Information you provide
When you submit a form, CrisisFlow collects the information you enter, including your name, work email, organization, role, stated interest, and any optional message. Do not submit confidential, personal, customer-specific, security-sensitive, or export-controlled information.
Public decision case
The public decision case uses a historical Port Houston event with an illustrative company network. Selected scenario options are sent to the website's calculation service to return demonstration results. The application does not save these selections to its database or attach them to a contact request. Lesson-owner names and review dates remain in your browser and any decision record you choose to download. Use illustrative names and do not enter confidential business information.
Website information
The site records daily aggregate counts for approved events such as pages viewed, case modules reached, and files downloaded. It does not use analytics cookies, local storage, cross-site tracking, or visitor profiles. Analytics records do not include names, email addresses, company names, form text, IP addresses, exact coordinates, query strings, or detailed scenario selections.
Form protection
To protect the contact form, CrisisFlow uses same-origin checks, an automated-submission trap, minimum completion time, and short-lived rate limiting. A one-way network-address digest is used only to count requests within an hourly window; each bucket is usable for no more than 48 hours, and expired rows are purged during subsequent form processing. The underlying address is not stored in the application database.
How information is used
CrisisFlow uses submitted information to route and respond to your request, protect the website, maintain reliable operation, and understand aggregate site use.
Sharing
CrisisFlow uses service providers to host the site, protect forms, route requests, and operate approved business systems. CrisisFlow does not sell personal information. Information may also be disclosed when required by law or necessary to protect the service and its users.
Retention and choices
Unconverted contact requests are reviewed for deletion after 12 months. Aggregate analytics contain counts rather than visitor records. Information may be retained longer when needed for an active relationship, operational records, or applicable legal requirements. You may request access, correction, or deletion through our Talk to us page, subject to applicable law.
Changes
This notice may be updated when the website or its data practices change. The effective date identifies the current version.