Privacy Policy & Terms of Use for API MS

This Privacy Policy and Terms of Use outlines how API Security ("we," "our," or "us") collects, uses, protects, and discloses information when you use the API MS mobile application, our web platforms, and related workforce management, scheduling, and timekeeping services (collectively, the "Platform").

By accessing or using API MS, you consent to the data practices and terms of use described in this policy. If you do not agree, please discontinue your use of the Platform immediately.

1. Prominent Disclosure: Location Data & GPS Tracking

Because API MS is designed for workforce scheduling, timekeeping accountability, and operational site monitoring, precise location tracking is a core feature of the Platform.

• Why we collect it: We collect GPS location data to verify on-site attendance within designated site geofences during shift check-in and check-out, confirm officer presence at assigned posts, and append location context to shift activities and operational reports.
• When we collect it: Location data is recorded when you clock in or out of shifts, verify geofence boundaries, submit operational logs or incident reports, or actively engage with the application's shift tracking features.
• Consent & Control: Device-level permissions govern our access to your GPS. If you disable location services, core functionalities of the Platform (such as geofenced shift check-in and check-out) will be unavailable.

2. Information We Collect

We collect information directly from you, automatically through your device, and from your employer or organizing entity.

A. Account & Profile Information

• Full name, Employee/Officer ID, and user credentials.
• Contact information (email address and phone number).
• Organizational affiliation, assigned districts, sites, and shift schedules.
• Biometric authentication tokens (processed locally via your device's native Face ID / Touch ID / Biometric hardware; we never store raw biometric data on our servers).

B. Workforce Operational & Timekeeping Data

• Time-stamped shift check-in, check-out, break, and attendance records.
• Geofence verification coordinates and distance-from-site telemetry.
• Submitted shift notes, leave/time-off requests, post orders acknowledgments, and incident logs.
• Photos or attachments uploaded in connection with workforce reporting.

C. Device & Usage Information

• Device identifiers, operating system version, and hardware model.
• IP addresses and network connection details.
• Application usage analytics, crash reports, and interaction logs.

3. How We Use Your Information

We process your data to deliver reliable workforce management, scheduling, and timekeeping services to the organization that provisioned your account. Specifically, we use this data to:

• Verify shift attendance, calculate hours worked, and support payroll and client billing accuracy.
• Facilitate real-time operational visibility and generate attendance and roster reports for authorized supervisors and administrators.
• Authenticate your identity and maintain secure access to the Platform.
• Diagnose technical issues, enhance application stability, and improve feature functionality.
• Maintain comprehensive audit trails for compliance and legal accountability.

4. Data Sharing and Disclosure

API Security acts as a data processor for the organization utilizing our Platform. We do not sell your personal information to third parties. We only share your data under the following circumstances:

• With Your Organization: The primary recipient of your operational, attendance, and location data is the employer or organizing entity that granted you access to API MS. Authorized administrators, dispatchers, and supervisors of your organization have access to your timekeeping records, shift schedules, and activity logs.
• For Legal & Compliance Reasons: We may disclose information if required to do so by law, subpoena, or similar legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, user data may be transferred to the acquiring entity.

5. Data Retention

We retain personal, timekeeping, and operational data for as long as your account remains active or as needed to provide services to your organization. Retention periods are largely determined by the data controller (your employer) to fulfill their payroll, labor law, business, and auditing obligations. Once data is no longer required for these purposes, it is securely deleted or anonymized.

6. Data Security

We implement robust, industry-standard security measures to safeguard your data, including:

• Encrypted data transmissions (HTTPS/TLS).
• Secure, enterprise-grade cloud hosting infrastructure.
• Strict role-based access controls to limit data visibility.
• Continuous system monitoring and activity logging.

*Note: While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet or electronic storage is 100% secure.*

7. User Rights and Data Deletion

Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, or delete it.

• Managing Your Data: Because your account is provisioned and managed by your employer (the data controller), requests to delete your account, modify historical timekeeping logs, or permanently erase operational data must be directed to your organization's system administrator.
• App Uninstallation: You may stop all on-device data collection at any time by logging out and uninstalling the API MS application.

8. Terms of Use & Authorized Access

• Authorized Personnel Only: Access to API MS is restricted to active, authorized employees and personnel provisioned by the subscribing organization. Unauthorized access or sharing of login credentials is strictly prohibited.
• Accurate Timekeeping & Location Integrity: Users agree to record shift check-ins and check-outs truthfully and not to falsify, spoof, or manipulate GPS location data or device timestamps.

9. Children’s Privacy

API MS is designed exclusively for enterprise and workforce use. The Platform is not intended for, nor do we knowingly collect data from, individuals under the age of 13.

10. Changes to This Policy

We reserve the right to modify this Privacy Policy & Terms of Use at any time. Any changes will be effective immediately upon posting the updated policy on this page, and we will update the "Effective Date" at the top of this document. We encourage you to review this page periodically. Your continued use of the Platform after any changes are published constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns regarding this Privacy Policy, Terms of Use, or our data practices, please contact us at:

API Security
Email: security@apisecurityinc.net
Phone: (808) 593-1125
Website: https://www.apisecurityinc.net