ShakeResponse LLC, a California limited liability company ("ShakeResponse," "we," "us," or "our"), respects your privacy. This Policy explains what information we collect when you use our website and monitoring dashboard (the "Service"), how we use and share it, and the choices and rights available to you — including rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and other applicable U.S. state and federal privacy laws.

1. Information We Collect

• Account information: name, email address, and password (stored as a salted hash, never in plain text).
• Property information: facility name, address/coordinates, building type, and alert thresholds you register.
• Usage & device information: IP address and browser type, recorded in our server logs to operate and secure the Service. We do not use analytics or advertising trackers.
• Activity records: changes you make to your facilities, alert thresholds and notification settings, with timestamps, kept to operate the Service and resolve disputes.
• Push notification subscription data: a browser-issued endpoint/key pair (no content of your device is accessed).
• Billing information: processed directly by Stripe; we do not store full payment card numbers on our servers.
• Consent records: the version of our Terms of Service you accepted, your agreement to automatic renewal terms, and the subscription notices we sent you, with timestamps.
• Contact form messages: the name, email address, topic and message you send through our contact form. Our email delivery provider forwards them to our inbox, and we use them only to reply to you.

2. How We Use Your Information

We use your information to: provide and operate the Service (registering properties, computing and delivering damage-state alerts); maintain account security; process payments and subscriptions; respond to support requests; and, as described below, to occasionally tell you about earthquake-preparedness products and services.

3. Your Email Is Kept Confidential

We treat your email address as confidential. We do not sell, rent, or trade your email address (or any other personal information) to third parties for their own marketing purposes. Your email is used only to operate your account (login, password resets, alert delivery you've opted into) and, unless you opt out, to occasionally contact you as described in Section 4.

4. Marketing Communications & Your Right to Opt Out

From time to time, we may contact subscribers by email about earthquake-related products, services, or resources that can help you prepare for, respond to, and recover from earthquakes more quickly — for example, structural inspection resources, emergency-kit guidance, or new ShakeResponse features. If we ever receive a referral fee, commission, or sponsorship in connection with a third-party resource mentioned in an email, we will clearly disclose that relationship in the email itself; we never share your personal information with third parties for their own direct marketing. These communications are separate from transactional and safety-alert emails needed to operate your account.

You may opt out of marketing communications at any time by:

• Clicking "unsubscribe" at the bottom of any marketing email (required by, and honored consistent with, the CAN-SPAM Act); or
• Emailing us at legal@shakeresponse.com with "unsubscribe" in the subject line, or writing "unsubscribe" in a message through our contact form.

Opting out of marketing emails does not opt you out of transactional emails (e.g., password resets, billing receipts) or the seismic alerts you've configured, which are core to the Service you signed up for.

5. How We Share Information

We share information only with: (a) service providers who help us operate the Service under confidentiality obligations (e.g., hosting, email delivery, and Stripe for payment processing); content delivery networks that serve our fonts and scripts (Google Fonts, cdnjs and unpkg), which receive your IP address when your browser loads a page; OpenStreetMap's Nominatim service, which receives the addresses you look up, sent from our server without your name, email or IP address; (b) the U.S. Geological Survey and FEMA, in the sense that we query their public data feeds — we do not send your personal information to them; (c) authorities, where required by law, subpoena, or to protect the rights, property, or safety of ShakeResponse, our users, or the public; and (d) a successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy's protections continuing to apply.

6. Data Retention & Security

We retain account and property data for as long as your account is active, or as needed to comply with legal obligations, resolve disputes, and enforce agreements. If you delete your account, we may keep activity and consent records after deletion. For example, California law requires us to keep records of automatic-renewal consent for at least three years. We use industry-standard safeguards (encrypted transport, hashed credentials, access controls) to protect your information, but no method of transmission or storage is 100% secure.

7. Your California Privacy Rights (CCPA/CPRA)

Although ShakeResponse LLC may not currently meet the statutory thresholds that trigger mandatory application of the CCPA/CPRA, we voluntarily extend the following privacy rights to California residents (and honor them to the extent required by applicable law):

• Know what personal information we have collected about you and how it has been used and shared;
• Delete personal information we've collected from you, subject to certain exceptions;
• Correct inaccurate personal information;
• Opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information as those terms are defined by the CCPA/CPRA, so there is nothing to opt out of, but you may still submit a request to confirm this;
• Limit the use of sensitive personal information — we do not use sensitive personal information for purposes beyond providing the Service; and
• Non-discrimination for exercising any of these rights.

To exercise any of these rights, email legal@shakeresponse.com from your account email address, or send a request through our contact form using that address. We will verify your request and respond within the time required by law. You may also designate an authorized agent to submit a request on your behalf.

Do Not Track and Global Privacy Control. We do not track you across other websites and do not use third-party advertising or cross-site tracking cookies, so our practices are the same whether or not your browser sends a Do Not Track signal. We treat a Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of your personal information. We do not sell or share it, so no further action is needed.

Shine the Light. California Civil Code Section 1798.83 lets California residents ask which personal information a business shared with third parties for their own direct marketing. We do not share personal information with third parties for their direct marketing.

8. Other U.S. State Privacy Laws

Residents of other U.S. states with comprehensive privacy laws (e.g., Virginia, Colorado, Connecticut, Utah, and similar statutes as they take effect) have similar rights to access, correct, delete, and opt out of certain processing of their personal information. You may exercise these rights using the same contact method above, and we will respond consistent with the law applicable to your state of residence.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date above, and, where required by law, we will provide additional notice.

11. Contact Us

Questions about this Policy or your data? Email legal@shakeresponse.com or use our contact form.

ShakeResponse LLC
1401 21st St, Ste R
Sacramento, CA 95811

See also: our Model Disclaimer regarding the accuracy of damage-state estimates, and our Terms of Service.