Privacy Policy

1. Introduction

CaravelIQ LLC ("CaravelIQ," "we," "us," or "our") operates the CampanaOne Critical Event Management platform. We take your privacy and data security seriously. This Privacy Policy outlines how we collect, use, process, and protect your personal data when you use our platform and related services.

2. Information We Collect

We collect information necessary to deliver critical communications. This includes:

• Identity Data: Name, job title, department, organization.
• Contact Data: Phone numbers, SMS numbers, email addresses.
• Location Data: Geo-location data during active emergency events (only when explicitly enabled via our mobile application).
• Technical Data: IP addresses, browser types, and usage telemetry.

3. How We Use Your Information

Your data is used strictly for operational resilience and communication purposes, including:

• Delivering emergency notifications via Voice, SMS, Email, and Push Notifications.
• Authenticating users via SCIM, JIT, and SSO integrations.
• Providing analytics to organizational administrators regarding message delivery success rates.

3a. Apple Push Notifications (APNs)

CaravelIQ LLC delivers push notifications to iOS devices via the Apple Push Notification service (APNs) on behalf of enterprise customers. This capability is used exclusively to deliver time-critical operational alerts and emergency communications to opted-in users of the CampanaOne mobile application.

• Opt-In: Push notifications are enabled only when a user explicitly grants notification permission through the iOS system prompt within the CampanaOne app.
• Opt-Out: Users may disable push notifications at any time through iOS Settings > Notifications > CampanaOne, or by contacting their organizational administrator.
• Data Transmitted: Device push tokens are transmitted to CaravelIQ's servers solely for the purpose of routing notifications. Tokens are not used for advertising or shared with third parties.
• No Unsolicited Notifications: CaravelIQ does not send unsolicited push notifications. All notifications are generated by active incident conditions or user-configured alert thresholds within the platform.
• Compliance: CaravelIQ's use of APNs adheres fully to Apple's Developer Program License Agreement, Human Interface Guidelines, and Apple's data-handling policies. Technical inquiries may be directed to apns@caraveliq.com.

4. SMS Communications

Mobile phone numbers and consent records collected for SMS communications are used exclusively to deliver the communications for which consent was obtained, and are never sold, rented, or shared with third parties for marketing purposes. For full detail on how SMS consent, opt-in, and opt-out are handled, see our SMS Consent & Opt-In, SMS Messaging Compliance, and SMS Opt-Out Instructions pages.

5. Data Sharing and Third Parties

We do not sell your data. We share data only with trusted telecommunication carriers (for delivering SMS/Voice) and cloud infrastructure providers necessary to operate our service. All third parties are bound by strict confidentiality and data protection agreements.

6. Data Retention and Security

We employ enterprise-grade security, including envelope encryption, SOC 2 Type II compliance controls, and ISO 27001 standards. Data is retained only as long as necessary to fulfill the purposes outlined in this policy or as required by law.

7. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to access, correct, delete, or restrict the processing of your personal data. Please contact your organizational administrator or reach out to us directly to exercise these rights.

8. Contact

For questions about this policy, please visit our Contact Page or email compliance@caraveliq.com. For APNs-related inquiries, contact apns@caraveliq.com.

CaravelIQ LLC  |  1209 Mountain Road Pl NE, Suite R, Albuquerque, NM 87110, USA