Privacy Policy

1. Who we are

CoverageOps is a service of Moore Intelligence LLC, a California limited liability company (“Moore Intelligence”, “we”, “us”). This policy explains what personal information we collect through the CoverageOps website, application and text messaging program (together, the “Service”), how we use it, who we share it with, and the choices and rights you have.

For privacy questions and requests, email privacy@coverageops.co. You can also write to us:

2. Whose information this is

CoverageOps is used by security companies (our “customers”) to schedule their guards, track guard certifications and recover shifts when a guard calls off. That means we handle two kinds of personal information, in two different roles.

• Information we handle for our customers. Information about a customer’s guards, managers and sites, and the messages exchanged with them (“Service Data”), is collected and used on the customer’s behalf and under the customer’s instructions. For this information the customer is the business responsible for it under California law and we are its service provider. If you are a guard, your employer decides what information about you is entered into CoverageOps and how it is used. Our handling of Service Data is governed by our agreement with the customer, including our data processing addendum.
• Information we handle for ourselves. Information about people who visit our website, ask us for a demo or a call, or set up and pay for an account, is collected and used by us for our own business. For this information we are the business responsible for it.

This policy describes both. Where a right or choice works differently for Service Data, we say so.

3. What we collect

From customers and their managers

• Account and contact details: company name and address, the names, email addresses, phone numbers and roles of the people who use the Service (owners, managers, dispatchers, supervisors), and sign-in details. Passwords are stored by our authentication provider in hashed form; we do not see them.
• Billing details: billing contact, plan and payment history. Card numbers are entered into and held by Stripe; we receive only the card brand, last four digits and expiry date.
• What you put into the Service: sites and their requirements, schedules, shifts, coverage rules, do-not-assign choices, approvals and decisions, and any notes.
• Messages: texts between your managers and Cora, including approvals given by text reply, and the record of each case.
• Usage and device information: pages and features used, IP address, browser type and time of access, collected when you use the application.
• Support and correspondence: what you tell us when you contact us.

About guards, from our customers and from guards

• Identity and contact: name, mobile phone number, email address if provided, employee identifier and the sites a guard works.
• Scheduling: shifts, availability, approved time off, overlapping shifts and travel between sites, and whether a guard is marked do-not-assign at a site.
• Certifications: guard card and other certification types, numbers, issue and expiry dates, and photos of the certificates.
• Consent records: whether and when a guard agreed to receive text messages, the message that recorded it, and any opt-out.
• Messages: texts a guard sends to Cora (for example a call-off in the guard’s own words, a reply to a shift offer, a running-late notice) and the texts Cora sends to the guard.
• Attendance facts: clock-in and clock-out times, and, where the customer uses clock-in, the location of the phone at the moment of clock-in and whether it was inside the site’s area. Location is read once, when the guard taps Clock in. It is never read at clock-out or at any other time, never tracked afterwards and never shown on a map. It is recorded as evidence only: a clock-in works without location, and location never blocks a guard from clocking in. A clock-in outside the site’s area, or without a location, is shown to a supervisor as a fact on that shift, never as a score, count or pattern.
• Device information at clock-in: browser type and IP address.
• Work history facts: shifts worked, call-offs, late arrivals and responses to offers, kept as facts on the record. CoverageOps does not score or rate a guard’s reliability or behaviour, and never uses a guard’s call-offs, late arrivals or replies to offers to decide who is offered a shift.

We record facts about time worked. We do not calculate pay.

From website visitors

• Booking a call: when you book a call through Calendly, Calendly collects what you enter on its page and shares the booking with us, such as your name, email, company and the time you chose.
• Traffic: aggregate page-view measurement on public pages through Vercel Web Analytics, which does not use advertising cookies and does not record the query string of a page address.
• Cookies: only those needed to keep you signed in and to keep the Service secure. We do not use advertising or cross-site tracking cookies.

