How FireDash collects, uses, retains, and shares information across our products.
Last updated September 18, 2026
Thank you for choosing to be part of the FireDash community. FireDash is operated by Wrights Creative Services, L.L.C. ("Company", "FireDash", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy or our practices with regard to your personal information, please contact us at legal@firedash.us.
When you visit firedash.us and any related sites (including online.firedash.us, resident.firedash.us, risk.firedash.us, water.firedash.us, developer.firedash.us, verify.firedash.us, riskdash.us, and waterdash.us) or use any of our applications (collectively, the "Services"), you trust us with your personal information. We take your privacy very seriously. In this privacy policy, we seek to explain in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. If there are any terms in this privacy policy that you do not agree with, please discontinue use of the Services.
This privacy policy applies to all information collected through the Services and any related sales, marketing, or events. Please read it carefully — it will help you make informed decisions about sharing your personal information with us.
In short: We collect personal information that you provide to us when you register, contact us, or use the Services.
We collect personal information that you voluntarily provide to us when you register for an account, express an interest in obtaining information about us or our products and services, participate in activities within the Services, or otherwise contact us. The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use, and can include:
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.
In short: Some information — such as IP address and device characteristics — is collected automatically when you use the Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not necessarily reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, approximate location, and information about how and when you use the Services. This information is primarily used to maintain the security and operation of the Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies. See "Do we use cookies and other tracking technologies?" below.
If you use a mobile application or grant the Services permission to access your location, we may collect precise or approximate location data so that we can show nearby hydrants, route you to a job, or attach location to a report you submit. You can revoke this permission at any time in your device settings.
FireDash issues verifiable report certificates (for example, a resident Insurance Distance Proof or a RiskDash report). Anyone who receives a certificate can confirm that it is genuine at verify.firedash.us. When you use the verification service, we ask you to provide your name (or organization) and email address, which are required and are recorded, together with the certificate number, date and time, and technical information such as your IP address, on that certificate's verification log. We use this verification record to operate the service, to maintain an audit trail of who has checked a certificate, and to detect and prevent abuse. You do not need a FireDash account to verify a certificate.
In short: We process your information for purposes based on legitimate business interests, the performance of our contract with you, compliance with our legal obligations, and/or your consent.
We use the personal information collected via the Services for a variety of business purposes described below:
In short: We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.
We do not sell your personal information to third parties for their own marketing purposes.
In short: Yes. Strictly necessary cookies keep the Services working; optional analytics and referral cookies are used only as your cookie choices allow.
We use cookies and browser local storage to: (a) keep you signed in and secure your session; (b) remember preferences such as the service area you last selected; (c) detect and prevent fraud or abuse, including bot checks on sign-up forms; (d) with your permission, measure traffic and analyze usage of the Services with Google Analytics; and (e) with your permission, remember the referral link you arrived through so that whoever referred your department is credited. Outside the United States we ask for your consent before setting any optional cookie; in the United States optional cookies are on by default and you can opt out at any time. A Global Privacy Control or Do-Not-Track signal switches every optional cookie off (see section 12). You can change your choices at any time from “Your Privacy Choices” at the bottom of our pages.
Our Cookie Policy lists every cookie we use, its purpose, and how long it lasts; riskdash.us and waterdash.us each publish their own, linked at the bottom of their pages. Most browsers also let you refuse cookies, but blocking strictly necessary cookies may stop parts of the Services from working.
In short: If you choose to register or log in using a social media account, we may have access to certain information about you.
The Services may offer the ability to register and log in using third-party social media or single sign-on account details (for example, Google, Apple, or Microsoft). Where you choose to do this, we will receive certain profile information about you from the identity provider. The profile information we receive may vary depending on the identity provider, but will typically include your name, email address, profile picture, and other information you choose to make public.
We will use the information we receive only for the purposes that are described in this privacy policy or that are otherwise made clear to you on the Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party identity provider. We recommend that you review their privacy policy to understand how they collect, use, and share your personal information.
In short: We may transfer, store, and process your information in the United States.
Our servers are located in the United States. If you are accessing the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us and by the third parties with whom we share your personal information (see "Will your information be shared with anyone?" above) in the United States and other countries.
If you are a resident in the European Economic Area or the United Kingdom, these countries may not have data protection laws as comprehensive as those in your country. We will, however, take all necessary measures to protect your personal information in accordance with this privacy policy and applicable law.
In short: We are not responsible for the safety of any information you share with third-party providers who advertise on, or are linked from, the Services.
