Privacy Policy

Musterport ("Musterport", "we", "us") helps emergency management and volunteer organizations track personnel, capabilities, and certifications. Musterport is built on a simple principle: a volunteer owns their own record and chooses which organizations to share it with. This policy explains what we collect, how we use and share it, and the choices you have. Musterport is currently a free beta operated in the United States.

Information we collect

We collect the information you and your organization provide, plus a limited amount of technical data needed to run the service:

• Account & authentication: your name, email address, and a securely hashed password, along with sign-in session data.
• Your profile: contact details (phone, address), an emergency contact, skills, and amateur-radio / ARES capabilities that you choose to add.
• Certification details you enter: certification name, issuer, credential ID, and issue/expiration dates.
• Certificate documents you choose to attach: the PDF or image file itself, along with its file name, type, and size. Attaching a document is always optional.
• Organization data: which organizations you belong to, your role, and records an organization's admins enter about you, such as a requirement marked met or a certification the organization issued to you.
• Technical data: IP address, browser and device information, and log data used to operate and secure the service.

How your information is shared

You own your record, and sharing follows the organizations you join:

• When you actively join an organization, your profile, certifications, skills, and capabilities are shared with that organization's administrators so they can assess readiness.
• Administrators see only the members of their own organization. Leaving an organization ends its access to your record going forward.
• Documents you attach to a certification are visible to administrators of the organizations you belong to. They are stored privately — never on a public address — and are opened through single-use links that expire within minutes.
• We do not sell your personal information, and we do not use it for advertising.
• We share limited data with the infrastructure providers that run Musterport — cloud hosting and database, object storage for attached documents (Cloudflare R2), and email delivery (Resend) — strictly to operate the service, and when required by law or to protect safety and legal rights.

How we use information

We use your information to operate Musterport and support your organization's readiness:

• Maintain rosters and compute certification status (current, expiring soon, or expired) and organization readiness.
• Send transactional email — email verification, password reset, organization invitations, join requests and approvals, and email-change confirmations.
• Secure accounts, prevent abuse, and troubleshoot problems.
• Improve the product using aggregated, de-identified usage. We do not sell data or serve ads.

Cookies & sessions

Musterport uses a single first-party cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

Data retention & security

We retain your data while your account is active. Deleting a document, a certification, or your whole account also removes the associated files from storage. Deleting your account permanently removes your profile, certifications, attached documents, skills, capabilities, and organization memberships. Passwords are stored hashed, data is encrypted in transit (HTTPS) and at rest, and access is limited to what's needed to run the service. No online service can be perfectly secure, but we work to protect your information.

Your choices & rights

Because you own your record, you're in control of it:

• Access & export: download everything Musterport holds for you at any time from Settings → Your data, as a ZIP containing your full record plus every certificate document you've attached.
• Correct: edit your profile, certifications, skills, and capabilities directly in the app.
• Delete: delete your account from Settings, which removes your data. (If you own an organization, transfer ownership or delete that organization first, so its roster isn't orphaned.)
• Questions or requests: email admin@musterport.com.

Children

Musterport is not directed to children, and you must be old enough to enter into a binding agreement to hold an account. We do not knowingly collect information from children under 13. Organizations that track minor volunteers are responsible for obtaining any authorization required to do so.

Beta & changes to this policy

Musterport is in active development. As we add capabilities — such as expiration reminders — this policy may change. We'll post updates here with a new date and, for material changes, notify account holders. Continued use after an update means you accept the revised policy.