Privacy Policy

Effective Date: February 5, 2026 | Last Updated: August 22, 2026

CERA Software, Inc. ("CERA," "we," "us," or "our") operates the CERA platform, including our web application, mobile applications, and related services (collectively, the "Service"). CERA is a real-time multi-agency threat management platform that connects first responders, event managers, and approved users during critical events.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service. By accessing or using the Service, you agree to the terms of this Privacy Policy.

We reserve the right to update this Privacy Policy from time to time. Changes will be communicated via written notice at least 7 days prior to their effective date. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

1. Information We Collect

Information You Provide

When you register for or use the Service, we may collect the following information:

• Account Information: Name, email address, phone number, and organizational affiliation.
• Professional Information: Role, department, agency, or employer details relevant to your use of the platform.
• Communication Data: Messages, alerts, and notifications sent or received through the Service.

Information Collected Automatically

When you use the Service, we may automatically collect:

• Location Data: When you use the CERA app during a critical event, we collect your real-time location to provide situational awareness to you, your co-workers, and incident commanders. Location data is collected only while the app is actively in use during an event.
• Device Information: Device type, operating system version, unique device identifiers, and app configuration.
• Log Data: In the event of an error, we may collect information such as your device's IP address, device name, operating system version, app configuration, timestamps, and other diagnostic statistics.
• Usage Data: Information about how you interact with the Service, including features accessed, actions taken, and session duration.

Cookies and Similar Technologies

The Service does not use cookies explicitly. However, the Service may use third-party code and libraries that use cookies to collect information and improve their services. You have the option to accept or refuse these cookies. Refusing cookies may limit your ability to use certain portions of the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service.
• To send transactional communications, including account registration confirmations, login links, security alerts, and system notifications.
• To provide real-time location information during critical events to authorized users, co-workers, and incident commanders.
• To communicate with you about your account, respond to inquiries, and provide customer support.
• To monitor and analyze usage patterns and trends to improve the Service.
• To detect, prevent, and address technical issues, fraud, or security concerns.
• To comply with legal obligations and enforce our Terms of Service.

3. SMS/Text Messaging

CERA may send optional automated transactional SMS messages for account access. The registered CERA account-access SMS program may include:

• Confirmation that you enrolled in CERA account-access text messages.
• Account setup messages sent after you enroll.
• Secure login links that you request.

Consent: Providing a phone number, creating an account, or having an account created by an administrator does not by itself constitute consent to receive SMS messages. CERA obtains recurring SMS consent directly from you through an optional, unchecked consent control presented during account confirmation or in SMS preferences. Consent is tied to the mobile number displayed when you enroll. If you change your number, you must enroll again for the new number.

You may separately request a single secure login-link text. That request authorizes only the requested message and does not enroll you in recurring SMS messages or override a previous opt-out. SMS consent is not a condition of purchase, employment, account activation, or access to CERA; available email-based account-access methods remain available if you decline or withdraw consent.

Consent Records: CERA may retain the mobile number, consent or opt-out action, consent language version, source, date and time, and related delivery records needed to document and honor your SMS preferences.

Message Frequency: Message frequency varies based on your account activity and the login links you request.

Message and Data Rates: Message and data rates may apply. Please consult your wireless carrier for details about your messaging plan.

Opt-Out: You may opt out of receiving SMS messages at any time by replying STOP to any message from CERA. After opting out, you will receive one confirmation message and no further account-access SMS messages unless you complete a new approved opt-in. Opting out does not prevent you from using available email-based account-access methods.

Help: For help with SMS messaging, reply HELP to any message from CERA, or contact us at support@ceraapp.com.

Carriers: CERA's SMS services are supported by major U.S. wireless carriers. Carriers are not liable for delayed or undelivered messages.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Within Your Organization: Your name, role, and real-time location during critical events may be shared with other authorized users within your organization or participating agencies, as necessary for the operation of the platform.
• Service Providers: We may share information with third-party service providers who perform services on our behalf, such as hosting, analytics, and communications. These providers are contractually obligated to use your information only as necessary to provide their services to us and are prohibited from using it for other purposes.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request.
• Safety and Security: We may disclose information when we believe in good faith that disclosure is necessary to protect the safety of our users, the public, or CERA, or to prevent fraud or illegal activity.

Location data is not shared with any third parties outside of the authorized users and agencies connected through the Service during critical events.

CERA does not sell or share mobile phone information, SMS opt-in data, or SMS consent with third parties for their marketing purposes. CERA may provide the minimum information necessary to communications service providers and mobile carriers to deliver messages, process HELP and STOP requests, prevent fraud, and comply with applicable law.

5. Data Security

We value your trust and employ commercially reasonable administrative, technical, and physical safeguards to protect your personal information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

7. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

8. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to access, correct, delete, or port your data. To exercise these rights, please contact us at support@ceraapp.com.

9. Third-Party Services

The Service may integrate with or contain links to third-party services. This Privacy Policy does not apply to third-party services, and we encourage you to review the privacy policies of any third-party services you access.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

CERA Software, Inc.

Email: support@ceraapp.com

Website: https://ceraapp.com