Legal
Privacy Policy
How we handle information collected through this website.
Draft. This policy has not been reviewed or published. It is not in effect.
Who we are
This website is operated by Dynamis, Inc. ("Dynamis", "we", "us"), the maker of COBRA emergency management software.
Dynamis, Inc.
3130 Fairview Park Dr., Suite 300
Falls Church, VA 22042
+1 (703) 465-4400
What this policy covers
This policy covers this website, www.cobrasoftware.com, and the COBRA test text-message program described under Text messages (SMS), and nothing else. The COBRA application itself handles operational data belonging to customer agencies under separate agreements, and this policy does not describe or govern it.
Personal data held inside a customer's COBRA deployment is covered by the COBRA Product Privacy Notice. That is the page to read if you are asking what the platform stores about people, rather than what this website collects about visitors.
Information you give us
The site has three forms. Each one accepts a fixed set of fields and discards anything else, so the lists below are complete.
Contact form
- What your enquiry is about (sales, support, or partnerships)
- First and last name
- Email address
- Agency or organization
- Your message
Demo request
- First and last name
- Email address
- Phone number
- Agency or organization
- Job title
- Anything you tell us about what you would like to see
Free license registration
- First and last name
- Email address
- Phone number
- Agency or organization
- Type and approximate size of your agency
- Anything you tell us about your current tools or timeline
We use what you submit to respond to you. Submitting a form does not subscribe you to anything.
Text messages (SMS)
Dynamis sends COBRA test and demonstration text messages to Dynamis staff and to demo participants who opt in. How to opt in, how often messages are sent, and how to stop them are on COBRA test text messages: staff opt-in. When you opt in we collect your name, your mobile number, and the date, time and wording of the consent you gave.
We use your mobile number only to send you those messages.We do not sell, rent or share mobile numbers or SMS opt-in consent with third parties or affiliates for marketing or promotional purposes. Our SMS provider, Twilio, sends the messages on our behalf and may not use your number for anything else.
Reply STOP to any message to stop them, or HELP for help. Message and data rates may apply. We keep a record of your consent and of any opt-out as evidence of them.
Information collected automatically
Your IP address, when you submit a form. It is used to limit how many submissions can come from one source in a short period, which is what keeps the forms from being used to send bulk mail. It is held briefly in memory for that purpose and is not stored in a database. It is also passed to Cloudflare as part of the security check described below.
Ordinary server records. Our hosting provider records technical details of requests to the site, such as IP address, the page requested, and browser type, as part of operating and securing it.
Analytics. We use Google Analytics 4 to understand which pages are read and how people arrive, and Microsoft Clarity to see how pages are actually used. Whether these run before you have agreed to them depends on where you are. See below.
Clarity records a replay of your visit: the pages you view, where you move and click, and how far you scroll. It does not record what you type into form fields. We use these recordings only to find parts of the site that do not work well.
We do not use advertising trackers, we do not sell what analytics collect, and we do not combine it with what you send us through a form.
Cookies and your choice
If you are in the United Kingdom, the European Economic Area, or Switzerland, we ask first. Nothing analytics-related loads until you agree. Declining costs you nothing. Every part of the site works the same either way.
Elsewhere, analytics start without asking, and you can turn them off whenever you like using Cookie preferences at the bottom of any page. That link is there in every country, including for anyone who was never shown the question.
Turning analytics off stops anything further being collected. It takes effect on your next page view, because a script the browser has already loaded cannot reliably be unloaded, which is why the choice sits before the loading rather than after it.
Two things do not depend on your choice, because the site cannot work without them: the cookie Cloudflare may set to run the security check on our forms, and the record of your choice itself, kept in your browser.
Why we are allowed to process this
We process what you submit on the basis of our legitimate interest in responding to an enquiry you chose to send us. We do not use it for anything else, and we do not profile you.
Who else handles this information
We do not sell your information and we do not share it for advertising. It reaches these providers only because they run parts of the site:
- Microsoft Azure hosts the site, runs the code that processes form submissions, and keeps operational logs.
- Azure Communication Services delivers the notification email containing your submission to us.
- Microsoft 365 is the mailbox that email arrives in.
- Cloudflare provides Turnstile, the check that confirms a form was submitted by a person rather than an automated script. Cloudflare receives your IP address and may set cookies in your browser to perform it.
- Google provides Google Analytics 4. Only if you agree to analytics.
- Microsoft Clarity records how pages are used, including the session replay described above. Only if you agree to analytics.
We may also disclose information where the law requires it.
Where your information is processed
Your information is processed in the United States, where our hosting, email, and analytics providers operate.
If you are in the European Economic Area or the United Kingdom, that means your information leaves your country. Those transfers are covered by the Standard Contractual Clauses approved by the European Commission, which our providers include in their data protection agreements with us.
How long we keep it
We keep form submissions for 180 days, after which they are deleted. If your enquiry becomes an ongoing business relationship, we keep what we need for that relationship instead, under the agreement covering it.
Your rights
You can ask us to tell you what information we hold about you, correct it, delete it, or provide a copy of it. You can also object to our use of it. Write to us and we will respond. See below.
These apply wherever you are. We have not limited them by region, so there is no separate list for any one jurisdiction.
If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
Security
Form submissions are sent over an encrypted connection, protected by an automated abuse check, and limited in volume. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children
This site is intended for emergency management professionals. It is not directed at children, and we do not knowingly collect information from them.
Changes to this policy
If we change this policy we will update the date at the top of this page.
Contact
Email support@cobrasoftware.com about anything in this policy, including a request to access or delete your information. You can also write to us at the postal address above or use the contact form.