GovCIO COMMANDLINK Web Privacy Policy

Last Modified: July 28, 2026 Effective Date: July 28, 2026 Platform: Web

Changelog

• 2026-07-28: Initial web policy version created from current Voyager legal policy language.
• 2026-07-28: Refactored to shared-baseline model with expanded web-specific data, cookie/session, and browser-permission disclosures.
• 2026-07-28: Merged COMMANDLINK web app service disclosures and aligned language for U.S.-focused deployment.

Policy Scope

This policy applies to the GovCIO COMMANDLINK web experience and related supporting services.

GovCIO ("GovCIO," "GovCIO COMMANDLINK," "we," or "us") is committed to protecting the privacy of personally identifiable information collected through the service.

Shared Baseline

This platform-specific policy is based on the shared language in:

• ../shared/voyager-privacy-policy-shared-2026-07-28.md

Unless otherwise stated below, shared sections govern:

• Core policy-change language
• Data retention and security baseline
• Core user-rights baseline
• Children's privacy baseline
• Regional disclosure baseline

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in practices, technology, legal requirements, or other factors.

If material changes are made, we will publish an updated policy and effective date.

1. Information We Collect

1.1 Account and Authentication Information

• Username and account identifiers.
• Authentication data required for sign-in and account session continuity.
• Multi-factor authentication data when enabled.

1.2 Browser and Technical Information

• Browser type and version.
• Operating system and device context.
• IP address, network metadata, and request telemetry.
• Error, diagnostic, and operational logs.

1.3 Cookies and Similar Technologies

• Session cookies and related browser storage for authentication and session management.
• Functional cookies or similar technologies used to support user preferences and service operation.
• Security-related tokens needed to protect account access and web sessions.

1.4 Location and Operational Data

• Location and map-related data when enabled and applicable.
• Alerts, status updates, event reports, and related operational metadata.
• Monitoring and dashboard interaction metadata used to support service workflows.
• Geofence boundary interactions, entry and exit events, and map-based operational activity.

1.5 Real-Time Communication Data

• Session metadata for real-time communication features.
• Presence and connection-state metadata used for reliability and status updates.

1.6 Support Communications

• Information submitted through support requests, including message content and attachments.

2. How We Use Information

We use information to:

• Authenticate users and secure access to the web service.
• Operate and maintain map, monitoring, alerting, and administrative workflows.
• Manage session continuity and user preferences.
• Troubleshoot issues, monitor reliability, and improve product quality.
• Detect misuse, prevent unauthorized access, and support security operations.
• Respond to support requests and user feedback.
• Comply with legal obligations.

3. Legal Bases for Processing (Where Applicable)

Depending on jurisdiction, processing may be based on:

• Performance of a contract.
• Legitimate interests (for example, security, diagnostics, reliability improvements, and service operations).
• Consent (for example, location permissions where applicable).
• Legal obligations and compliance with applicable U.S. federal and state legal requirements.

4. Sharing and Disclosure of Information

GovCIO does not sell personal information.

Information may be shared with:

• Service providers and infrastructure partners that host or process data on our behalf.
• Messaging, notification, and operational service providers needed for platform functionality.
• Analytics, logging, or monitoring providers used for reliability and security.
• Legal authorities when required by law, regulation, subpoena, or legal process.
• Successors in connection with merger, acquisition, financing, or asset transfer.

We require service providers to protect information and use it only for authorized purposes.

5. Third-Party Services and Integrations

The web platform relies on third-party and internal services for infrastructure, real-time communication, mapping, alerts, and data persistence.

5.1 Microsoft SignalR

• Purpose: Real-time messaging for live tracking updates and notifications.
• Data types: User/session connection metadata and update payloads.
• Privacy: https://privacy.microsoft.com/

5.2 LiveKit

• Purpose: Real-time voice and communication session features.
• Data types: Session metadata, connection quality metadata, and communication transport metadata.
• Privacy: https://livekit.com/legal/privacy-policy

5.3 Leaflet

• Purpose: Client-side map rendering and map interaction handling.
• Data types: Client-side interaction state; tile-provider requests are handled by the configured tile service.
• Privacy: https://leafletjs.com/

5.4 ArcGIS Online (Esri)

• Purpose: Map tiles, imagery, and geographic reference layers.
• Data types: Tile requests, map bounds, and zoom-level metadata.
• Privacy: https://www.esri.com/en-us/privacy/overview

5.5 Internal COMMANDLINK Services

• OmniAlert API: Alert composition and distribution workflows.
• COMMANDLINK Admin Service: User, group, and role administration workflows.
• TrackNext: Unit tracking and telemetry workflows.

5.6 Data Storage Services

• Microsoft SQL Server may be used for primary application data persistence and recovery workflows, depending on deployment.

6. Data Retention

Refer to the shared baseline section:

• Data Retention

Web-specific retention behavior may vary by enabled customer features, environment configuration, and legal requirements.

7. Data Security

Refer to the shared baseline section:

• Data Security

Web-specific notes:

• Browser and server-side security controls are used to protect session data and authenticated requests.
• Transport security controls are used to protect data in transit.

8. Your Choices

Users can:

• Manage browser privacy settings, including cookie controls.
• Manage browser permissions for location-related features, where applicable.
• Request account support for access updates or deactivation workflows.
• Manage app-specific preferences and settings where available.

Disabling browser features, permissions, or settings may limit functionality.

9. Your Privacy Rights

Refer to the shared baseline section:

• User Choices and Rights

10. Children's Privacy

Refer to the shared baseline section:

• Children's Privacy

11. U.S. State Privacy Disclosures

Refer to the shared baseline section:

• U.S. State Privacy Disclosures

Platform-specific details are provided where required by customer deployment context and legal review.

12. Contact

COMMANDLINK Support

• Email: CommandLinkSupport@GovCIO.com
• Phone: 1-877-857-1100