Privacy Policy - 33 ALERTS

PRIVACY POLICY

33 ALERTS Services & Appointment Scheduler
Effective Date: January 1, 2026
Last Updated: October 2, 2026

1. INTRODUCTION

33 Systems Inc., d/b/a 33 ALERTS (33 ALERTS), is a Florida corporation committed to protecting the privacy of our customers, end users, prospects, appointment requesters, and authorized administrators. This Privacy Policy explains how we collect, use, disclose, store, and safeguard information when you use the 33 ALERTS alert notification system, the 33 ALERTS Appointment Scheduler, our website, and related services (collectively, the “Service”).

Who This Policy Applies To:

Please read this Privacy Policy carefully. By using our Service, you acknowledge that you have read and understand this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 Information Collected from Customers (Venue Operators)

When you subscribe to the 33 ALERTS Service, we collect:

Account Information:

Configuration Information:

Usage Information:

2.2 Information Collected from End Users (Via QR Code Scans)

When an End User scans a 33 ALERTS QR code to request assistance, we automatically collect:

  1. QR Code ID - Unique identifier of the scanned QR code
  2. Location Description - Text description of the QR code location (e.g., Terminal B, Gate 12)
  3. GPS Coordinates - Latitude and longitude of the device location
  4. Timestamp - Date and time of the scan
  5. Mobile Phone Number - Phone number of the End User’s device
  6. Reason for Help - Category selected by End User (emergency, non-emergency, medical, security, maintenance, etc.)
  7. Name - If provided by the End User (optional field)

This information is collected automatically upon a QR code scan and does not require app downloads or account creation.

2.3 Information Collected Automatically

Website Usage Data:

When you visit our website (33alerts.com), we automatically collect:

Cookies and Tracking Technologies:

We use cookies and similar tracking technologies to:

You can control cookies through your browser settings. However, disabling cookies may affect Service functionality.

2.4 Information Collected Through the Appointment Scheduler and Google Calendar Integration

Appointment Request Information:

When an individual schedules an appointment through the 33 ALERTS Appointment Scheduler, we collect information needed to schedule and manage the appointment, including:

The Scheduler asks users to enter their email address a second time to confirm that it was typed correctly. The confirmation email entry is used only for comparison and validation and is not stored as a separate database field.

Google Calendar Authorization and OAuth Information:

An authorized 33 ALERTS administrator may choose to connect a Google Calendar to the Appointment Scheduler. When this connection is authorized, Google provides OAuth access and refresh tokens that allow the Scheduler to perform the calendar functions described in this Privacy Policy. The Scheduler stores the Google OAuth access token and refresh token in encrypted form while the connection remains active.

Google Calendar Information Accessed:

The Scheduler accesses only the Google Calendar information needed to provide scheduling functions. Depending on the function being performed, this may include:

Existing Google Calendar events displayed in the private 33 ALERTS Admin calendar are retrieved from Google when the Admin calendar is viewed. They are not imported into the 33 ALERTS customer appointments table. The public Appointment Scheduler does not display the title, description, attendee information, or other private details of existing Google Calendar events. Public users see only whether a time is available or unavailable.

3. HOW WE USE INFORMATION

3.1 Use of Customer Information

We use Customer information to:

3.2 Use of End User Information

We use End User information to:

IMPORTANT: We route End User information directly to the Customer who operates the venue. The Customer, not 33 ALERTS, is responsible for responding to alerts and managing End User information in accordance with applicable privacy laws.

3.3 Use of Website Information

We use website usage data and cookies to:

3.4 Use of Appointment Scheduler and Google Calendar Information

We use Appointment Scheduler and Google Calendar information to:

When a 33 ALERTS appointment is written to Google Calendar, the event may include the appointment requester’s name, organization name, email address, phone number, appointment reason, appointment type, appointment reference number, date and time, meeting method, and meeting link. This information is sent to the connected Google Calendar solely to provide the scheduling and calendar-invitation functions requested by the authorized administrator.

4. HOW WE SHARE INFORMATION

4.1 Information Sharing with Customers

Alert Data: When an End User scans a QR code at a Customer’s venue, we immediately transmit the alert information to that Customer’s designated personnel (Command Center and/or Response Team). This is the core function of our Service.

Reports and Analytics: Customers have access to all alert data generated at their venues through our reporting tools.

4.2 Third-Party Service Providers

We may share information with third-party service providers who perform services on our behalf, including:

These service providers are contractually obligated to protect information and use it only for the purposes we specify.

Current list of subprocessors: https://33alerts.com/subprocessors

We provide 30 days advance notice before adding new subprocessors.

4.3 Legal Compliance and Protection

We may disclose information when required by law or when we believe disclosure is necessary to:

4.4 Business Transfers

If 33 ALERTS is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.5 Google Workspace API Data and Limited Use

Google Calendar information obtained through Google Workspace APIs is used only to provide the user-facing Appointment Scheduler and calendar functions described in this Privacy Policy. We do not sell Google user data, use it for advertising, provide it to data brokers or information resellers, use it to determine credit worthiness or for lending purposes, or use it to create, train, or improve generalized artificial intelligence or machine-learning models.

We do not permit human access to Google user data except when necessary to provide support with the user’s consent, investigate security or abuse, comply with law, or perform internal operations using appropriately aggregated or de-identified information where permitted.

