This Privacy Policy explains how Centangle Global LLC ("Centangle Global LLC", "we", "us" or "our") handles personal data in connection with ForceVera: the website at forcevera.com, the ForceVera web application, and the ForceVera mobile apps for iOS and Android (together, the "Services"). It is written to meet the transparency requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, Canada's PIPEDA and US state privacy laws.
1. Who we are
ForceVera is owned and operated by Centangle Global LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. For the processing described in this policy where we decide the purposes and means, Centangle Global LLC is the data controller. You can reach us about privacy at privacy@forcevera.com.
We have not appointed a Data Protection Officer because our processing does not require one under Article 37 GDPR; our privacy contact above handles all data protection questions and requests.
2. Our role: controller and processor
ForceVera is used by security companies (our "Customers") to manage their guards, supervisors, dispatchers, sites and clients.
- When a Customer uses ForceVera, the Customer decides what data about its staff, guards, sites and clients goes into its workspace and why. For that data the Customer is the controller (or "business") and Centangle Global LLC is its processor (or "service provider"), handling the data only on the Customer's instructions under our agreement with them. If you are a guard, supervisor or client user of a security company, please contact that company first with questions or requests about your data; we will help them respond.
- For our own website, sales and account administration (for example, visitors to forcevera.com, people who book a demo, and the people who sign up and pay for a Customer account), Centangle Global LLC is the controller.
3. What we collect
Information you give us
- Account and contact details: name, email address, phone number, company name, job role, password (stored only as a secure hash) and two-step sign-in codes.
- Billing details: billing name, address and plan. Card details are entered directly with our payment processor, Stripe; we never see or store full card numbers.
- Workspace content added by Customers and their users: schedules and shifts, sites and checkpoints, guard profiles and licences, timesheets, incident and daily activity reports, photos and files, messages, client details, bill rates and invoices.
- Communications: messages you send us, demo requests and support conversations.
Information we receive from others
- From the security company you work with: if you are a guard, supervisor, dispatcher or client user, the Customer that invited you gives us your name, contact details, role, assigned sites and shifts, and may add licence, training and performance information.
- From service providers: payment status from Stripe and delivery status from our SMS and email providers.
Information collected automatically
- Location data from the guard and supervisor mobile app while on duty (see section 6).
- Device and usage data: IP address, browser and device type, operating system, app version, push-notification token, pages and features used, and log and diagnostic data.
- Website analytics: on our public website and sign-up pages (not inside the app), Google Analytics and Microsoft Clarity record pages visited, clicks, scrolling, referring site, approximate location from IP address, and device and browser type. In the EEA, UK and Switzerland this happens only after you accept analytics cookies.
- Cookies and similar technologies: see our Cookie Policy. We do not use advertising cookies.
4. How we use personal data
- To provide the Services: run schedules, verify attendance and patrols, deliver reports and notifications, operate the client portal and produce timesheets and invoices for Customers.
- To create and secure accounts, including sign-in, two-step verification, fraud prevention and audit logs.
- To process subscriptions and payments and send receipts and service messages.
- To provide support, respond to requests and arrange demos.
- To maintain, monitor and improve the Services, fix problems and measure performance (using aggregated or de-identified data where possible).
- To send product news and offers to business contacts, which you can opt out of at any time using the link in each email.
- To comply with law, enforce our terms and protect the rights, safety and property of our users and others.
We do not sell personal data, and we do not use Customer workspace data to advertise to anyone.
5. Legal bases (UK and EU)
Where the GDPR or UK GDPR applies and we act as controller, we rely on these legal bases (Article 6):
| Purpose | Legal basis |
|---|---|
| Creating and running your account, providing the Services, billing and support | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud prevention, audit logs, service improvement and analytics on aggregated data | Legitimate interests in running a secure, reliable service (Art. 6(1)(f)) |
| Website analytics with Google Analytics and Microsoft Clarity | Consent (Art. 6(1)(a)), given in the cookie banner and withdrawable at any time with "Cookie settings" |
| Product news and offers to business contacts | Legitimate interests (Art. 6(1)(f)), or consent where the law requires it (Art. 6(1)(a)); you can opt out at any time |
| Tax, accounting and responding to lawful requests | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have balanced them against your rights; you can ask us for details and you can object (see section 11). Where we rely on consent, you can withdraw it at any time without affecting earlier processing. Giving us account and billing details is necessary to enter into a contract with us; without them we cannot provide the Services. Where we act as processor, the Customer determines the legal basis for workspace data.
