Privacy Policy

This Privacy Policy describes how Driftwise LLC ("Driftwise," "we," "us," or "our") collects, uses, and discloses information when you visit driftwise.co, use the Driftwise Portal web application, use the Driftwise Mobile application, or interact with a Driftwise map or status widget embedded on a participating organization's website (collectively, the "Services"). If you do not agree with this Policy, do not use the Services.

1. Who Uses the Services

The Services are used by three groups of people. Parts of this Policy apply differently depending on which group you are in:

• Portal users are staff of organizations that have entered into a contract with Driftwise to manage corridor, asset, and condition data. Portal users access the Driftwise Portal using accounts provisioned through their organization.
• Public mobile users are members of the public who create an account in the Driftwise Mobile application to view participating organizations' maps and to submit reports about field conditions.
• Public widget viewers interact with a Driftwise map or status widget embedded on a participating organization's website. Widget viewers do not create an account and do not sign in.

Where a section of this Policy applies only to one group, we say so. Otherwise, the section applies to all three.

2. Information We Collect

a. Information you provide

• Account information (portal users and public mobile users): name, email address, and authentication credentials. Portal accounts also include organization name and role. Public mobile accounts may include a phone number used for report follow-up.
• Demo and contact requests: information you submit through forms on driftwise.co (name, email, phone, organization, message).
• Public reports (public mobile users): the contents of the report, including a description, status, photos, and a location associated with the report, together with the contact information from your account. We share this information with the managing organization identified in the report so they can follow up; see Section 4.
• Portal and field content (portal users and field operators acting on behalf of an organization): status updates, asset and corridor data, photos, notes, and other content submitted through the Portal or the Driftwise Mobile application.
• Support communications: messages you send to us by email or through support channels.

b. Information collected automatically

We collect a limited amount of usage and diagnostic data from all three groups, but we treat it differently:

• Account holders (portal users and public mobile users): pages and features used, request timestamps, referring URL, browser or device type, operating system, app version, language, and crash logs. This data is associated with your account and is used to operate, secure, and improve the Services.
• Public widget viewers: aggregate usage signals such as which map tiles or layers were loaded, widget interactions, and approximate geographic region (derived from IP address). We do not associate this data with an identifiable individual, and we do not attempt to re-identify widget viewers from it.
• Cookies and similar technologies: session cookies for authentication on driftwise.co and the Portal, and limited storage used by widgets. Widgets are loaded inside a participating organization's website, which is a third-party context for the viewer's browser; our use of cookies and storage in that context is minimal and is not used for advertising. We do not use third-party advertising cookies anywhere in the Services.

c. Location information

The Driftwise Mobile application collects precise location (GPS) data while you are actively using the app to record asset status, condition checks, or to attach a location to a report. Location collection is foreground-only and requires your operating-system-level permission. You may revoke this permission at any time through your device settings; doing so will limit location-dependent features, including attaching a location to a report. Photos you submit through reports or field operations may also contain embedded location metadata (EXIF) created by your device.

d. Information from third parties

• Map tile providers (e.g., Mapbox) receive standard request data, including IP address and approximate location, when map content is loaded. This happens for portal users, public mobile users, and public widget viewers each time a map is rendered.
• Email service providers, identity providers, and infrastructure vendors may process limited account or message metadata on our behalf.

3. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Services and your account;
• Authenticate users and protect against fraud, abuse, and unauthorized access;
• Display, route, and persist the content you (or your organization) publish through the Services;
• Route reports submitted by public mobile users to the managing organization identified in the report;
• Communicate with you about your account, requested demos, support, security, and material changes to the Services;
• Analyze and improve the Services, including troubleshooting and feature development;
• Comply with our legal obligations and enforce our agreements.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. How We Share Information

We share information only as follows:

• Within an organization (portal users and field content). Content submitted on behalf of an organization, including authorship and timestamp metadata, is visible to other authorized users in that organization.
• With managing organizations (public reports). When a public mobile user submits a report, the report content (description, status, photos, and location) and the submitter's account contact information are shared with the organization that manages the relevant corridor or asset, so that the organization can follow up. The managing organization may incorporate the report content into its operational records and, at its discretion, into the public-facing information it publishes through the Services (for example, a status update shown on a public map). The submitter's contact information is never included in any public publication and is not shared with anyone other than the managing organization. Managing organizations are required, under the Driftwise Terms of Use (and any agreement they have signed with Driftwise), to use this contact information only to evaluate and respond to the report, and not for marketing or other unrelated purposes.
• Public-facing maps and widgets. Some content is intentionally published by a managing organization to public-facing surfaces, including maps and status widgets that may be embedded on the organization's own website. Information you submit may appear on those public surfaces if your organization (or, for public reports, the managing organization) has marked it for public publication. Public mobile users' account contact information is never included on these public surfaces.
• Service providers. We rely on infrastructure and tooling vendors (cloud hosting, email delivery, error monitoring, mapping, analytics, customer support) that process information under contract and on our instructions.
• Legal requirements. We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of Driftwise, our users, or the public.
• Business transfers. If Driftwise is involved in a merger, acquisition, financing, or sale of assets, information may be transferred subject to standard confidentiality protections.

5. Data Retention

We retain account information and content for as long as your account is active or as needed to provide the Services. Public mobile users may delete their account from within the Driftwise Mobile application or by contacting legal [at] driftwise [dot] co. Portal account lifecycles are managed by the user's organization in accordance with its agreement with Driftwise.

Reports submitted by public mobile users — including the report content and the submitter's contact information shared with the managing organization — are retained for as long as needed to support follow-up and the managing organization's operational records. Aggregate, non-identifying usage signals collected from public widget viewers are not associated with an individual and may be retained without time limit for analytics purposes.

We retain limited records after account closure as required for legal, accounting, security, or legitimate business purposes (for example, audit logs and routine backups).

6. Your Rights and Choices

Depending on where you live, you may have rights to:

• Access, correct, or delete personal information we hold about you;
• Object to or restrict certain processing;
• Receive a portable copy of your information;
• Withdraw consent where processing is based on consent.

How to exercise these rights depends on which group of users you are in:

• Portal users: account-related requests are typically coordinated through your organization's administrator, since portal accounts are provisioned by your organization. You may also email legal [at] driftwise [dot] co directly.
• Public mobile users: you may manage or delete your account from within the Driftwise Mobile application. To request deletion or export of report contents already shared with a managing organization, email legal [at] driftwise [dot] co; some such requests may need to be coordinated with the managing organization.
• Public widget viewers: we collect only aggregate, non-identifying signals from widget viewers and do not maintain records that we can tie back to an individual viewer. If you believe we hold identifiable information about you, contact legal [at] driftwise [dot] co.

You may also:

• Disable location permissions for the Driftwise Mobile app via your device settings;
• Manage cookies via your browser settings;
• Unsubscribe from marketing emails using the link in any such email.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and routine logging. No system is perfectly secure, and we cannot guarantee absolute security.

8. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact legal [at] driftwise [dot] co and we will take appropriate steps.

9. International Users

The Services are operated from the United States. If you access them from outside the United States, you understand that your information will be processed in the United States, which may have different data-protection laws than your jurisdiction.

10. Changes

We may update this Policy from time to time. If changes are material, we will provide notice through the Services or by email. Your continued use of the Services after the effective date of an update constitutes acceptance of the updated Policy.

11. Contact Us

Questions about this Policy can be sent to: