DRAFT FOR ATTORNEY REVIEW. This page has not been reviewed by a lawyer yet.
Privacy Policy
Who we are
Academy is provided by Access Patrol, Incorporated.
- Mailing address: 1301 York Road, Suite 800-1114, Lutherville-Timonium, Maryland 21093
About Academy
Security and firearms-safety training courses, classes, certificates and student progress.
Who uses it: Students, instructors, organizations and the Academy team.
What we collect
Depending on how you use the app, we hold the following kinds of information.
- Account details: Your name and email address when you create an account or sign in.
- Student details: Name, email, phone, address or city and state, date of birth and emergency contact details, when you enroll or fill in your student profile.
- Enrollment, waivers and acknowledgments: Enrollment records, signed waivers and acknowledgments (a typed signature and how it was given), including the refund and cancellation acknowledgment.
- Training records: Attendance, written exam and range scores, instructor evaluations, completion reviews, lesson progress and certificates (with your name and email).
- Online class checks: For online classes: whether your microphone and email access worked, and attendance statements with typed signatures.
- Requests and support: Training requests, group training requests (contact email and phone), support requests and record correction requests.
- Payments: Purchaser email, student name, the amount, a checkout reference and Stripe references. Card details are entered on Stripe's page, not in Academy.
- Referrals and affiliates: Referral codes and the email addresses of the person who referred you and the person referred. Affiliates also have a profile with a referral code, commission and payout records, and a Stripe connected-account reference.
- Instructors and organizations: Instructor name, address, phones and emergency contact phone, and credential records. Organization billing and contact details and class rosters.
- Uploaded documents: Files you upload, such as an instructor credential or a student document or certificate record, are kept in private file storage.
- Page and course views: Which public pages and courses are viewed, with your account if you are signed in. The hosting platform also runs an analytics tracker.
- Certificate checks: Anyone who has a certificate number or verification code can look it up on the Verify page. A valid result shows the certificate number, the holder's display name, the completion date, the issuer and the instructor's name.
- Audit events: Actions on records are logged with who did them and when.
Why we use it
- To provide Academy to you: enrollment, classes, training records and certificates.
- To take payments and to review refund requests.
- To answer the messages and requests you send us.
- To credit referrals through the affiliate program.
- To keep the service secure and to keep a record of what happened and when.
Who else handles information
These services take part in running the app. The table says what each one does and what it receives.
| Service | What it does | What it receives |
|---|---|---|
| Base44 (hosting platform) | Hosts the app: the website, database, sign-in, backend functions, scheduled jobs and file storage. | All information entered in the app. |
| Email sending (provided through the hosting platform) | Sends notices from the app: enrollment, payment, class and certificate notices to students, instructors and staff, and the course access code email. | The recipient address and the text of the message. |
| Base44 image hosting (media.base44.com) | Delivers the course, instructor and page images and the Academy logo. | Your browser asks for the image files, so the host receives your IP address and browser details. |
| Stripe | Processes payments and refunds for paid courses through Stripe Checkout. Affiliates who want payouts set up a Stripe account on Stripe's own pages. | You enter payment details on Stripe's page. Academy keeps references, the amount and the status. |
| Google reCAPTCHA Enterprise | Tells people from automated abuse on the student registration, enrollment and group training forms. | When you submit one of these forms your browser loads Google's script and shares the signals that service needs; our server sends Google a token. |
| Google Fonts | Delivers the typefaces used on the pages. | Your browser asks Google for the font files, so Google receives your IP address and browser details. |
| Unsplash image hosting (images.unsplash.com) | Delivers one photo on the About page. | Your browser asks for the image file, so the host receives your IP address and browser details. |
| QR code image service (api.qrserver.com) | Draws the QR picture on certificate pages (signed-in screens). | Your browser sends the certificate's verification link, which contains its verification code, to draw the picture. |
| Google Calendar and Google Meet | Class schedule entries are written to a private Google Calendar kept by Access Patrol. A class can have a Meet link. | Course name, session code, delivery format, time zone, preparation notes, place, time and the Academy support address. Student names are not written and no guests are invited. |
| Instructor Reese (operated independently by the Academy's lead instructor) | Keeps Instructor Reese classes in step with Academy, and issues or closes course access codes for classes booked there. | Class details go both ways (course, place, date, time, seats, preparation notes). Instructor Reese can send the email addresses of its confirmed students, and, when a booking comes with a course access code, the student's name and email. Notices about bookings, cancellations and refunds carry only counts and booking references, no names or emails. |
| The range (Guntry Club of Maryland) and Gmail | For Maryland HQL and Permit to Carry classes held at a place that takes range bookings, Academy can email the range a request for lanes. This feature is OFF unless the owner switches it on. It is sent through Gmail (Google) from a connected Access Patrol mailbox. | If switched on, the range receives only the instructor's name, the class date and time, the number of students and the number of lanes. No student names, emails or phone numbers. |
| Access Patrol identity registry (Customer Portal) | Keeps one record per person across Access Patrol apps. | Your email address, display name and role (student, instructor or affiliate), sent when your profile is created or changed. |
| Access Patrol operations monitoring (Watchman) | Receives an operational note when a new student registers after a verified payment. | The student's email address, the course and whether the payment was live or test. |
- Service
- Base44 (hosting platform)
- What it does
- Hosts the app: the website, database, sign-in, backend functions, scheduled jobs and file storage.
