Privacy Policy
How BrassOps collects, uses, and protects your information.
Effective Date: September 18, 2026
Previous version: April 1, 2026
1. Introduction
BrassOps ("we," "our," or "us") operates the brassops.com website and the BrassOps range intelligence platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
Information You Provide
- Account Information: Name, email address, department/agency name, role, and contact information when you create an account or submit a contact form.
- Event and Trade Show Information: Name, email address, agency, role, and any notes you provide when you request a demonstration at a conference, trade show, or other event, whether you complete the form yourself or a member of our staff records it at our booth.
- Assessment Responses: Your answers to the readiness assessment on our website, along with the resulting score, so we can send you your results.
- Training Data: Officer qualification scores, remedial training records, coaching notes, dry-fire session logs, and other training-related data entered into the platform by authorized users.
- Armory Data: Weapon inventory records including serial numbers, inspection logs, repair history, and officer assignments.
- Media Uploads: Target photographs uploaded for AI-assisted target analysis.
- Communications: Messages, feedback, and correspondence you send to us.
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Log Data: IP address, access times, and referring URLs.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process and track firearms qualifications, remedial training, and officer readiness
- Deliver AI-assisted target analysis and performance analytics
- Send automated alerts and notifications related to qualification expirations, remedial milestones, and officer status changes
- Generate anonymized, aggregate data for the N.A.R.M.S. benchmarking system (no individually identifiable data is shared)
- Respond to your inquiries and provide customer support
- Improve and develop new features for the Service
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information or training data to third parties. We may share information only in the following circumstances:
- Within Your Agency: Training data is accessible to authorized users within your department based on their assigned role and permissions.
- Service Providers: We use a small number of third-party providers to operate the Service. These providers are contractually obligated to protect your data and use it only to perform services on our behalf. They are:
- Vercel: website and application hosting.
- Supabase: database storage for website form submissions, including contact requests, assessment responses, and event inquiries.
- SMTP2GO: delivery of notification and transactional email.
- Google Analytics: website traffic measurement. See Section 8.
- Legal Requirements: We may disclose information if required by law, subpoena, court order, or government request.
- Aggregated Data: We may share anonymized, aggregated data that cannot be used to identify any individual officer or agency (e.g., national benchmarking statistics through N.A.R.M.S.).
Your agency's data is fully isolated. No other agency or department can access your records. Period.
5. Data Security
We take the security of your data seriously and implement the following measures:
- Encryption: All data is encrypted in transit using TLS and at rest using AES-256 encryption.
- Access Controls: Role-based access controls ensure users only see information appropriate to their role (officer, instructor, range master, command staff, admin).
- Audit Logging: Every action within the platform is logged with timestamps for accountability and compliance.
- Redundancy: Data is stored across multiple servers with automated backups to prevent loss.
- U.S.-Based Hosting: All data is stored on secure, U.S.-based cloud infrastructure. Your data never leaves the country.
6. Data Retention
We retain your data for as long as your agency maintains an active subscription. Training records and qualification history are preserved for the duration of your account to maintain audit-ready compliance records.
Upon cancellation, we provide a full data export so you retain all your records. After a reasonable transition period (90 days), your data is permanently deleted from our systems unless retention is required by law.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your data:
- Access: Request a copy of the data we hold about you or your agency.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal retention requirements.
- Export: Request your data in a portable, machine-readable format.
- Objection: Object to certain processing activities.
To exercise any of these rights, contact us at the email address below.
8. Cookies and Tracking
The BrassOps website uses Google Analytics to measure website traffic. Google Analytics sets cookies in your browser and collects your IP address, device and browser details, and the pages you visit, so we can understand which parts of the site are useful. This information is processed by Google on our behalf.
You can opt out of Google Analytics across every site that uses it by installing Google's browser opt-out add-on, or by blocking cookies in your browser settings. Blocking analytics cookies does not affect your ability to use the site or the platform.
Aside from analytics, the website and platform set only the cookies needed to keep you signed in and to keep the Service working. We do not use advertising trackers, we do not build advertising profiles, and we do not sell browsing data.
9. Children's Privacy
The Service is designed for use by law enforcement professionals and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active users of material changes via email or in-app notification. The updated policy will be posted on this page with a revised effective date.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
BrassOps
Email: info@brassops.com
Web: brassops.com/contact