Legal

Privacy Policy

Effective November 11, 2026

1. Who we are and what this covers

This Privacy Policy explains how Ulmer Software LLC ("Ulmer," "we," "us") handles information in connection with the Ulmer Security Management System, including Ulmer Security Operations, ExecPro, the resident app, guest passes and job application pages (the "Service"), and our public website.

2. Our role and our customers' role

Our customers are security companies and other businesses (each a "Customer"). A Customer decides whom to invite, what information to collect about its staff, clients, residents, visitors and protected persons, and how to use it. For that information, the Customer is in charge of it (often called the "controller" or "business"), and we process it on the Customer's behalf as its service provider (often called the "processor").

We are in charge of a smaller set of information: details about Customers' accounts and billing, people who visit our website or contact us, and information we need to keep the Service secure.

3. Information we collect

Information Customers and their Users put into the Service

• Account and staff details: names, work email addresses, phone numbers, roles, sites, and, if a Customer chooses, home addresses and emergency contacts.
• Work records: schedules, time clock entries, patrol checkpoint scans, pass-downs, incident and daily activity reports, photos, use-of-force reports, training and license records, armory records, payroll hours and invoices.
• Visitor and gate records: visitor names, guest lists, vehicle details and license plates, gate entry and exit times, guest pass details and, where a Customer uses ID scanning, information read from a driver's license or ID card (such as name, date of birth, ID number and expiration) and an optional photo of the ID.
• License plate camera reads: plate numbers, times and camera locations, where a Customer connects license plate cameras.
• Camera access: details needed to show a Customer's camera feeds. Live video passes through to the viewer; Ulmer does not record or store camera video.
• Location: officer locations while on duty for live maps and patrol routes, and, in ExecPro, the location of a protected person who has consented to share it and of the detail team.
• Messages and requests: dispatch messages, resident service requests and emergency alerts, and ExecPro messages between a protected person and the detail lead.
• Residents: name, household, contact details and guest lists for residents a Customer invites to the resident app.
• Job applicants: information submitted through a Customer's job application page, such as contact details, work history, licenses and documents.

Information we collect for our own purposes

• Sign-up and billing: company name, owner's name and email, chosen plan and seat counts. Card details are collected and stored by Stripe; we receive only limited details such as the card brand and last four digits.
• Security and device information: sign-in times, two-factor status, IP address, browser and device type, and records of important actions (an audit log), used to protect accounts and investigate misuse.
• Returning visitors: a one-way coded (hashed) version of the network address a Customer's team signs in from, so the website can send returning customers straight to the sign-in page. We cannot turn this code back into the address.
• Phone alerts: push notification tokens for devices that turn on alerts.
• Communications: messages you send us and our replies.

4. How we use information

• To provide the Service and its features, as directed by each Customer.
• To create and secure accounts, require two-factor sign-in, and detect and prevent fraud, abuse and security incidents.
• To process payments, manage subscriptions and send receipts, setup packets and account notices.
• To send alerts, emails and text messages that a Customer has set up.
• To provide support, fix problems and improve the Service.
• To comply with the law and enforce our Terms of Service.

We do not sell personal information, share it for cross-context behavioral advertising, or use Customer Data to train artificial intelligence models.

5. How information is shared

• Within a Customer's account: information is visible to that Customer's Users according to the roles and permissions the Customer sets. For example, a client may see reports for its own sites, and a resident sees only their own household.
• With service providers that help us run the Service (listed below), under contracts that limit their use of the information.
• With services a Customer connects, such as QuickBooks Online or camera systems, when the Customer turns that connection on.
• For legal reasons: when we believe in good faith that the law, a court order or valid legal process requires it, or to protect the rights, property or safety of anyone. Where the law allows, we will tell the affected Customer first.
• In a business transfer: if our business is sold, merged or reorganized, information may transfer to the new owner, who must continue to protect it as this policy describes.

6. Service providers

This list may change as the Service grows. We will update this page when it does.

7. How long we keep information

We keep Customer Data for as long as the Customer's account is active, and the Customer can delete most records at any time. Some sensitive records are deleted automatically:

After a subscription ends, we may delete the Customer's data 30 days later unless the Customer asks us to export or delete it sooner. We keep billing and tax records, and records needed to resolve disputes or meet legal duties, for as long as the law requires. Deleted information may remain in encrypted backups for a limited time before it is overwritten.

8. Security

We protect information with measures including required two-factor sign-in, encryption in transit (HTTPS) and at rest, database rules that keep each Customer's records separate and limit each User to what their role allows, short-lived links for private files, an audit log of important actions, and limits on staff access. No system is perfectly secure. If we learn of a breach affecting personal information, we will notify the affected Customers, and others where the law requires, without undue delay.

9. Cookies and browser storage

We do not use advertising or third-party tracking cookies or analytics. The Service uses your browser's storage only for things it needs to work, such as keeping you signed in, remembering your language and app mode, and saving drafts while you are offline. You can clear this storage in your browser settings, which will sign you out.

10. Your choices and rights

• If your information is in a Customer's account (for example, you are an officer, resident, client, visitor or protected person), please contact that company. It controls your information and can view, correct, export or delete it. If you contact us, we will pass your request to the company and help it respond.
• If you are a Customer's admin, you can update your company's information in the Service, and you can ask us to export or delete it.
• Location sharing in ExecPro can be turned off at any time by the protected person. Phone alerts and location permissions can also be turned off in your phone's settings.
• State privacy rights. Depending on where you live, including California and other states with privacy laws, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to not be treated differently for using these rights. We do not sell or share personal information for targeted advertising. To make a request about information we control, email us. We will verify your request and respond within the time the law requires. You may use an authorized agent where the law allows.

11. Children

The Service is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Residents under 18 may use the resident app only with a parent or guardian's permission. If you believe a child under 13 has given us personal information, contact us and we will delete it.

12. Where information is stored

Information is stored and processed in the United States. If you use the Service from another country, your information will be transferred to the United States.

13. Changes to this policy

We may update this policy. If we make a material change, we will tell Customers' admins by email or in the Service before it takes effect, and we will update the date at the top of this page.

14. Contact

For privacy questions or requests, contact:
Ulmer Software LLC
Email: blackwolfaccount@protonmail.com