mRESILIENCE PRIVACY STATEMENT

Effective Date/Date of Last Revision: August 29, 2019

Thank you for being a part of the mResilience™ community, powered by TIAG, a U.S.-based company with domestic clients only. We’re committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this Privacy Statement, your personal information, or our practices with regard to your personal information, or if you wish to exercise your options as described in this Privacy Statement, please contact us at mresinfo@tiag.net.

When you engage with our mResilience™ mobile application (“mRes App”), and use our services, you trust us with your personal information. We do not take this trust lightly. In this Privacy Statement, we detail our privacy practices and explain:

  • What personal information we collect,

  • How we use it,

  • Who we share it with, and

  • What rights you have regarding our collection and use of your personal information.

This Privacy Statement applies to all personal information collected through the mRes App, the mResilience™ administrative portal website (“mRes Portal”), and/or related services, sales, marketing, or events (we refer to the mRes App, the mRes Portal, and our other activities collectively in this Privacy Statement as the “Sites”).

Please read this Privacy Statement carefully as it will help you make informed decisions about sharing your personal information.

1. What do we mean by “personal information”?

For purposes of this Privacy Statement, “personal information” means any information from or about a person that either identifies that person directly or that makes that person identifiable when combined with other information from or about that person from any source. Personal information stops being personal information when it has been aggregated, de-identified, or otherwise anonymized sufficiently that the individual is no longer identified or identifiable using reasonable efforts, resources, and technology.

2. What personal information do we collect?

A. Personal information you disclose to us.

In short: We collect personal information that you provide to us voluntarily, such as your name and contact information, including email address.

We collect personal information that you voluntarily provide to us when you register as an administrator for the mRes Portal or download and use the mRes App as made available to you by your department or agency. We may also collect personal information that you provide when you ask us for additional information about us and our products and services, when you participate in activities on the mRes App, or otherwise when you contact us.

The personal information that we collect depends on the extent of your interactions with us and the mRes App, the choices you make, and the products and features that you use. The personal information we collect can include the following:

  • Name and Contact Data: If you are listed as one of your department’s or agency’s administrative contacts for the mRes App and mRes Portal, we store and use your name, contact phone number, and agency email address. You may also choose to provide additional, optional information about yourself to personalize your account entry, including a short bio and an appropriate business head shot photograph.

  • Credentials. We collect your official agency email address for purposes of authentication and account access. If you are an mRes Portal Administrator for your department or agency, we also collect any password that you use for administrative access to the mRes Portal.

All personal information that you provide to us must be true, complete and accurate, and you must contact either us at mresinfo@tiag.net., or your mRes Portal Administrator in your department or agency, to make any changes to your personal information.

B. Information we automatically collect from you.

We automatically collect certain device and usage information when you use the mRes App. This information does not directly reveal your specific identity (like your name or contact information) but may include information that, when combined with other information from or about you, could be used to identify you.

We do not attempt to use information that we automatically collect to identify or reidentify you, and we do not share this information with your agency or department, or with anyone else who will use it to identify or reidentify you. The information that we automatically collect includes your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our mRes App, and other technical information. We use this information primarily to maintain the security and operation of the mRes App and mRes Portal, to conduct internal analytics and generate reports that we use to help improve the mRes App and the user experience, and to provide you with timely updates and additional features. We may provide aggregated access and usage data to your department or agency, but not in a form that permits you to be identified or reidentified.

C. Information we collect about your mobile device through the mRes App

In short: We may collect information regarding your mobile device for push notifications when you use the mRes App.

If you use the mRes App, we may also collect the following information:

  • Mobile Device Data. We may automatically collect device information (such as your mobile device ID, model and manufacturer), operating system, version information and IP address.

  • Push Notifications. We may request permission to send you push notifications regarding the mRes App, such as reminders about specific features and notifications from your department or agency. If you wish to opt out from receiving these types of communications, you may turn them off in your device’s settings.

We use this device information primarily to maintain the security and provide you with access to and device-specific operation of the mRes App, and to conduct internal analytics and generate reports that we use to help improve the mRes App and the user experience, and to provide you with timely updates and additional features. We may provide aggregated access and usage data to your department or agency, but not in a form that permits you to be identified or reidentified.

3. How do we use your personal information?

In short: We use your personal information to fulfill our contract with you and your department or agency, for compliance with our legal obligations, to assess our performance and enhance our products and services, and/or otherwise in accordance with your consent.

We use personal information collected via the mRes Portal and mRes App to enter into a contract with and provide contract-related services to you and your department or agency; to comply with our legal obligations; to accomplish other business purposes; and otherwise as requested by you.

We use the personal information we collect or receive as follows:

  • Consent. We may use your personal information if you have given us specific consent or otherwise requested in writing that we use your personal information for a specific purpose.

