1. Introduction
FD.Bingo ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our secure link management platform (the "Service").
By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described here, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, password, and organizational affiliation when you register for an account
- Agency information: Agency name, subdomain preference, and department type during agency setup
- Payment information: Billing details and payment method information, processed securely through our payment processor (Stripe). We do not store your full credit card number on our servers
- Link content: URLs, link titles, descriptions, categories, and link configurations you create within the Service
- Custom domain information: Domain names and DNS records when you configure a custom domain
- Communications: Any information you provide when contacting us for support
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, actions taken within the Service, and timestamps of these activities
- Link click data: When visitors click links on your public page, we record the click timestamp, the link clicked, the visitor's IP address, user agent string, and referrer URL for analytics purposes
- Audit logs: We log link creation, modification, and deletion events, including the identity of the user who made the change, their IP address, and the before/after values of the change
- Device information: Browser type, operating system, device type, and screen resolution
- IP addresses: We collect IP addresses for security logging, abuse prevention, and analytics
- Cookies and similar technologies: We use essential cookies for session management and authentication. See Section 7 for more details
2.3 Information from Third Parties
- Email domain verification: We may verify your email domain against our database of known public safety agencies to streamline the approval process
- Payment processor: Stripe may provide us with limited payment and subscription status information
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process account registration and manage your account
- Process payments and manage subscriptions
- Provide link click analytics and health monitoring reports to account administrators
- Send email notifications about link changes to authorized IT contacts
- Verify your identity and organizational affiliation
- Detect, prevent, and address fraud, abuse, security issues, and technical problems
- Enforce our anti-phishing protections and link validation rules
- Respond to your support requests and communications
- Send important notices about changes to the Service or our policies
- Comply with legal obligations
4. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:
- Service providers: We share information with third-party service providers who perform services on our behalf, including payment processing (Stripe), email delivery, and hosting. These providers are contractually obligated to protect your data and use it only as directed by us
- Within your organization: Account administrators within your agency can view activity logs, user accounts, and link analytics for their organization
- Public link pages: Information you include on your public link page (agency name, link titles, descriptions, category names) is publicly accessible by design. Visitor click data is only visible to your agency's authorized administrators
- Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request
- Business transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service of any change in ownership
- With your consent: We may share your information for other purposes with your explicit consent
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained for the duration of your account and for a reasonable period after account closure for legal and business purposes
- Audit logs: Retained for the lifetime of the account for security and compliance purposes
- Link click analytics: Aggregated analytics are retained indefinitely. Individual click records with IP addresses are retained for up to 12 months
- Payment records: Retained as required by applicable tax and financial regulations
After account deletion, we may retain certain information in anonymized or aggregated form that cannot be used to identify you.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit using TLS/SSL
- Mandatory two-factor authentication for all user accounts
- Role-based access controls limiting data access to authorized personnel
- Regular security monitoring and logging
- Secure payment processing through PCI-DSS compliant providers
- Password hashing using industry-standard algorithms
Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using commercially reasonable measures.
7. Cookies and Tracking
We use the following types of cookies:
- Essential cookies: Required for the Service to function, including session management and authentication tokens. These cannot be disabled
- Security cookies: Used for CSRF protection and to detect fraudulent activity
We do not use third-party advertising cookies or tracking pixels. We do not participate in ad networks or sell data to advertisers.
8. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete personal data
- Deletion: Request deletion of your personal data, subject to our retention obligations
- Portability: Request a machine-readable copy of your data
- Objection: Object to certain processing of your personal data
- Restriction: Request restriction of processing of your personal data
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
9. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, disclose, and sell
- The right to request deletion of your personal information
- The right to opt-out of the sale of your personal information (we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
10. International Data Transfers
The Service is hosted and operated in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States.
11. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe a child has provided us with personal data, please contact us at [email protected].
12. Third-Party Links and Services
Your public link page may contain links to third-party websites and services (such as Telestaff, Kronos, TargetSolutions, etc.). We are not responsible for the privacy practices of these third-party services. We encourage you to review the privacy policies of any third-party services you access through the Service.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide notice through the Service or by email. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]