Privacy Policy

Regional Security Group — ODIN Platform

Last Updated: July 21, 2026

1. Overview

Regional Security Group ("RSG," "we," "us") operates the ODIN security intelligence platform (the "Platform"). This Privacy Policy describes how we collect, use, share, and protect information when you use the Platform. We design the Platform for institutional and government security operations and apply data-minimization and tenant-isolation principles throughout.

2. Data We Collect

We collect the following categories of information:

  • Account data: name, email, role, organization (tenant), and authentication details you provide at registration or invitation.
  • Operational data: shift records, patrol logs, incident reports, SITREP photos, and field inputs submitted by authorized users.
  • Intelligence data: open-source intelligence, threat-watch records, graded assessments, and related indicators you submit or the Platform ingests.
  • Usage & telemetry: analytics events, search queries, audit logs, and device metadata necessary for security, billing, and service improvement.
  • Compliance records: legal-acceptance and multi-factor-authentication records used to evidence authorization.

3. How We Use Data

We use your data to provide, secure, and improve the Platform; to enforce role-based access and tenant isolation; to generate intelligence products and advisories; to maintain tamper-evident audit trails; to process payments; and to comply with legal obligations. We do not sell personal data to third parties.

Where applicable (e.g., under GDPR or similar regimes), we process data based on contract performance, our legitimate interests in operating and securing the Platform, legal obligation, and your consent where required. Sensitive operational data is processed under the lawful basis applicable to the security and intelligence functions of your organization.

5. Sharing & Disclosure

Data is tenant-isolated: one organization's data is not disclosed to another except where shared records are explicitly designated. We share data with service providers (e.g., cloud hosting, payment processing, SMS delivery) under contractual protections, and as required by law. Intelligence products generated for a client are disclosed only to that client's authorized users unless a sharing designation applies.

6. Data Retention

We retain data only as long as necessary to provide the Platform and meet legal, audit, and compliance obligations. Audit logs and compliance records are retained per applicable retention requirements. Incident and intelligence data is retained according to your organization's configuration and operational needs. You may request deletion where legally permitted.

7. Security

We protect data with encryption in transit, role-based access control enforced server-side, multi-factor authentication for privileged access, tamper-evident audit logging, and continuous monitoring. Access to production data is restricted and logged. Despite these measures, no system is perfectly secure; we notify affected users of confirmed security incidents as required by law.

8. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. Authorized administrators within your organization can manage user accounts and data. To exercise rights not available in-app, contact us using the details below.

9. International Transfers

Your data may be processed in countries other than your own. Where this occurs, we rely on appropriate safeguards (e.g., standard contractual clauses) and limit transfers to what is necessary to provide the Platform.

10. Children

The Platform is not directed to children under 18 and we do not knowingly collect their data. If you believe a child has provided data, contact us to request removal.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a revised "Last Updated" date. Continued use of the Platform after changes take effect constitutes acceptance.

12. Contact

For privacy questions or requests, contact:

For the ODIN text-messaging program, see our SMS Privacy Policy.