We treat the data you trust us with the same way you treat the calls you respond to — seriously. This policy explains exactly what we collect, why, and what controls you have.
Scope
This Privacy Policy describes how Hatzalah.Live (“we”, “us”, or “our”) collects, uses, and discloses information when you use our dispatching platform, mobile responder app, marketing website, and related services (collectively, the “Services”).
When we process Protected Health Information (PHI) on behalf of a covered entity, we do so as a business associate under a separate Business Associate Agreement, which governs that processing.
Information we collect
Information you provide
- Account information — name, email, phone, role, agency affiliation, and credentials you submit during onboarding.
- Operational data — calls, statuses, dispositions, unit positions, KML zones, places, and configurations.
- Communications — messages you send to us, including support tickets and demo requests.
Information collected automatically
- Usage data — pages viewed, actions taken, and performance telemetry.
- Device data — browser type, operating system, IP address, and (for the responder app) coarse location while a session is active.
How we use information
- To operate, maintain, and improve the Services.
- To provide dispatch coordination, routing, notifications, and reporting features for your agency.
- To communicate with you about updates, security, and support.
- To detect, investigate, and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
Data retention
We retain data for as long as your agency maintains an active subscription, plus the period required by applicable law and your Business Associate Agreement (where applicable). On termination, we return or delete data in accordance with the terms of your contract.
Security
We implement administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. For details, see our Security overview.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information. To exercise these rights, contact us at [email protected]. If you are a patient or a member of the public, please direct your request to the agency that served you — they are the data controller.
International transfers
Our infrastructure is located in the United States. If you access the Services from outside the U.S., you understand that your information will be processed in the U.S., subject to appropriate safeguards.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated to administrators via email and posted here with a revised “Last updated” date.
Contact
Questions? Reach our privacy team at [email protected].