How Unitavra handles information

Scope and roles

This notice applies to unitavra.com, its legacy rigcheckems.com address during the domain transition, Unitavra accounts, transactional emails, walkthrough requests, and related support. For apparatus checks, inventory, personnel-access entries, and department reports, the department decides why and how the information is used and is generally the responsible organization. Unitavra processes those records to provide the service. Unitavra is responsible for its own account, security, billing, website, and support operations.

Information collected

Unitavra processes names, email addresses, authentication identifiers, department memberships and roles, provider titles, state professional-license numbers and expiration dates, certification names and expiration dates, reminder preferences, optional profile photographs, ambulance location maps, apparatus and checklist configuration, equipment inventory and expiration details, inspection reports, administrative activity, records-governance settings, and communications submitted to Unitavra. Historical apparatus-reference photographs uploaded before the hologram-only editor may remain associated with an existing rig.

Technical information may include IP-address-derived security keys, request timestamps, browser or device details available in service logs, session cookies, and diagnostic events. Stripe handles payment-card details when billing is enabled; Unitavra receives limited customer, subscription, plan, status, and transaction references.

Provider credentials and reminders

Providers can view and update their own credential records within each department. That department’s owners and administrators can view and manage its provider credentials and include them in a department data export. Other members do not receive a provider’s license number or certification record. Administrators configure titles and certification requirements; these records do not independently verify a license or confer department permissions.

Dashboard alerts and transactional reminder emails identify missing or expiring credentials. Provider emails cover their own records; administrator emails summarize their department. Reminder emails omit state license numbers. Users can turn off their email reminders while dashboard alerts remain available. Credential records remain associated with membership while access is paused and are removed when the associated membership is removed; limited audit history and delivery records support accountability and duplicate prevention. The service-owner dashboard shows department contacts, usage counts, and subscription information.

Sources and purposes

Information comes from users, department administrators, connected service providers, and normal use of the website. It is used to authenticate accounts, enforce department boundaries, operate inspections and inventory features, send account and department messages, provide support, administer subscriptions, prevent abuse, preserve records, investigate incidents, meet legal obligations, and improve reliability.

Service providers and disclosures

Unitavra uses Cloudflare for application delivery and operational storage, Supabase for authentication, Resend for transactional email, and Stripe when payments are enabled. These providers process information to perform contracted services. See the Subprocessors page for current functions and links.

Information may also be disclosed when required by law, to protect users or the service, in a business transaction subject to appropriate safeguards, or at the department’s direction. Unitavra does not sell personal information or use it for cross-context behavioral advertising.

Cookies and authentication

Unitavra uses necessary cookies and browser storage for secure sessions, account recovery, department selection, drafts, and appearance preferences. Unitavra does not currently use advertising cookies. Blocking necessary storage can prevent sign-in or application features from working.

Department control, public records, and retention

Departments manage access and determine their legal retention duties. Existing workspaces default to preserving reports indefinitely. Standard permanent report disposal requires recorded retention authority, an elapsed period, department-owner action, and no legal hold. The verified Unitavra app owner may use an explicitly confirmed, audited technical override for a false test report only while also serving as that department’s owner. The override cannot bypass a legal hold and does not determine whether deletion is lawful. Archiving does not destroy a report. Limited audit entries remain after authorized disposal to preserve accountability and prevent replay.

Public-records and litigation obligations vary by jurisdiction. A request for a department-created operational record may be referred to the department’s designated records contact. Learn more on the Records Governance page.

Retention of other information

Account and membership information is retained while needed to provide access and support legitimate security, contractual, tax, and legal needs. Historical apparatus-reference photos remain with the department’s existing rig configuration until the photo or rig is removed, subject to limited backup and provider-log cycles; the current editor does not accept new apparatus photos. Security rate-limit entries expire automatically. Walkthrough and privacy communications are retained as reasonably necessary to respond and maintain business records.

Privacy choices and state rights

Depending on where you live, you may have rights to know or access personal information, correct it, delete it, obtain a portable copy, limit certain uses, or appeal a decision. Unitavra does not discriminate for exercising applicable privacy rights. Submit a privacy request. Identity and authority may need to be verified; authorized-agent requests may require proof of permission.

Because departments control operational records, Unitavra may coordinate with or refer your request to the relevant department. Some information may be retained where permitted or required for security, legal claims, contracts, public records, or other lawful exceptions.

Children and patient information

Unitavra is a workplace service and is not directed to children under 13. It is not intended for patient care reports, protected health information, dispatch narratives, or clinical documentation. Users must not enter patient-identifying or medical information into forms, checklist fields, notes, inventory records, or messages.

Security and location

Unitavra uses encrypted connections, verified accounts, server-side authorization, private photo storage, audit controls, and provider-managed infrastructure. No service can guarantee absolute security. Providers may process information in the United States and other locations under their applicable contractual safeguards.

Changes and contact

Material updates will be identified by a new effective date or policy version, and account users may be asked to accept revised terms. For privacy rights or questions, use the Privacy Request form. Do not submit passwords, patient information, or sensitive operational evidence through a public form.