4. How we use it

• To provide the Service: keep the schedule, track certifications and warn before they lapse, and recover a shift when a guard calls off. That includes reading the call-off, checking which guards are eligible (consent to texts, not marked do-not-assign at the site, no overlapping shift, time to travel, no approved time off, available at that time, certifications current), offering the shift in waves, recording the replies, and either asking a manager to approve the fill (supervised mode) or confirming it under the customer’s rules (autonomous mode).
• To keep the record: every step of a case is recorded so the customer can see what happened and why.
• To communicate: send operational texts and emails, sign-in codes, and service and billing notices. We do not send marketing text messages.
• To bill: charge fees and keep financial records.
• To protect the Service and its users: authenticate users, prevent abuse and fraud, investigate incidents and keep audit logs.
• To support customers: answer questions and set up accounts, including importing rosters and schedules at the customer’s request.
• To improve the Service: using aggregated or de-identified information that no longer identifies a person or a customer.
• To meet legal obligations and to establish, exercise or defend legal claims.

We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use Service Data for any purpose of our own beyond those listed here, and we do not combine it with information we hold about anyone else except as needed to provide the Service.

5. AI and automated steps

Cora, the dispatcher in CoverageOps, uses AI processing to read the text of messages and certificate photos, and to draft summaries. These are processed by Anthropic as our service provider and are not used to train its models.

Cora does not make employment decisions. Which guards may work which sites, and the rules Cora follows, are set by the customer. In supervised mode, a manager approves every fill before it is confirmed. In autonomous mode, Cora confirms a fill only with a guard who passes every check, tells the customer at once, and the customer can take over any case. Without the customer, Cora will not tell a guard they can leave a shift early or have to stay, extend anyone’s shift, change anyone’s employment status, contact the customer’s clients, or offer a shift to a guard who fails a check.

6. Text messages

A guard receives operational texts only after the guard’s employer adds them and the guard replies YES to a request to confirm. Managers and escalation contacts receive texts only after opting in. Msg freq varies. Message and data rates may apply. Reply STOP to any message to stop receiving texts, and HELP for help. The full program terms are in our Text Message Terms.

We do not share mobile phone numbers or text-message opt-in information with third parties or affiliates for their marketing or promotional purposes.

7. Who we share it with

• The customer: a guard’s information, messages and case history are visible to the guard’s employer and the managers it authorizes.
• Our service providers, listed below, who process it for us under contracts that limit their use of it.
• Telecommunications carriers, which carry text messages and calls.
• For legal reasons: when required by law or legal process, or when we believe disclosure is needed to protect the rights, property or safety of anyone.
• In a business transfer: if Moore Intelligence is involved in a merger, acquisition, financing or sale of assets, subject to this policy and to our agreements with customers.
• With your direction or consent.

Mobile numbers and text-message opt-in information are never shared under any of these headings for anyone’s marketing or promotional purposes.

We never send any message or information to a customer’s clients.

Service providers

All of these providers process data in the United States. We will update this list before adding a provider that receives Service Data, and give customers notice as our agreement with them requires.

8. How long we keep it

We keep personal information only as long as needed for the purposes above, then delete or de-identify it. Backups are overwritten on a rolling 7-day schedule.

We may keep information longer where the law requires it or to resolve a dispute or legal claim, and only for that purpose.

9. How we protect it

We use administrative, technical and physical safeguards designed to protect personal information, described on our Security page. No system is perfectly secure. If a breach affects personal information, we will notify the affected customer, and individuals and regulators where the law requires, without unreasonable delay.

10. Your California privacy rights

If you are a California resident, you have the right to:

• Know what personal information we have collected about you, the sources, the purposes, and the categories of recipients, and to receive a copy;
• Delete personal information we collected from you, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of;
• Limit the use of sensitive personal information. We use sensitive personal information (such as account sign-in credentials and precise location at clock-in) only to provide the Service and as the law permits, so this right does not require any further action; and
• Not be discriminated against for exercising any of these rights.

How to make a request: email privacy@coverageops.co with the subject “Privacy request”, or write to our mailing address in section 13. We will verify your identity by matching information you give us with information we hold, and may ask for more if needed. You may use an authorized agent, who must show your signed permission; we may still ask you to verify your identity with us directly.

If you are a guard: your employer controls your information in CoverageOps. Send requests about it to your employer. If you send one to us, we will pass it to your employer and help your employer respond.

We respond within the time California law requires. We do not disclose personal information to third parties for their direct marketing purposes.

11. Children

The Service is for businesses and the adults who work for them. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version here with its effective date and, for a material change, notify customers by email at least 30 days before it takes effect.

13. Contact

Email privacy@coverageops.co. This is the fastest way to reach us about privacy, and the address to use for requests under section 10. You can also write to us: