Privacy Policy
Last updated: May 21, 2026
CommandCenter (the "Service") is operated by Caxy Interactive ("Caxy", "we", "us"). This policy explains what data we collect, how we use it, and the choices you have. We aim to collect only what we need to run the Service.
What we collect
- Account information. Your email address, name, and the tenant (workspace) you belong to. We get this from your sign-in provider (Google) via Amazon Cognito.
- Session recordings. Video and audio you record during a session — either solo or with a remote expert. Recordings are stored in Amazon S3 in the us-east-1 region.
- Transcripts and AI summaries. We use Amazon Bedrock (Anthropic Claude and Amazon Titan) to generate transcripts, summaries, and structured extractions from your recordings.
- Uploaded documents. Files you upload to your tenant knowledgebase. Stored alongside your recordings in S3 and parsed for search.
- Device push tokens. Expo push tokens for the mobile app so we can notify you when a session starts. Tokens are deleted on sign-out.
- Operational logs. Standard request logs and error traces (CloudWatch). We do not include the content of your recordings or transcripts in operational logs.
What we don't collect
- We do not track you across other apps or websites.
- We do not sell or share your data with advertisers.
- We do not use your recordings to train AI models.
Camera and microphone access
The mobile app requests camera and microphone permission to record sessions you start. We access the camera and microphone only while you are actively recording. We never access them in the background.
How long we keep your data
We retain recordings, transcripts, and uploaded documents for as long as your tenant's account is active. When your tenant deactivates the Service, we delete tenant data within 30 days, except where we are required by law to retain it longer.
Your rights
You can request access to, correction of, or deletion of your personal data by emailing privacy@caxy.com. Tenant admins can remove users and delete sessions directly from the admin interface.
Where your data is processed
The Service runs on Amazon Web Services in the United States (us-east-1). By using the Service from outside the United States, you consent to processing in the United States.
Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted inside the Service.
Contact
Caxy Interactive
Chicago, IL
privacy@caxy.com