Transfers of Google user data are limited to those necessary to provide the Appointment Scheduler’s user-facing features, protect the Service or users, comply with applicable law, or otherwise as permitted by the Google User Data Policy.

The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

4.6 What We Do NOT Do

We will NOT:

5. DATA RETENTION

5.1 Customer Account Information

We retain Customer account information for as long as your subscription is active and for a reasonable period afterward to:

5.2 Alert Data

Alert data (End User information from QR code scans) is retained indefinitely to enable Customers to:

Customers may request deletion of specific alert data in accordance with their obligations under applicable privacy laws and our data deletion procedures.

5.3 Data After Termination

Upon termination of your subscription:

5.4 Appointment Scheduler and Google Calendar Data

Appointment records are retained as reasonably necessary to provide scheduling services, maintain business records, resolve disputes, provide support, and comply with legal obligations. Appointment requesters may contact us using the information in Section 13 to request access, correction, or deletion, subject to applicable legal and record-retention requirements.

Existing Google Calendar events that are displayed in the private Admin calendar are retrieved from Google when needed and are not imported into the 33 ALERTS customer appointments table. The Scheduler may retain the Google Calendar event identifier associated with a 33 ALERTS appointment so the corresponding Google event can be updated or cancelled.

Google OAuth access and refresh tokens are retained only while the Google Calendar connection is active and are stored in encrypted form. When an administrator uses the 33 ALERTS Admin function to disconnect Google Calendar, the stored Google OAuth access and refresh tokens are removed from the active Scheduler configuration. An administrator may also revoke the application’s access through the security settings of the connected Google Account.

Disconnecting Google Calendar does not automatically delete historical 33 ALERTS appointment records or Google event identifiers that are part of those appointment records. Requests to delete eligible stored personal information may be submitted to privacy@33alerts.com.

6. DATA SECURITY

6.1 Security Measures

We implement reasonable technical and organizational security measures to protect information against unauthorized access, alteration, disclosure, or destruction, including:

Technical Safeguards:

Organizational Safeguards:

Physical Safeguards:

6.2 Customer Responsibilities

Customers are responsible for:

6.3 Limitations

No system is completely secure. While we take reasonable precautions, we cannot guarantee absolute security of information. You use the Service at your own risk.

6.4 Google Calendar Integration Security

Google Calendar connections use Google OAuth 2.0 authorization. Google OAuth access and refresh tokens stored by the Scheduler are encrypted using application-level encryption, and communications with Google APIs use HTTPS/TLS. Access to Google Calendar integration settings and the private Admin calendar is restricted to authorized administrators.

The Scheduler requests Google Calendar permissions only for the calendar functions described in this Privacy Policy. We do not ask users to provide their Google password to 33 ALERTS.

7. YOUR PRIVACY RIGHTS

7.1 Rights for All Users

You have the right to:

7.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know:

Right to Delete:

Right to Opt-Out:

Right to Non-Discrimination:

How to Exercise Your Rights:

To exercise your CCPA rights, contact us at:

We will verify your identity before processing your request and respond within 45 days.

7.3 Rights for Customers

As a Customer, you can:

7.4 Rights for End Users

End Users who have scanned QR codes should contact the venue operator (Customer) for requests related to their alert data because the Customer controls that information.

For questions about how we process End User information, contact us at privacy@33alerts.com.

7.5 Google Calendar Connection and Data Controls

An authorized administrator can disconnect Google Calendar from the 33 ALERTS Appointment Scheduler through the Admin interface. Google access may also be revoked directly through the connected Google Account’s security settings.

To request information about Google Calendar data handled by 33 ALERTS, or to request deletion of eligible stored information associated with the Scheduler, contact privacy@33alerts.com.

8. CHILDREN’S PRIVACY

The 33 ALERTS Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13.

However, we recognize that children may be present at venues where 33 ALERTS is deployed and may scan QR codes in emergency situations. If a child scans a QR code, the alert is routed to the Customer, and the Customer is responsible for managing that information appropriately.

If you believe we have inadvertently collected information from a child under 13 through our website or account registration, please contact us immediately at privacy@33alerts.com, and we will delete such information.

9. INTERNATIONAL USERS

The 33 ALERTS Service is currently available only in the United States. Our servers are located in the United States, and information is processed and stored in the United States.

If we expand to other countries in the future, we will update this Privacy Policy and comply with applicable international data protection laws.

10. DATA BREACH NOTIFICATION

In the event of a data breach affecting personal information, we will:

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology,
legal requirements, or other factors. We encourage you to review this Privacy Policy periodically.

Notice of Changes:

12. RELATIONSHIP TO TERMS OF SERVICE

This Privacy Policy is incorporated into and subject to our Terms of Service and End User License Agreement.

13. CONTACT INFORMATION

For Privacy Questions or Requests:

33 Systems Inc., d/b/a 33 ALERTS

PO Box 272331
Tampa, Florida 33682

Email: info@33alerts.com
Privacy/Legal: privacy@33alerts.com
Phone: 813-822-0045
Website: www.33alerts.com

For California Privacy Rights Requests:
Email: privacy@33alerts.com
Subject Line: “CCPA Privacy Request”

SAFE — SECURE — FAST — EASY TO USE
© 2019 – by 33 Systems Inc., d/b/a 33 ALERTS, Tampa, FL. All rights reserved.