The Services may contain links to other websites, online services, or mobile applications that are not affiliated with us. We cannot guarantee the safety and privacy of data you provide to those third parties. Any data collected by third parties is not covered by this privacy policy. We are not responsible for the content or privacy and security practices and policies of any third parties. You should review the policies of such third parties and contact them directly to respond to your questions.
In short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements, or department records retention obligations imposed on a department customer). For resident accounts, this typically means as long as the account is active, plus a reasonable period thereafter to address legal or operational needs. Operational records owned by a department or agency are retained for the period required by that department or agency's records retention policies. Report certificates and their verification logs (including the name, organization, and email provided by people who verify a certificate) are retained as part of the certificate's permanent record so that it can be authenticated for as long as it may be relied upon.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
In short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These include encryption in transit (TLS), encryption at rest where applicable, access controls, logging and monitoring, regular security review, and least-privilege practices for personnel access. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from the Services is at your own risk. You should only access the Services within a secure environment.
In short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. Information about minors may appear in records (for example, as part of a household roster in a resident account) only when entered by a responsible adult account holder, and is treated under the same protections as other personal information. If we learn that personal information from users less than 18 years of age has been collected outside of these conditions, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under age 18, please contact us at legal@firedash.us.
In short: You may review, change, or terminate your account at any time.
If you are resident in the European Economic Area or the United Kingdom and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.
If you would at any time like to review or change the information in your account or terminate your account, you can:
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Service, and/or comply with legal requirements.
Opting out of email marketing. You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list, but we will still need to send you service-related emails that are necessary for the administration and use of your account.
We honor Global Privacy Control. If your browser or a browser extension sends an opt-out preference signal — the Sec-GPC header defined by the Global Privacy Control specification — we treat it as a valid request to opt out of the sale or sharing of your personal information, and we switch off every optional cookie (analytics and referral tracking) for that browser. When we detect the signal we display a visible confirmation on the page that your opt-out request has been honored, and the same confirmation appears under “Your Privacy Choices”.
We also honor the legacy Do-Not-Track ("DNT") header in the same way. Because the signal is tied to the browser rather than to your account, you will need to enable it in each browser and on each device you use. You can also opt out at any time from “Your Privacy Choices” at the bottom of our pages (see our Cookie Policy), or for a specific account by contacting us using the details in section 15.
To be explicit: we do not sell your personal information, and we do not share it for cross-context behavioral advertising. The opt-out mechanism above is provided because the law requires a functioning opt-out route regardless.
In short: Yes, if you are a resident of California, you are granted specific rights regarding access to and control of your personal information.
California Civil Code Section 1798.83 (the "Shine The Light" law) permits California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us at legal@firedash.us.
If you are a California resident with rights under the California Consumer Privacy Act and the California Privacy Rights Act ("CCPA/CPRA"), you may have the right to:
How to exercise these rights. You may submit a request by either of the following methods:
We will verify your request using the information associated with your account, and we will respond within 45 days, extendable once by a further 45 days where permitted, with notice to you.
If you are a resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia or Washington, you have rights comparable to those described above under your state's comprehensive privacy law — generally the right to confirm whether we process your personal data, to access it, to correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising, sale, and certain profiling.
Appeals. If we decline your request, you may appeal that decision by replying to our response or writing to privacy@firedash.us with the word “Appeal” in the subject line. We will respond to an appeal within 45 days and, if we deny it, we will tell you how to contact your state Attorney General.
Sensitive data. We do not use or disclose sensitive personal data for purposes that require opt-in consent, and we do not sell it.
The FireDash Assistant uses a third-party large language model provided by OpenAI to generate responses. When you use the Assistant, the text of your question and the relevant context from your account are transmitted to OpenAI to produce a reply. Conversations are stored in your account so you can refer back to them, and you can disable Assistant history in your profile settings.
Assistant responses are machine-generated. They can be incomplete or incorrect and are not professional, legal, engineering or insurance advice. Verify anything material before relying on it. We do not use the Assistant to make automated decisions that produce legal or similarly significant effects about you, and no FireDash report, score or certificate is generated solely by AI without the underlying data you or your fire department supplied.
We use the following categories of sub-processors. Each is bound by contract to process personal information only on our instructions:
If we become aware of a security breach affecting your personal information, we will notify affected account holders and, where applicable, the relevant regulators, without undue delay and in any event within the timeframes required by applicable law. For customers who are public entities, we will provide the information you need to meet your own notification obligations.
If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below.
In short: Yes, we will update this policy as necessary to stay compliant with relevant laws.
We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
If you have questions or comments about this policy, you may email us at legal@firedash.us or write to us at:
Based on the laws of some countries, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, email us at legal@firedash.us. We will respond to your request within the time required by applicable law and, in any event, within 30 days where reasonably feasible.