- What it receives
- All information entered in the app.
- Service
- Email sending (provided through the hosting platform)
- What it does
- Sends notices from the app: enrollment, payment, class and certificate notices to students, instructors and staff, and the course access code email.
- What it receives
- The recipient address and the text of the message.
- Service
- Base44 image hosting (media.base44.com)
- What it does
- Delivers the course, instructor and page images and the Academy logo.
- What it receives
- Your browser asks for the image files, so the host receives your IP address and browser details.
- Service
- Stripe
- What it does
- Processes payments and refunds for paid courses through Stripe Checkout. Affiliates who want payouts set up a Stripe account on Stripe's own pages.
- What it receives
- You enter payment details on Stripe's page. Academy keeps references, the amount and the status.
- Service
- Google reCAPTCHA Enterprise
- What it does
- Tells people from automated abuse on the student registration, enrollment and group training forms.
- What it receives
- When you submit one of these forms your browser loads Google's script and shares the signals that service needs; our server sends Google a token.
- Service
- Google Fonts
- What it does
- Delivers the typefaces used on the pages.
- What it receives
- Your browser asks Google for the font files, so Google receives your IP address and browser details.
- Service
- Unsplash image hosting (images.unsplash.com)
- What it does
- Delivers one photo on the About page.
- What it receives
- Your browser asks for the image file, so the host receives your IP address and browser details.
- Service
- QR code image service (api.qrserver.com)
- What it does
- Draws the QR picture on certificate pages (signed-in screens).
- What it receives
- Your browser sends the certificate's verification link, which contains its verification code, to draw the picture.
- Service
- Google Calendar and Google Meet
- What it does
- Class schedule entries are written to a private Google Calendar kept by Access Patrol. A class can have a Meet link.
- What it receives
- Course name, session code, delivery format, time zone, preparation notes, place, time and the Academy support address. Student names are not written and no guests are invited.
- Service
- Instructor Reese (operated independently by the Academy's lead instructor)
- What it does
- Keeps Instructor Reese classes in step with Academy, and issues or closes course access codes for classes booked there.
- What it receives
- Class details go both ways (course, place, date, time, seats, preparation notes). Instructor Reese can send the email addresses of its confirmed students, and, when a booking comes with a course access code, the student's name and email. Notices about bookings, cancellations and refunds carry only counts and booking references, no names or emails.
- Service
- The range (Guntry Club of Maryland) and Gmail
- What it does
- For Maryland HQL and Permit to Carry classes held at a place that takes range bookings, Academy can email the range a request for lanes. This feature is OFF unless the owner switches it on. It is sent through Gmail (Google) from a connected Access Patrol mailbox.
- What it receives
- If switched on, the range receives only the instructor's name, the class date and time, the number of students and the number of lanes. No student names, emails or phone numbers.
- Service
- Access Patrol identity registry (Customer Portal)
- What it does
- Keeps one record per person across Access Patrol apps.
- What it receives
- Your email address, display name and role (student, instructor or affiliate), sent when your profile is created or changed.
- Service
- Access Patrol operations monitoring (Watchman)
- What it does
- Receives an operational note when a new student registers after a verified payment.
- What it receives
- The student's email address, the course and whether the payment was live or test.
Cookies and local storage
The app stores a few small items in your browser. The Cookies and local storage page lists them.
Safeguards and controls
- If you are signed in you can download your own records from your student profile, and file an erasure request that staff review. Nothing is deleted automatically.
- The student registration, enrollment and group training forms are checked with Google reCAPTCHA Enterprise on the server.
- Each signed-in area (student, instructor, organization, reviewer, support and admin) is limited to accounts that hold that role.
- Uploaded documents are kept in private file storage.
- Actions on records are written to an audit log, and each day's log is sealed so a later change can be detected.
- The "Ask about a course" form opens your own email app with your message ready to send. It does not send your details through Academy.
How long we keep information
- Some categories have no set retention period yet.
- Training, attendance, assessment, certificate, payment and refund records, and the audit history, are not erased on request while they are needed. An erasure request is reviewed by staff, who decide what can be erased or anonymised.
- The retention report only counts records. It does not delete anything.
Your requests about your information
To ask for a copy of your information, to correct it, or to ask us to delete it, write to Info@AccessPatrol.Net.
- If you are signed in, the app can give you a copy of your own records and take an erasure request.
Age
Academy is meant for people who meet the minimum age of the course they take. Each course has its own minimum age rule. If you are not sure whether you meet it, ask us before you enroll.
Contact us about privacy
- Email: Info@AccessPatrol.Net
- Phone: 443.435.3777
- Mail: Access Patrol, Incorporated, 1301 York Road, Suite 800-1114, Lutherville-Timonium, Maryland 21093