Privacy Policy

Agent Link is provided by Access Patrol, Incorporated.

• Mailing address: 1301 York Road, Suite 800-1114, Lutherville-Timonium, Maryland 21093

Work orders, scheduling, attendance, field reports, completion proof and invoicing for security agencies, their clients and their agents.

Who uses it: Security agencies and their staff, clients, agents, partner agencies, job applicants and Access Patrol administrators.

This page covers the public website and the signed-in screens for founders, agencies, agents and clients.

Depending on how you use the app, we hold the following kinds of information.

• Account details: Name, email address, phone number, time zone, the role you act in (founder, agency, agent or client), and the agency or client you belong to.
• Policy acceptance: A policy acceptance record keeps which version was accepted, when, how (for example at registration), and the IP address and browser details seen at that moment.
• Agency details: Agency name and legal name, address, licence number and expiry, insurance provider, policy number and expiry, a primary contact name, email and phone, plan, and a Stripe connected-account reference.
• Agent profile: Full name, phone, email, address, a map position (latitude and longitude), licence number, expiry and jurisdiction, insurance details, skills, certifications, years of experience, bio, availability, pay rate and desired compensation, and credentials with the dates and the document file you upload.
• Job applications: Cover letter, proposed rate, availability date, resume file, screening and interview notes, offer details and onboarding progress. Applicants are also sent to Gusto job-posting pages; nothing is sent to Gusto by Agent Link.
• Client details: Client organization, billing address, primary contact name, email and phone, payment terms, contacts (name, email, phone, role) and service locations with access notes and coordinates.
• Service and work records: Service requests, work orders and shifts, assignments, schedule change requests, time adjustment requests, proposals and bids, partner relationships and reviews.
• Attendance and location: Clock-in and clock-out times, hours worked and approvals, with a latitude and longitude taken from your device when you allow location.
• Field and incident reports: Field report text and evidence files, with a device position when a report is sent; incident type, severity, place, description and actions taken; and completion proof (evidence files, checklist, signer name and title).
• Safety check-ins and alerts: If an agent starts a safety watch or raises an alert: the timer and check-ins, and for an alert the device position and its accuracy, who acknowledged it and when.
• Invoices, payments and payroll hand-off: Invoice records (number, amounts, status, line items, billing period, payment history, Stripe customer and invoice references) and, for an agency, the approved hours prepared for hand-off to payroll. Agent pay figures are calculated from the pay rate.
• Messages and requests: Support tickets and the name, email, subject and message you send through the Support, Contact and Data requests forms; in-app notifications and marketplace messages.
• Saved reports: Report snapshots an agency saves: title, period, the figures in the report, and any note added.
• Email intake: For messages sent to the connected company mailbox: the sender, subject, the first 2,000 characters of the text, and the attachments, which are copied into the app's file storage.
• Push notification subscription: A browser push address and keys, and browser details, if you turn push notifications on.
• AI usage: An agency's AI credit balance and a log of which AI feature ran and on which record. The log does not hold the text sent.
• Audit events: Actions in the app are recorded with who did them, their role, what they did, which record, a before and after summary, and when.

• To provide Agent Link: service requests, work orders, scheduling, attendance, field reports, completion proof and invoices.
• To answer the messages and requests you send us, and to send notices about assignments, work orders and your account.
• To bill for work, take payments and prepare approved hours for payroll.
• To keep the service secure and to keep a record of what happened and when.

Agent Link uses these Google permissions. Gmail, Calendar and Sheets each use one connection owned by Access Patrol. They are not links to your own Google account.

Agent Link does not read files in Google Drive and does not send email through Gmail.

• Google sign-in: Lets you sign in with your Google account. We receive your Google account identifier, email address and name.
• Gmail, read only (gmail.readonly): Reads messages sent to one connected Access Patrol mailbox so agencies can turn them into intake records.
• Google Calendar events (calendar.events): Writes shift events to the connected Access Patrol calendar when an agency uses calendar sync.
• Google Sheets (spreadsheets): Creates a spreadsheet in the connected Access Patrol Google account when work orders, assignments or invoices are exported.

Agent Link uses AI in two places. The result is a draft or a proposal for a person to review.

What the AI receives: For intake: the subject, text, sender, thread and attachments. For a field report draft: the work order title and description, the assignment status and earlier reports on that assignment.

• Reading incoming intake emails and files to pull out the request details, for an agency to review.
• Drafting a field report when an agent asks for a draft.
• An agency's AI use is counted in credits.

• Data requests (to ask for a correction)

These services take part in running the app. The table says what each one does and what it receives.

• Service

  Base44 (hosting platform)

  What it does

  Hosts the app: the website, database, sign-in (including Google sign-in), backend functions, scheduled jobs, file storage and image delivery.

