Last updated September 2026
Playbook is operated by Emergency Preparedness Solutions, LLC ("we," "us"). This policy describes what information Playbook collects, why, and how it's used when your organization uses the service.
Admin accounts. If you create or manage a plan, we collect the name, email address, and password you provide to sign in. Passwords are handled by our authentication provider (Supabase) and are never visible to us in plain text.
Field staff access. Viewing your organization's plan doesn't require an account. Staff enter your organization's plan code (and password, if your organization sets one), which issues a signed access cookie scoped only to your organization's plan. We don't collect a name, email, or any other personal information just to view a plan.
Plan content. Everything your organization's admins add — plan sections, contacts, forms, and checklists — is stored on your organization's behalf and is never shared with or visible to any other organization using Playbook.
Form submissions. When someone fills out a form your organization has built (for example, an Incident Report), their responses are stored and associated with your organization so the submission isn't lost if the follow-up email doesn't go through. These responses aren't tied to a personal account.
Checklist activity. When someone checks an item off a checklist, we record the item, the timestamp, and — only if they choose to type one in — a free-text name. This activity is used to help your organization reconstruct a timeline after an incident.
We use this information solely to operate Playbook for your organization: authenticating admins, granting staff access to the right plan, storing the content you author, and recording form and checklist activity so your organization can review it later. We don't sell personal information, and we don't use your organization's content for advertising or share it with any other customer.
Data is stored with our infrastructure provider (Supabase, hosted on cloud infrastructure in the United States) and is not knowingly transferred outside standard cloud-hosting operations.
An organization's admin can edit or remove plan content, contacts, and forms at any time through the admin panel. To request deletion of an admin account or ask questions about this policy, contact us at Admin@emergencyprepsolutions.org.
We may update this policy as Playbook changes. We'll update the date at the top of this page when we do.