SimEOC

Privacy Policy

Last updated: July 2025

1. Introduction

SimEOC ("we," "our," or "us") operates a web-based Emergency Operations Center exercise simulation platform. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the SimEOC platform and website (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organization name. If you are invited to an organization by an administrator, we collect the same information upon account creation.

Exercise Data

SimEOC stores all data you create within the platform, including exercises, injects, participant responses, and after-action reports. This data belongs to your organization and is stored on your behalf.

Usage Data

We collect information about how you interact with the Service, including log data (IP address, browser type, pages visited, timestamps), feature usage, and session duration. This data is used to improve the platform and diagnose technical issues.

Payment Information

If you subscribe to a paid plan, payment is processed by a third-party payment processor. We do not store your full credit card number or payment credentials.

3. How We Use Your Information

  • To provide, operate, and improve the SimEOC platform
  • To authenticate users and manage organization access
  • To send transactional communications (account confirmation, password reset, billing receipts)
  • To send product updates and announcements (you may opt out at any time)
  • To detect, investigate, and prevent security incidents and abuse
  • To comply with legal obligations

4. Data Isolation and Security

Each SimEOC organization operates in an isolated workspace. Exercise data, user lists, inject libraries, and after-action reports are not shared between organizations. Access to an organization's data requires authenticated login with a role-appropriate account.

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • Service providers who assist us in operating the platform (hosting, email delivery, payment processing), under data processing agreements
  • Law enforcement or regulatory authorities when required by law or to protect our legal rights
  • Successors in the event of a merger, acquisition, or sale of assets, with notice provided to affected users

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Exercise data associated with your organization is retained for the duration of your subscription plus 90 days after account closure, after which it is permanently deleted unless you request earlier deletion.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability (export your data in a common format)

To exercise any of these rights, contact us at privacy@simeoc.com.

8. Cookies

SimEOC uses essential cookies for session management and authentication. We do not use advertising cookies or third-party tracking cookies. You may disable cookies in your browser settings, but this will prevent you from logging in to the platform.

9. Children's Privacy

SimEOC is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or through an in-app notification. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at:

SimEOC Privacy Team
privacy@simeoc.com