Terms of Service

Last updated: 2026-05-06

Acceptance

These Terms of Service ("Terms") govern access to and use of the Muster mobile app, admin console, firefighter portal, and marketing site (collectively, "the Service") provided by Safe Signals LLC ("Safe Signals", "we"). By activating a Muster license, signing up for the firefighter portal, or otherwise using the Service, you agree to these Terms on behalf of yourself and the customer department you represent.

Who can use the Service

Muster is intended for use by fire departments, emergency response agencies, and personnel authorized by such departments. The customer department must designate at least one department admin who is responsible for configuring the Service, managing personnel enrollment, and ensuring the department's use of the Service complies with applicable laws.

Each customer department must have a valid Muster license (Emergency, Tier 1, Tier 2, or Tier 3) to use the Service in production. The Emergency tier is a 72-hour rapid-setup pass intended for first-time use at an active mutual-aid incident; Tier 1, Tier 2, and Tier 3 are annual subscriptions.

Subscription, billing, and cancellation

Subscriptions are billed annually unless otherwise agreed in a sales-assisted Tier 3 contract. Payment is processed by Stripe; Safe Signals does not handle card data directly.
Subscriptions auto-renew at the end of each term. You may cancel at any time from the admin console; the license remains active through the end of the paid term.
Refunds are not provided for partial-term cancellations except where required by law or within the 30-day money-back guarantee window on initial Tier 1 / Tier 2 / Tier 3 purchases. Sales-assisted Tier 3 contracts may include specific refund terms.
Pricing for Tier 1 (Volunteer/Small) is $499/year flat with a 25 active-member cap. Tier 2 (Mid-size) is $1,999/year with 50 seats included; additional seats are $25/seat/year. Tier 3 (Career/Large) is $4,999/year with 100 seats included; additional seats are $50/seat/year. Pricing may change with at least 30 days' notice; existing subscriptions are not affected mid-term.

Safety features are universal

Safe Signals commits, as a matter of architectural rule, that the following features are never gated by license state, license tier, or department membership:

Mayday declaration
Evacuation alerts and orders
Emergency Traffic
Hazard flagging
Exposure event capture
Personnel Accountability Reports (PAR)
Rehab cycle tracking
Incident Safety Officer authority

These features remain operational on any activated device, even if the license has expired, even if a kill-switch has disabled cloud features, even at a guest department device on another department's incident. This commitment is permanent.

What Muster does not do

Muster is documentation infrastructure, not a decision system. Specifically:

Muster records what happened; it never makes determinations. The Service does not assign cause, diagnose medical conditions, classify injuries as work-related, or render any other editorial judgment about an incident. Determinations remain with qualified human professionals.
Muster does not replace your department's policies, training, or discipline. NFPA 1550 and NFPA 1580 compliance requires organizational programs that Muster supports but does not deliver. See our compliance documentation for the precise scope of what Muster claims and what remains the customer department's responsibility.
Muster is not a clinical medical system. Vitals captured during rehab support NFPA 1580 Chapter 22 documentation; they are not a diagnostic tool and do not replace EMS evaluation. Detailed clinical records remain with the department's occupational health provider.
Muster is not a regulatory submission system by itself. NERIS submission is provided as a connector (Tier 2 + Tier 3) but acceptance by NERIS or any other regulator remains the department's responsibility.

Data ownership

The customer department owns the operational data Muster captures on its behalf — incident archives, personnel records, configuration. Safe Signals processes this data on behalf of the department and does not assert ownership.

In mutual-aid scenarios, each department owns data scoped to its own personnel: exposure records, rehab cycles, and medical incidents for a department's firefighters belong to that department, even when the incident is hosted by a different department. The incident host owns the authoritative incident archive; cross-references maintain coherence.

Aggregate, de-identified statistics (e.g., total active incident count across all customers) may be used by Safe Signals for product improvement and capacity planning.

Acceptable use

You agree not to:

Use the Service in a manner that violates applicable laws, including OSHA 1910.1020 and state firefighter cancer presumption laws.
Use the Service to deliberately falsify incident records, exposure events, or personnel accountability data.
Attempt to circumvent license enforcement, forge license tokens, or extract Safe Signals' private signing keys.
Use the Service to interfere with other departments' operations during mutual aid beyond the legitimate scope of guest authority.
Reverse-engineer, decompile, or otherwise attempt to extract source code from compiled Service binaries, except where such activity is permitted by applicable law (e.g., interoperability research).

Service availability

Muster is offline-first by design. The mobile app continues to function during cloud outages, including during active incidents — operational and safety features do not depend on cloud connectivity. Cloud features (admin console, firefighter portal, archive sync, license validation) require Safe Signals' cloud infrastructure to be available.

Safe Signals targets 99.5% uptime on cloud features for Tier 2 customers and may offer higher SLA terms in Tier 3 contracts. Maintenance windows are announced in advance via the admin console.

Warranty disclaimer

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT, EXCEPT AS EXPRESSLY SET FORTH IN THESE TERMS OR IN A COMMERCIAL-TIER CONTRACT.

No warranty is made that the Service will meet every requirement of any specific compliance standard, certification body, or regulatory authority. Muster's NFPA 1550 and NFPA 1580 compliance claims are documented and audited annually; the customer department remains responsible for the operational use of the Service in support of its own compliance.

Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SAFE SIGNALS' AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE AMOUNT THE CUSTOMER PAID SAFE SIGNALS IN THE TWELVE MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE LIABILITY. SAFE SIGNALS WILL NOT BE LIABLE FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES.

This limitation does not apply to a party's gross negligence, willful misconduct, or liabilities that cannot be limited by law.

Indemnification

The customer agrees to indemnify and hold Safe Signals harmless from claims arising from the customer's use of the Service in violation of these Terms or applicable law, including claims related to the customer's policies, training, or operational decisions.

Termination

Either party may terminate the subscription relationship at the end of the current term with notice via the admin console. Safe Signals may suspend or terminate access for material breach of these Terms, including non-payment, fraudulent activity, or violations of acceptable use, with reasonable notice where practicable.

Upon termination, customer data is retained for 90 days to allow export, then deleted, except for data that Safe Signals is legally required to retain (notably exposure records under OSHA 1910.1020). Audit logs are retained indefinitely.

Governing law

These Terms are governed by the laws of the State of New York, USA, without regard to its conflict-of-laws principles. Any disputes will be resolved in the state or federal courts located in Suffolk County, New York, except where sales-assisted Tier 3 contracts specify otherwise.

Changes to these Terms

When we make material changes to these Terms, we will notify customer department admins by email and update the "Last updated" date at the top of this page. Continued use of the Service after a change constitutes acceptance of the updated Terms.