Privacy Policy

Account information: your name, email, company name, and role.

Roster data: full names, phone numbers, email addresses, badge IDs, departments, roles, and optional profile photos for the people you enroll (employees, visitors, and contractors).

Check-in & event records: timestamps, muster station, check-in method, and resolution status ("Safe," "Off-Site," "Needs Medical," "Missing") generated during drills and emergencies.

Broadcasts: the content, recipients, and send time of messages sent through the Service.

Biometric data: when you enable optional face-match check-in, a 128-value mathematical face descriptor computed on the user's device. This is not a photograph.

Usage & technical data: device type, browser, and log data used to operate and secure the Service.

• To provide muster check-in, accountability, and compliance reporting;
• To send safety broadcasts you authorize;
• To operate optional face-match check-in where you have enabled it;
• To maintain audit trails required for OSHA 1910.38 / NFPA 101 compliance reporting;
• To provide customer support and improve the Service;
• To process payments through our payment processor, Stripe.

Face descriptors are computed on the user's device using on-device models. Descriptors are stored with the roster record to enable hands-free check-in. We do not collect face photographs as part of face match, and descriptors are not used to identify individuals to third parties.

Consent required. You must obtain and document each individual's written consent before enrolling a face descriptor. Face match may be disabled for any person at any time; disabling it stops future matching. Where applicable law requires it (e.g., Illinois BIPA, Texas CUBI, Washington RCW 19.375), you are responsible for providing the required notices, consent forms, and retention schedules.

We do not sell your data. We share information only as needed to operate the Service: with our cloud infrastructure and database providers, our payment processor (Stripe), and SMS delivery providers when you send broadcasts. We may disclose information when required by law or to protect the rights, property, or safety of MBG, our users, or others.

We use administrative, technical, and physical safeguards designed to protect your data. Access is restricted to authorized personnel. However, no system is perfectly secure, and we cannot guarantee absolute security. Account administrators control which users within your organization may access roster and event data.

We retain roster and event data for as long as your account is active and as needed to support compliance reporting. Event audit records are retained to support OSHA evacuation-accounting requirements. You may request deletion of your data by closing your account; certain records may be retained where required by law or legitimate business needs.

Depending on your location, you may have rights to access, correct, or delete your personal data, and to withdraw biometric consent. To exercise these rights, contact us using the details below. Administrators may correct or remove roster entries directly within the Service.

The Service is not directed to children under 16, and we do not knowingly collect their personal information. Visitors under 18 may be enrolled in a roster only by an authorized representative of the organization responsible for them.

The Service is hosted in the United States. If you access it from outside the U.S., your information is transferred to and processed in the U.S., where data protection laws may differ from your jurisdiction.

We may update this Privacy Policy from time to time. Material changes will be posted with an updated "Last updated" date; continued use of the Service after changes constitutes acceptance.

Questions or requests regarding this policy or your data may be directed to Marlborough Business Group LLC at info@marlboroughbusinessgroup.com or (508) 919-6172.