Privacy Policy
Last updated June 2026
Request for Mobilization (“RFM”, “we”, “us”) is an internal operations tool operated by Tech for Service in support of Team Rubicon. This policy explains what information we collect when you sign in to and use RFM, how we use it, and the choices you have.
Information we collect
RFM does not maintain its own username and password system. You sign in using single sign-on (SSO) through your organization’s identity provider — Google or Microsoft Entra. When you authenticate, we receive a limited profile from that provider:
- Your name
- Your email address
- A unique account identifier and, where available, your profile photo
We request only the basic email and profile scopes. We do not request access to your contacts, calendar, files, or any other data held by your identity provider.
As you use the application, we also store the operational records you create or are assigned — such as deployment and mobilization requests, gift-in-kind records, and related activity — along with standard technical logs (timestamps and audit entries) needed to operate and secure the service.
How we use your information
- To authenticate you and create or match your RFM account
- To operate the mobilization and gift-in-kind workflows you participate in
- To maintain an audit trail and keep the service secure
- To communicate with you about activity relevant to your role
We do not sell your personal information, and we do not use it for advertising.
How we share information
Your information is visible to authorized Team Rubicon staff and Greyshirts within the application as needed to coordinate operations. We share data with service providers who host and support the application on our behalf, and we may disclose information where required by law. We do not otherwise share your personal information with third parties.
Data retention
We retain account and operational records for as long as your account is active and as needed to support operations, meet legal obligations, and maintain an audit history. You may request deletion of your account by contacting us; some records may be retained where we have a legal or operational obligation to keep them.
Security
Access to RFM requires SSO through your organization’s identity provider, and access within the application is limited by role. We use industry-standard measures to protect data in transit and at rest. No system is perfectly secure, but we work to safeguard your information.
Your choices
Because sign-in is handled by your identity provider, you can manage or revoke RFM’s access from your Google or Microsoft account’s security settings at any time. To request access to, correction of, or deletion of your information held in RFM, contact us using the details below.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the “last updated” date above. Continued use of RFM after a change means you accept the updated policy.
Contact us
Questions about this policy or your information? Email mobilization@teamrubiconusa.org.