  • To facilitate account creation and logon process. If you choose to link your account with us to a third-party account (such as your Google or Facebook account) for sign-on and other purpose, we use your personal information relating to those third-party accounts to facilitate the account creation and logon process.

  • To send administrative information to you. We may use your personal information to send you product, service and new feature information as well as information about changes to our terms, conditions, and policies.

  • To assess compliance with and, to the extent necessary, enforce our terms, conditions and policies and protect our legal rights and intellectual property.

  • To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

  • For other business purposes. We may use your personal information for other business processes as permitted by law, such as data analysis, identifying usage trends, determining the effectiveness of existing features and offerings, and evaluating and improving our app, products, services and your experience.

To the greatest extent possible we use personal information that has been aggregated, deidentified, or otherwise anonymized and thus does not directly or indirectly identify you and that cannot, with reasonable efforts, resources, and technologies, be used to re-identify you. Such information is not personal information within the scope of this Privacy Statement or applicable privacy laws.

4. Will your personal information be shared with anyone?

In short: We do not share or sell your personal information with third parties except as described in this Privacy Statement. We share personal information with our third-party service providers, aggregated access and usage data with your department or agency that does not identify you and cannot be used to reidentify you, and otherwise with your prior consent, to comply with laws, to protect vital interests, and to fulfill business obligations.

  • Service Providers. We may share personal information with third parties who perform services on our behalf, such as infrastructure, analytics, and security. Those third parties agree not to use your personal information for any purposes other than those we authorize, and they agree not to try to identify or reidentify individual users except to the extent necessary to provide services on our behalf.

  • Consent. We may share your personal information if you have given us specific consent or otherwise requested in writing that we share your personal information for a specific purpose. • Performance of Contract. Where we have entered into a contract with your agency or with you through the mRes App, we may share your personal information to the extent necessary to fulfill the terms of our contract.

  • Legal Obligations. We may disclose your personal information where we are legally required to do so in order to comply with applicable law, governmental requests, any judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements.).

  • Vital Interests. We may disclose your personal information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.

  • Business Transfers. We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or portion of our business to another company.

We may share personal information that has been aggregated, de-identified, or otherwise anonymized and thus does not directly or indirectly identify you and that cannot, with reasonable efforts, resources, and technologies, be used to re-identify you. Such information is not personal information within the scope of this Privacy Statement or applicable privacy laws.

6. How do we keep your personal information safe?

In short: We protect your personal information through a system of technical, physical, and administrative security measures.

We collect, work with, and share only the small amount of personal information that we need to provide you with services through the MRes Portal and mRes App. We have implemented reasonable and appropriate technical, physical, and administrative security measures to protect the security of that personal information. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from the mRes App and the mRes Portal is at your own risk. You should only access the services within a secure environment.

7. Do we collect personal information from children under the age of 16?

In short: We do not knowingly collect personal information from children under the age of 16. The mRes app and Sites are not directed to or intended for individuals under the age of 16. We instruct your department or agency not to provide us with email addresses or other personal information from or about anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under the age of 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child under the age of 16 has provided us with personal information, please contact us at mresinfo@tiag.net.

8. What are your privacy rights?

In short: You may review, change, or terminate your account at any time.

If you would like to review or change the information in your account or terminate your account, you can contact us by:

  • Email to mresinfo@tiag.net.

  • Mail or courier delivery to mRes Privacy One Fountain Square 11911 Freedom Drive, Suite 1180 Reston, VA 20190

Upon receiving your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use and/or comply with our legal obligations.

Your Rights as a California Resident

California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us by:

  • Email to mresinfo@tiag.net

  • Mail or courier delivery to mRes Privacy One Fountain Square 11911 Freedom Drive, Suite 1180 Reston, VA 20190

9. What about third-party sites?

We may link to third-party sites that provide you with additional resources and information, and you may choose to download the mRes App from one of the official app stores. This Privacy Statement is limited to those data collection and sharing activities that we control, directly and through our contracts with third parties that provide services on our behalf. We do not control the data collection and sharing activities for those thirdparty sites or for your interactions with the official app stores, and this Privacy Statement does not apply to them. Similarly, we do not control any information that might be collected by or made available to third parties when you choose to share information about your use of or your access to the mRes App or mRes Portal by using your social media or other online accounts.

We encourage you to carefully review the privacy statements for any linked third-party sites, for the official app stores, and for your social media and other online accounts before choosing to share personal information online or download any app, including the mRes App, from an official app store.

10.What happens if we update this Privacy Statement?

We may update this Privacy Statement from time to time, including materially changing the uses of personal information described herein. Any change or update to our Privacy Statement will be posted on the mRes App and Sites under “Privacy Statement” at least 30 days prior to implementation.

Effective Date: August 29, 2019

Last Updated: August 29, 2019