  What it receives

  All information entered in the app.

• Service

  Email sending (provided through the hosting platform)

  What it does

  Sends invitations, report emails, time-correction notices, completion-proof forwards and client notices.

  What it receives

  The recipient address and the text of the message, and attached report content where a report is emailed.

• Service

  Stripe

  What it does

  Processes plan and certification payments, agency invoices, customer records and agency payout onboarding.

  What it receives

  Payment details are entered on Stripe. Agent Link sends what is needed to bill: the client name, email and phone, invoice lines and amounts, the work order code and service dates, and an agency contact email for payout onboarding. It keeps references and status.

• Service

  Google sign-in (through the hosting platform)

  What it does

  Lets you sign in with your Google account instead of a password.

  What it receives

  Your Google account identifier, email address and name.

• Service

  Google Gmail (read only, company mailbox)

  What it does

  Reads messages sent to one connected Access Patrol mailbox so agencies can turn them into intake records. An agency can switch intake on or off.

  What it receives

  The sender, subject, text and attachments of the messages read.

• Service

  Google Calendar (company account)

  What it does

  Writes one calendar event per upcoming shift to the connected Access Patrol Google Calendar when an agency uses calendar sync.

  What it receives

  Work order code and title, the site name and address, the shift time and the names of assigned agents.

• Service

  Google Sheets (company account)

  What it does

  Creates a spreadsheet in the connected Access Patrol Google account when an agency or administrator exports work orders, assignments or invoices.

  What it receives

  The exported rows: work order codes, titles, statuses and dates; assignment status and rate; invoice status, amounts and Stripe invoice reference.

• Service

  AI (provided through the hosting platform)

  What it does

  Reads incoming intake emails and files to pull out the request details, and drafts a field report on request. The result is a draft or a proposal for a person to review.

  What it receives

  For intake: the subject, text, sender, thread and attachments. For a field report draft: the work order title and description, the assignment status and earlier reports on that assignment.

• Service

  Watchman (an Access Patrol internal tool)

  What it does

  Receives job and dispatch events and a daily snapshot of credential, licence, insurance, incident and staffing status, so the owner can watch operations.

  What it receives

  Names, record identifiers, statuses and dates. Incident free text and document links are not sent.

• Service

  Customer Portal (an Access Patrol app)

  What it does

  Keeps one registry that links the same person across Access Patrol apps. Customer Portal can also pass a service request to Agent Link for an agency to review.

  What it receives

  To the registry: email address, display name and role label. From Customer Portal: the request details.

• Service

  ThreatViz AI (an Access Patrol app)

  What it does

  Can send a deployment request for a site to Agent Link. It becomes an intake item for an agency to review. Nothing is sent back about people.

  What it receives

  From ThreatViz AI: the request details.

• Agency staff see the records of their own agency.
• A partner agency sees the work that was allocated to it.
• A client sees its own service requests, work orders and reports.
• An agent sees their own assignments, schedule and reports.
• Access Patrol administrators can see records to run and support the service.

Access Patrol runs other apps. Each keeps its own information and has its own pages. The company-wide pages are on Customer Portal.

• Customer Portal Privacy Policy
• Access Patrol ecosystem

The app stores a few small items in your browser, including some that keep the agent app working without a signal. The Cookies and local storage page lists them.

• Cookies and local storage

• Access to records depends on sign-in, role and agency, and is checked on the server as well as in the page.
• Actions are recorded in an audit log, and each finished day of the log is sealed with a fingerprint chained to the day before, so a later change shows up.
• The support form limits repeated submissions: five in ten minutes for each signed-in account.
• A read-only data export exists so an independent backup can be taken. Only the founder's own verified account can run it, and it leaves out account records. No scheduled backup runner is in place yet.
• Demo data is kept apart from live data and is marked as demo. Demo shifts are never written to the company calendar.

Agent Link does not apply fixed retention periods today.

• Audit events older than 730 days are flagged to administrators for review. They are not deleted automatically.
• Invitations that pass their expiry date are marked expired.
• A data request sent through the form reaches support staff as a ticket, and staff decide what can be corrected or removed. Records tied to open work orders, unresolved incidents, disputed time, pending completion reviews or open invoices may need to stay until that work is closed.

To ask for a copy of your information, to correct it, or to ask us to delete it, write to info@accesspatrol.net. You do not need an account to do this.

• The Data requests form needs a signed-in account.

• Data requests

Agent Link is meant for people aged 18 or older.

• Email: info@accesspatrol.net
• Phone: 443.435.3777
• Mail: Access Patrol, Incorporated, 1301 York Road, Suite 800-1114, Lutherville-Timonium, Maryland 21093