6. Location data from the mobile app
ForceVera's purpose is to verify that security shifts are actually worked. When a guard or supervisor is clocked in, the mobile app uses the device's location to confirm clock-in and clock-out at the assigned site (geofencing), record patrol checkpoint scans and show on-duty positions to the Customer's dispatchers. Location is collected only while the user is on duty, and the device asks for permission first. A user can turn location off in the device settings, but the Customer may then be unable to verify that user's attendance. Location records belong to the Customer's workspace and are kept and deleted according to the Customer's settings and instructions.
7. Who we share data with
We share personal data only as described here:
- Within a Customer's workspace: users see the data their role allows (for example, dispatchers see on-duty guards; client users see reports for their own sites).
- Service providers ("sub-processors") who process data for us under written contracts that require them to protect it and use it only to provide their service to us:
| Provider | Purpose |
|---|---|
| InMotion Hosting (United States) | Hosting of the website, application and database |
| Stripe | Subscription billing and card payments |
| Twilio | SMS shift alerts and reminders |
| Google Firebase | Push notifications to the mobile app |
| Pusher | Real-time updates in the web app |
| Geoapify | Maps and address lookup |
| Email delivery providers | Sign-in codes, notifications, reports and receipts (a Customer may send through its own email account) |
| Calendly | Demo booking, only when you choose to book a demo |
| Google LLC (Google Analytics, Google Tag Manager) | Website analytics on public pages |
| Microsoft Corporation (Microsoft Clarity) | Website analytics and usability recordings on public pages |
- Legal and safety: where required by law or valid legal process, or to protect rights, safety and property.
- Business transfers: in a merger, acquisition or sale of assets, subject to this policy.
8. International transfers
ForceVera is hosted in the United States. If you are in the UK, the European Economic Area, Switzerland or Canada, your data will be transferred to and processed in the United States and other countries where our service providers operate. Where the law requires it, we protect these transfers with appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, and Customers can rely on our Data Processing Addendum, which includes these clauses. You can ask us for a copy of the safeguards using the contact details below.
9. How long we keep data
We keep account and billing data for as long as the account is active and afterwards for as long as needed for legal, tax and accounting purposes (typically up to seven years for billing records). Workspace data is kept for as long as the Customer's subscription is active and the Customer wants it. When a subscription ends the workspace becomes read-only; a Customer can ask us to export or delete its workspace data, and we delete it from active systems within 90 days of a deletion request, with backups overwritten on their normal cycle. Logs are generally kept for no more than 12 months.
10. Security
We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), a separate workspace for each Customer, role-based permissions, two-step sign-in, password hashing, audit logs of sensitive actions, and restricted administrative access. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as the law requires.
11. Your rights
If you are in the EU, the European Economic Area or the UK, you have the right to:
- access your personal data and receive a copy (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased in certain cases (Art. 17);
- restrict processing in certain cases (Art. 18);
- data portability: receive data you gave us in a structured, machine-readable format or have it sent to another organisation (Art. 20);
- object to processing based on legitimate interests, and at any time to direct marketing (Art. 21);
- withdraw consent at any time where processing is based on consent;
- not be subject to decisions based solely on automated processing that have legal or similarly significant effects (Art. 22). ForceVera does not make such decisions; attendance and patrol records are reviewed by the Customer's staff.
People elsewhere may have similar rights under local law. To use your rights, email privacy@forcevera.com. We will verify your identity and reply within one month (which the GDPR allows us to extend by two further months for complex requests, telling you why), or within 45 days under US state laws. Using your rights is free unless a request is manifestly unfounded or excessive. If your data is in a Customer's workspace, we will pass your request to that Customer and help them respond.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work or where an alleged breach happened, or with the UK Information Commissioner's Office (ico.org.uk). We would appreciate the chance to address your concern first.
12. US state privacy rights
Residents of California and other states with comprehensive privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon) may have the rights described in section 11, including the right to know what personal data we collect and how we use and disclose it. In the last 12 months we have collected the categories described in section 3 (identifiers, commercial information, internet activity, geolocation and professional information) for the purposes in section 4, and disclosed them only to the service providers in section 7. We do not sell or "share" personal data for cross-context behavioural advertising, and we do not use or disclose sensitive personal data for purposes that would require a right to limit. We will not discriminate against you for using your rights. You may use an authorised agent to make a request on your behalf.
13. Canada
We handle personal information of people in Canada in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. You can ask to access or correct your personal information and withdraw consent, subject to legal and contractual limits, by contacting our privacy contact below. You may also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
14. Children
ForceVera is a business service for adults and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
15. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for material changes, notify account owners by email or in the app before the change takes effect.
Contact us
Centangle Global LLC, a Wyoming limited liability company that owns and operates ForceVera
30 N Gould St, Ste R, Sheridan, WY 82801, United States
Email: privacy@forcevera.com