rccmatrix.com
Privacy Policy
RCC Matrix is an incident-coordination platform that organizations provide to their own personnel. This policy explains what information the RCC Matrix mobile application, web surfaces, and supporting services collect, how it is used, how long it is kept, and how to exercise your choices.
Who controls your information
RCC Matrix accounts are created and managed by your organization's administrators; there is no public self-signup. Your organization decides who has access and which roles they hold, and it is the primary controller of incident records created through the service. Phoenix Emergency Solutions operates the platform on your organization's behalf.
Information we collect
| Category | Details | Purpose |
|---|---|---|
| Account identity | Name, email address, phone number, role, organization membership | Authentication, authorization, paging and escalation |
| Precise location | GPS coordinates and reverse-geocoded address when you attach location to a report; manually typed site/pad names | Directing responders to the incident scene |
| Incident content | Incident descriptions, notes, status updates, command notes, photos, and injury indications you or your team submit | Incident coordination, response records, and safety audit |
| Device and notification data | User and device identifiers, push notification tokens, notification delivery and acknowledgement records | Delivering and confirming critical alerts |
| Usage and diagnostics | Aggregate product analytics and application error reports, where enabled for your deployment | Reliability and service improvement |
Injury indications recorded in an incident may constitute health-related information. They are collected solely for emergency coordination and the incident record.
How we use information
- Operate incident reporting, triage, response, and command workflows.
- Deliver push notifications, SMS one-time passcodes, and voice-call escalations.
- Maintain the tamper-evident incident and audit history your organization relies on.
- Secure the service, prevent unauthorized access, and diagnose failures.
We do not sell personal information, use it for third-party advertising, or track you across other companies' apps or websites.
Service providers
We use a small set of processors to run the service:
- Supabase — database, authentication, and encrypted media storage.
- Expo / Apple Push Notification service / Firebase Cloud Messaging — push notification delivery.
- Twilio — SMS one-time passcodes and voice-call escalation.
- Mapbox — maps and reverse geocoding of incident locations.
- PostHog — product analytics, where enabled for your deployment.
- Operational error monitoring, where enabled for your deployment.
Retention
Incident records, timelines, and audit trails are retained for seven years by default, or longer where your organization's regulatory obligations require it. Incident photos and media follow the same schedule unless your organization configures otherwise. Account profile data is retained while your organization keeps your account active and removed or de-identified after deactivation, except where it forms part of a retained incident or audit record.
Security
Access is role-based and organization-scoped, enforced at the database layer. Incident media is stored privately and served only through short-lived signed links. Data is encrypted in transit.
Your choices and requests
- Location, photo library, and notification permissions are requested in context and can be declined or changed in your device settings; core reporting still works with manual location entry.
- To access, correct, or delete your information, contact your organization's administrator, who manages your account.
- You may also contact us directly at support@pes-hou.com. We respond within 30 days. Deletion requests are honored except where records must be retained for the incident and audit obligations described above; in those cases profile data is de-identified wherever possible.
Children
RCC Matrix is a workplace tool for authorized adult personnel and is not directed to children.
Changes
We will post updates to this policy at this address and update the effective date. Material changes are communicated to your organization's administrators.
Contact
Phoenix Emergency Solutions — support@pes-hou.com