Privacy Policy

1. Who We Are

N24R is an operational security staffing platform that connects private protection operations (PPOs), security companies, and enterprise clients with vetted security agents. We provide tools for agent onboarding, credential management, shift dispatch, timeclock operations, and client-facing reporting. References to "N24R," "we," "us," or "our" in this policy refer to the operator of the N24R platform.

This Privacy Policy applies to all users of the N24R platform including security agents, PPO and security company administrators, and enterprise client representatives.

2. Information We Collect

We collect information necessary to operate a regulated security staffing platform. This includes:

Agent information

• ▸Identity: full name, photo, date of birth, contact details (email, phone)
• ▸Professional credentials: BSIS Guard Card, exposed firearms permit, CCW permit, First Aid/CPR certifications, and any other state-required licenses
• ▸Credential document images and expiry dates
• ▸Employment history, references, and vetted status
• ▸Availability preferences, home base location, and shift history
• ▸Timeclock records: clock-in/out timestamps and GPS confirmation where enabled

PPO / company administrator information

• ▸Business name, license numbers, and contact details
• ▸Account credentials and role-based access records
• ▸Billing and invoicing information
• ▸Assignment and dispatch history

Enterprise client information

• ▸Company name, site addresses, and authorized representative contacts
• ▸Shift request history and agent approval records
• ▸Billing and contractual correspondence

Usage and technical data

• ▸Browser and device identifiers, IP address, and session data
• ▸Pages visited, features used, and platform activity logs
• ▸Notification delivery records (email, WhatsApp)

3. How We Use Your Information

We use collected information to:

• ▸Verify agent identity, credentials, and compliance status before dispatch
• ▸Match and assign agents to shifts based on credentials, availability, and location
• ▸Send shift briefs, assignment notifications, and reminders via email and WhatsApp
• ▸Maintain a full timestamped audit trail of shift lifecycle events
• ▸Enable client-facing portals with assignment status and agent visibility
• ▸Process billing, invoicing, and payment between companies and agents
• ▸Monitor credential expiry and send renewal alerts
• ▸Investigate incidents, disputes, or compliance failures
• ▸Improve platform performance and reliability

4. Data Sharing

We do not sell personal information. We share data only as required to operate the platform:

• ▸Between PPOs and their assigned agents — shift details, contact information, and deployment instructions
• ▸With enterprise clients — agent name, photo, credential summary, and shift confirmation status as part of the assignment packet
• ▸With email delivery providers (Resend) and messaging providers (WhatsApp Business API) to deliver operational notifications
• ▸With cloud infrastructure providers (Supabase, Vercel) who process data on our behalf under data processing agreements
• ▸With law enforcement or regulators where required by applicable law or in response to a valid legal request
• ▸In connection with a merger, acquisition, or sale of assets, subject to the same privacy protections

Client-facing agent information is limited to what is operationally necessary. Full credential documents are not shared with enterprise clients unless explicitly required for compliance.

5. Data Retention

We retain agent profiles and credential records for as long as an account is active and for a minimum of three (3) years following account closure, to satisfy audit, regulatory, and dispute resolution obligations. Shift records, timeclock logs, and assignment history are retained for a minimum of five (5) years. Billing records are retained as required by applicable tax law.

You may request deletion of your account. Where legal or contractual obligations require retention, we will restrict processing while retaining the minimum necessary data.

6. Security

N24R is built on enterprise-grade infrastructure. We apply role-based access control (RBAC) and row-level security (RLS) policies so that each user can only access data within their authorized scope. Credential documents are stored in access-controlled cloud storage. All data is encrypted in transit using TLS and at rest using AES-256.

Administrative access to production data is restricted, logged, and subject to review. We do not store plaintext passwords. Authentication is handled via Supabase Auth with secure session management.

No system is completely secure. If you discover a potential vulnerability, please contact us directly before public disclosure.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• ▸Access a copy of the personal data we hold about you
• ▸Correct inaccurate information on your profile
• ▸Request deletion of your account and associated data (subject to legal retention requirements)
• ▸Object to certain processing activities
• ▸Receive a portable export of your data
• ▸Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

8. Cookies and Tracking

We use session cookies required for authentication and platform functionality. We do not use third-party advertising trackers or behavioural profiling cookies. Analytics, where enabled, are privacy-first and do not fingerprint individual users across sessions.

9. Children

N24R is a B2B platform for professional use. We do not knowingly collect information from individuals under 18. All agents must be of legal working age in their jurisdiction and hold the required professional licenses to register.

10. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated via email to registered account holders at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance.

11. Contact

For privacy inquiries, data requests, or to report a concern, contact us at: