that information. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
Section 15Data Retention
We keep Platform information for as long as your department’s agreement with us is in effect, and then return or delete it as that agreement provides. Fire-service records are often subject to the department’s own retention obligations under public-records law, which the department controls. We keep website inquiries and correspondence for as long as needed to respond and to maintain our business records.
Section 16Your State Privacy Rights
State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. Depending on where you live, and subject to certain exceptions and limitations, and to the extent applicable to our practices, you may have the right to: know and access your personal information; correct inaccuracies; delete your personal information; opt out of selling, sharing, or targeted advertising (we do none of these); limit the use of sensitive personal information; receive a portable copy; opt out of automated decision-making that significantly impacts your rights; appeal a declined request; and exercise these rights without discrimination.
California residents have each of the rights above to the extent applicable to our practices. Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have comparable rights under their states’ laws. If you live in Maryland, Minnesota, or Oregon, you may also request a list of specific third parties to which we have disclosed personal information.
To the extent applicable to our practices, you may make these requests by emailing Hello@PiranCommand.com. For residents whose states have not granted certain consumer privacy rights, we may honor some of the above rights, and it is in our sole discretion to choose if and how we process such requests.
Section 17Data Security
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Information is encrypted in transit and encrypted at rest by our hosting provider; each department’s records are isolated from every other department’s in our database; and the Platform keeps an audit log of changes.
The safety and security of your information also depends on you. Where you have a password for access to the Platform, you are responsible for keeping that password confidential. Unfortunately, the transmission of information via the internet is not completely secure; any transmission of personal information is at your own risk.
Section 18Changes to Our Privacy Policy
It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you by email or through a notice in the Platform, and the Platform may ask you to accept the updated policy at your next sign-in. The date the privacy policy was last revised is identified at the top of the page.
Section 19Contact Information
To ask questions or comment about this privacy policy and our privacy practices, contact us at:
Trillix Labs, LLC
1555 County Street, Attleboro, MA 02703
Hello@PiranCommand.com
“Piran Command” is a trademark of Trillix Labs, LLC. Apple, iPhone, and iPad are trademarks of Apple Inc. Other product names mentioned in this policy are trademarks of their respective owners and are used only to identify the services described.
Section 20Notice at Collection
Effective Date: October 22, 2026. We do not sell the personal information, including any sensitive personal information, we collect, and we do not share it with third parties for cross-context behavioral advertising. In the preceding twelve months, we may have collected the categories of personal information below. To ask about this notice, email Hello@PiranCommand.com.
The tables below list, for each category, our expected retention period, use purposes, and whether we sell the information or share it with third parties for cross-context behavioral advertising.
Personal information
| Category | Retention period | Business purpose | Sold or shared |
|---|---|---|---|
| Identifiers | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Name, work email, phone, home address, badge and employee number, account ID, IP address, and push-notification token. Used to run the department’s roster, reach members, sign in, and send notifications. | We do not sell this information or share it for cross-context behavioral advertising. |
| California customer records | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Adds signature image, employment history, certifications and license numbers (including a commercial driver’s license, if a department enters one), and medical information (firefighter rehabilitation records). | We do not sell this information or share it for cross-context behavioral advertising. |
| Protected classification characteristics | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Collected for federal NERIS incident reporting only: casualty gender, race, and birth month and year. Time-off types can show military leave or a medical condition. | We do not sell this information or share it for cross-context behavioral advertising. |
| Commercial information | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Biometric information | We do not collect this information. Rehabilitation vitals are health data, not biometric identifiers. | We do not collect this information. | We do not collect this information. |
| Internet or other network activity | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | IP address, browser type, pages used, audit log of changes, error reports, and cookieless website visit counts. Used for security, support, and fixing errors. | We do not sell this information or share it for cross-context behavioral advertising. |
| Geolocation data | Location history is kept as a department record under the department’s agreement; navigation traces are not stored. | GPS position of fire apparatus from mounted tablets, when the department turns it on, including in the background. The location of a member’s personal device only when the department enables responder features and the member accepts the device’s location prompt, while responding, including in the background. Used for the live map, dispatch, responder status, and closest-unit suggestions. A device navigating sends its position to Google for the route; we do not store it. | We do not sell this information or share it for cross-context behavioral advertising. |
| Sensory data | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Photos (scene, inspection, floor plans) and scanned documents that members choose to upload. Audio only through optional audio features a member chooses to use, if the department enables them; we collect no ambient audio. | We do not sell this information or share it for cross-context behavioral advertising. |
| Professional or employment-related information | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Rank, hire date, shifts, time off and balances, overtime, payroll codes, training, and certifications. Used for scheduling, payroll export, and training records. | We do not sell this information or share it for cross-context behavioral advertising. |
| Non-public education information | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Inferences drawn from other personal information | We do not collect this information. | We do not collect this information. | We do not collect this information. |
Sensitive personal information is a subtype of personal information consisting of specific information categories. We do not use or disclose sensitive personal information to infer characteristics about a person.
Sensitive personal information
| Category | Retention period | Business purpose | Sold or shared |
|---|---|---|---|
| Government identifiers | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Only a driver’s license (CDL) number, if a department enters it as part of a member’s certification records. We collect no Social Security, state ID, or passport numbers. | We do not sell this information or share it for cross-context behavioral advertising. |
| Complete account access credentials | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Saved so users can sign in. Passwords are stored only in hashed form by the sign-in provider. | We do not sell this information or share it for cross-context behavioral advertising. |
| Precise geolocation | Location history is kept as a department record under the department’s agreement; navigation traces are not stored. | Apparatus GPS from mounted tablets when the department turns it on, and a member’s personal-device location only with the member’s operating-system permission while responding, each including in the background. Used for the live map, dispatch, responder status, and closest-unit suggestions. | We do not sell this information or share it for cross-context behavioral advertising. |
| Racial or ethnic origin | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Collected for federal NERIS casualty reports only. | We do not sell this information or share it for cross-context behavioral advertising. |
| Citizenship or immigration information | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Religious or philosophical beliefs | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Union membership | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Mail, email, or text message contents not directed to us | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Genetic data | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Unique biometric information used for identification | We do not collect this information. | We do not collect this information. | We do not collect this information. |
| Health information | While the department’s agreement with us is in effect; then returned or deleted as that agreement provides. | Collected only as department data: emergency medical dispatch details and firefighter rehabilitation vitals and clearance, handled under our business associate agreement and services agreement with the department. | We do not sell this information or share it for cross-context behavioral advertising. |
| Sex life or sexual orientation information | We do not collect this information. | We do not collect this information. | We do not collect this information. |
If you have any questions about this Notice or need to access it in an alternative format due to having a disability, please contact Hello@PiranCommand.com.