Privacy Policy

1. Who We Are

EMSGrades LLC (“EMSGrades,” “we,” “us,” or “our”) operates the EMSGrades platform at emsgrades.com and related subdomains (collectively, the “Platform”). EMSGrades is a public transparency platform that publishes ratings, reviews, and information about emergency medical services agencies, providers, and related entities in Georgia.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, create an account, submit a review, or otherwise interact with the Platform.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when you:

• Create an account: name, email address, and password (stored in hashed form).
• Submit a review: your written review content, star ratings, and any optional verification information (employment relationship, identity verification).
• Make a payment: billing name, payment card information (processed by our third-party payment processor — we do not store raw card data), and billing address.
• Contact us: name, email address, and the content of your message.
• Sign up for updates or notifications: email address and, optionally, your name.

2.2 Information Collected Automatically

When you visit the Platform, we and our service providers may automatically collect certain technical information, including:

• IP address and approximate geographic location (country/state level);
• Browser type and version, operating system, and device type;
• Pages visited, time spent on pages, and referring URLs;
• Aggregated web traffic and performance data from our hosting provider (Vercel), which is non-personally-identifying;
• Product analytics events (such as pages viewed and features used) and, for a small sample of sessions, session replays used to diagnose problems. Replays mask passwords and payment fields, and analytics data is collected through our own domain using PostHog, a product analytics service we configure and control.

We use this information to operate, secure, and improve the Platform. We do not use Google Analytics, advertising trackers, or social media pixels. We never sell this information, and we never share it with anyone for advertising or marketing purposes. If our analytics practices change, this policy will be updated.

2.3 Public Data We Publish

EMSGrades publishes licensure and credential information about EMS agencies and providers sourced from the Georgia Office of EMS and Trauma public registry. This is government-published public data. If you are an EMS provider or agency whose information appears on the Platform and you have questions, please contact us at legal@emsgrades.com.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and authenticate your identity;
• Publish and display reviews and ratings you submit (subject to our Community Guidelines);
• Process payments for agency subscription tiers;
• Send transactional communications (account confirmation, password reset, payment receipts);
• Send platform updates and notifications if you have opted in;
• Respond to your inquiries and support requests;
• Monitor for fraud, abuse, and violations of our Terms of Service;
• Improve the Platform and analyze usage patterns using aggregated, non-personally-identifying data;
• Comply with applicable legal obligations.

We will never sell your personal information, and we will never use your information to serve you advertising.

Important limitation: EMSGrades is not a consumer reporting agency as defined by the Fair Credit Reporting Act (FCRA). Information on this Platform is not intended for use in employment screening, tenant screening, credit decisions, insurance underwriting, or any other purpose governed by the FCRA. Do not use this Platform for those purposes.

4. How We Share Your Information

We never sell, rent, or trade your personal information, and we never share it with third parties for their own marketing, advertising, or data-brokering purposes. We may share your information only in the following limited circumstances:

• Service providers: We share information with third-party vendors who help us operate the Platform, including cloud hosting (Vercel), database and authentication infrastructure (Supabase), payment processing (Stripe), product analytics (PostHog), and email delivery services. These providers are bound by data processing agreements that restrict their use of your data to the specific services they perform for us and require them to maintain appropriate security measures.
• Reviews you submit: Reviews you submit to the Platform are published publicly and associated with your chosen display name. If you verify your identity or employment, a “Verified” badge may appear next to your review, but your legal name is not disclosed without your consent.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of EMSGrades, our users, or the public.
• Business transfers: If EMSGrades is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. Specifically:

• Account data is retained for the life of your account plus up to 3 years after account closure, to comply with legal obligations and resolve disputes.
• Reviews and ratings you submit may remain on the Platform after account closure in de-identified or anonymized form, consistent with the public interest purpose of the Platform.
• Payment records are retained for a minimum of 7 years to comply with tax and accounting obligations.
• Analytics data is retained per our analytics providers' standard retention policies and is used only to operate and improve the Platform.

You may request deletion of your personal account data at any time by contacting legal@emsgrades.com. Note that deletion of your account does not automatically remove reviews you have submitted, which may be retained in de-identified form.

6. Cookies and Tracking Technologies

We use a minimal set of cookies and similar technologies:

• Strictly necessary cookies: Required for the Platform to function, including session authentication cookies that keep you logged in. These cannot be disabled without breaking core functionality.
• First-party analytics storage: Our analytics (PostHog, served through our own domain) stores an identifier in a cookie and browser local storage to distinguish visits and sessions. We use it to understand how the Platform is used and to diagnose problems, never for advertising, and the data is never sold or shared for marketing.

We do not use advertising cookies or social media tracking pixels. If this changes, we will update this policy and, where required by law, seek your consent.

You can control cookies through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use account features.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate personal information.
• Deletion: You may request deletion of your personal account data, subject to our data retention obligations.
• Opt-out of marketing: You may unsubscribe from non-transactional emails at any time using the unsubscribe link in any email we send, or by contacting legal@emsgrades.com.
• Data portability: You may request a machine-readable copy of your account data.

To exercise any of these rights, contact us at legal@emsgrades.com. We will respond within 30 days. We may need to verify your identity before processing certain requests.

Georgia residents: Georgia does not currently have a comprehensive consumer data privacy statute equivalent to the CCPA. We nonetheless extend the rights described above to all users as a matter of policy.

8. Children's Privacy

The Platform is not directed to individuals under the age of 18. Georgia law requires a minimum age of 18 for EMS licensure, and the Platform is designed exclusively for adults. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will promptly delete that information. If you believe a person under 18 has provided us personal information, please contact legal@emsgrades.com.

9. Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include HTTPS encryption for data in transit, hashed storage of passwords, and access controls limiting who within EMSGrades can access personal data.

No method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of confirming the breach, or as otherwise required by applicable law.

10. International Data Transfers

EMSGrades is based in the United States. Your information may be processed on servers located outside your country of residence, including in the United States, as part of the normal operation of our hosting and security infrastructure (including our hosting provider's global network). By using the Platform, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, by sending an email notification to registered users. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our privacy practices, please contact us:

EMSGrades LLC
8735 Dunwoody Place, Suite 5999
Atlanta, GA 30350
legal@emsgrades.com