Privacy Policy
Last updated: July 19, 2026
This Privacy Policy explains what information Finest Command (the “Service”), operated by CFP Technology LLC, a Texas limited liability company (“we,” “us”), collects, how we use it, and the choices you have. By using the Service you agree to this Policy.
1. The roster data is public record, not information about you
The NYPD officer names, ranks, shields, commands, and promotion history shown on the Service are derived from public records (including NYC Open Data). This is not personal information we collected from you, and browsing it is available without an account. This Policy concerns the information we collect about you as a user of the Service.
Our NYPD Payroll & Overtime pages show only aggregatefigures (department-wide totals by fiscal year, rank, and borough) from the public NYC Citywide Payroll dataset, with small groups withheld so no individual's pay can be inferred. An individual officer's earnings are treated as private and are shown only to that member for their own record.
2. Information we collect
- Account information.When you create an account, our authentication provider collects your email address and, if you use Sign in with Apple or Google, the identifier those providers return. If you use Apple’s “Hide My Email,” we only receive the relay address.
- Subscription & billing status. For web purchases, our payment processor (Stripe) handles your card details and returns a customer/subscription reference; for in-app purchases, Apple (iOS) or Google (Android) processes the payment and our subscription-management provider (RevenueCat) returns a subscription reference. We never see or store your full card number.
- Personalization you provide. Watchlists, saved searches, alert rules, a self-attested link to your own officer record, and career goals.
- Law-enforcement verification (optional). If you request the law-enforcement rate, we record your self-attested affiliation and, where you choose identity verification, a verification result from a third-party identity-verification service (we receive a confirmation and a subject identifier, not your underlying identity documents).
- Usage & security data. Basic engagement events (e.g., which profiles or commands you view and searches you run), and a hashed form of your IP address used for rate limiting and abuse detection. We also use a bot-protection service to distinguish humans from bots on forms.
- Messages you send. If you use the contact form, we store your message and email so we can reply.
3. How we use information
We use it to operate the Service: to authenticate you, provide the features and analytics of your plan, deliver the email alerts and digests you opt into, process and reconcile your subscription, respond to your messages, maintain security and prevent abuse, and comply with law.
4. Service providers we share with
We do not sell your personal information. We share it only with service providers who process it on our behalf to run the Service, in the following categories:
- Authentication — account sign-in and identity.
- Payment processing — subscription billing (Stripe for the web; Apple for iOS and Google for Android in-app purchases, coordinated through our subscription-management provider, RevenueCat) and receipt validation; we never receive your full card number.
- Cloud hosting & infrastructure — application hosting, database, storage, secrets, and email delivery.
- Content delivery & security — edge delivery, DNS, and bot protection.
- Identity verification — optional law-enforcement affiliation verification (VerifyPass), only if you choose it; we receive a confirmation and a subject identifier, not your identity documents.
We may also disclose information if required by law or to protect the rights, safety, or property of users or the public.
5. Data retention
We keep account and subscription information for as long as your account is active and as needed to meet legal, accounting, or security obligations. You may delete your account by contacting us; we will delete or anonymize your personal information except where we must retain it by law.
6. Your choices and rights
You can access and update your account information, manage watchlists and alerts, and unsubscribe from digest emails at any time. Depending on where you live, you may have rights to access, correct, delete, or port your personal information. To exercise these, email [email protected]. Manage or cancel an iOS subscription in your device’s Settings, an Android subscription in Google Play, and a web subscription from your account.
7. Security
We use industry-standard measures including encryption in transit, managed secrets, least-privilege access, and audit logging. No system is perfectly secure, but we work to protect your information.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect information from them.
9. Changes
We may update this Policy from time to time; the “Last updated” date above reflects the latest version, and continued use after changes means you accept them.