Privacy Policy for 360 Command Center

1. Who we are

This Privacy Policy describes how 360 Technologies Inc. (“360 Technologies,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the mobile application 360 Command Center (the “App”), available on Google Play under the application ID com.technologies360.commandcenter.

The App is the mobile client for the Expand360 / Comply360 product family and is intended for authorized workspace users and testers with a valid Comply360 account.

2. Scope

This Policy applies to personal information processed through the App and related backend services used to operate authentication, workspace access, notifications, diagnostics, and product analytics for 360 Command Center. It does not replace customer agreements that may apply between 360 Technologies Inc. and an organization that provides you access to a Comply360 / Expand360 workspace.

3. Information we collect

Depending on how you use the App, we may process:

• Account and authentication data — email address used for one-time password (OTP) sign-in; session tokens needed to keep you signed in; workspace / tenant identifiers associated with your account.
• Profile and workspace data — name and profile fields returned by our identity services; product and workspace membership; roles or permissions needed to show the correct features.
• App activity and content you access — actions you take in the App (for example inbox, tasks, alerts, credentials, evidence, or vault features available to your workspace) and related identifiers required to open deep links into those items.
• Device and push notification data — device platform information and Firebase Cloud Messaging (FCM) tokens so we can deliver push notifications you are eligible to receive.
• Diagnostics — crash and performance logs via Firebase Crashlytics to help us find and fix reliability issues. These reports may include device model, OS version, app version, and stack traces.
• Product analytics (when enabled) — limited event data such as app opened, screen viewed, and push notification opened, using PostHog (EU cloud). Events are tied to an internal user / workspace identifier when you are signed in, subject to your organization’s analytics preferences / opt-out where available.

We do not ask the App to access your contacts, precise GPS location, photos, microphone, or SMS for core sign-in. If a future feature needs additional permissions, we will request them in-app and update this Policy when required.

4. How we use information

We use the information above to:

• Authenticate you and maintain secure sessions;
• Provide multi-tenant workspace access and product features;
• Send operational and compliance-related push notifications;
• Maintain security, prevent abuse, and troubleshoot issues;
• Improve App stability and understand product usage (analytics);
• Comply with law and enforce our terms and policies.

5. Legal bases (where applicable)

Where GDPR or similar laws apply, we rely on one or more of: performance of a contract (providing the App to authorized users), legitimate interests (security, reliability, product improvement), consent (where required for optional analytics or notifications), and legal obligation.

6. Sharing of information

We share information with service providers that help us operate the App, under contractual safeguards, including:

• Google Firebase (authentication-related infrastructure where configured, Cloud Messaging, Crashlytics);
• PostHog (product analytics when enabled; EU hosting);
• Cloud / hosting and identity providers used to run Comply360 / Expand360 backend APIs.

We may also disclose information if required by law, to protect rights and safety, or in connection with a corporate transaction. We do not sell your personal information.

7. Data retention

We retain personal information for as long as needed to provide the App, meet organizational / contractual requirements, resolve disputes, and comply with legal obligations. Session tokens are kept on your device until you sign out or the session expires. Crash and analytics data are retained according to the retention settings of those services and our operational needs.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transport (HTTPS), token-based authentication, and access controls for workspace data. No method of transmission or storage is completely secure.

9. International transfers

360 Technologies Inc. is based in the United States. Information may be processed in the United States, the European Union (for example PostHog EU), and other locations where our providers operate. Where required, we use appropriate transfer safeguards.

10. Your rights and choices

Depending on your location, you may have rights to:

• Access, correct, or delete personal information;
• Object to or restrict certain processing;
• Withdraw consent where processing is consent-based;
• Opt out of non-essential analytics where your organization enables that control;
• Disable push notifications in your device settings.

To exercise rights related to the App, contact support@comply360.tech. If your access is provided by an employer or customer organization, we may redirect your request to that organization as the data controller for workspace content.

11. Children’s privacy

The App is built for business / compliance operations and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

12. Third-party links and services

The App may open links or rely on third-party SDKs (including Google Play services and analytics providers). Their privacy practices are governed by their own policies.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be communicated through the App, the Play Store listing, or our website when appropriate.

14. Contact

For privacy questions about 360 Command Center, contact:

360 Technologies Inc.
131 Continental Dr Ste 305
Newark, DE 19713-4324
United States
Email: support@comply360.tech