/// LEGAL ///
Privacy Policy
Effective: October 11, 2026 · Last updated: October 11, 2026
1. Overview
CypherMission ("we," "us," "our") is committed to protecting the privacy of our users, clients, and the individuals whose data is processed through our platforms. This Privacy Policy describes how we collect, use, store, and protect information in connection with the Services. By using our Services, you agree to the practices described in this Policy.
2. Information We Collect
We collect information you provide directly (account registration, contact forms, briefing requests), information generated by use of the Services (case metadata, user activity logs, evidence credential records), and technical information (IP addresses, device identifiers, browser and session data for security purposes). We do not collect Criminal Justice Information (CJI) through channels that are not covered by a signed CJIS Security Addendum.
3. How We Use Information
We use collected information to: (a) provide, operate, and improve the Services; (b) authenticate users and maintain platform security; (c) generate and maintain Verifiable Credentials associated with evidence and AI outputs; (d) respond to support and briefing requests; (e) improve ACI intelligence accuracy through aggregate pattern analysis (see Section 6); and (f) comply with applicable law.
4. CJIS and Criminal Justice Information
For platforms operating under a CJIS Security Addendum, CypherMission maintains all Criminal Justice Information in compliance with CJIS Security Policy v6.0. CJI is never processed through commercial AI provider APIs. Access to CJI within the platform is restricted to credentialed personnel and logged in accordance with CJIS audit requirements. The CJIS Security Addendum executed with your agency governs the handling of CJI in priority over this general Privacy Policy.
5. Evidence and Chain of Custody Data
Evidence records, cryptographic hashes, and Verifiable Credentials generated through LedgerLock and AXIOVerify are treated as law enforcement sensitive data. These records are retained for the period specified in your service agreement and are not shared with third parties except as required by your applicable data processing agreement, court order, or applicable law. Credential metadata (not underlying evidence content) may be retained for verification purposes.
6. ACI Intelligence Base
CypherMission ACI Super Intelligence improves accuracy through compounding across network deployments. Aggregate, anonymized patterns derived from case outcomes may be incorporated into the shared ACI model. This process does not expose case-specific identifying information, evidence content, or defendant data to other network participants. The specific data processing terms applicable to your deployment are governed by your Data Processing Agreement.
7. Data Sharing and Third Parties
We do not sell personal data. We do not share case-level or investigative data with third parties for marketing, advertising, or commercial purposes. We may share data with: (a) service infrastructure providers operating under confidentiality obligations (e.g., cloud hosting); (b) law enforcement or government authorities as required by applicable law; (c) parties you direct us to share with under your service agreement. International transfers are handled in compliance with applicable data protection law including GDPR where applicable.
8. GDPR and EU Data Subjects
For investigations involving EU data subjects, CypherMission provides zero-knowledge proof capabilities allowing methodology verification without disclosure of personal data, supporting compliance with GDPR Article 5(1)(c) data minimization requirements. EU data subjects may have rights to access, correct, or request deletion of personal data we hold. Contact us at privacy@cyphermission.com to submit a request. We will respond within the timeframe required by applicable law.
9. Security
We maintain technical and organizational measures appropriate to the sensitivity of the data we process: encryption at rest and in transit, access controls, audit logging, personnel security screening (for CJIS-covered systems), and incident response procedures. No system is perfectly secure. In the event of a data breach affecting your data, we will notify you in accordance with applicable law and your service agreement.
10. Data Retention
We retain data for as long as necessary to provide the Services and comply with our legal obligations, or as specified in your service agreement. Evidence credentials and audit logs are retained for the minimum period required by applicable law enforcement records retention schedules applicable to your jurisdiction. You may request deletion of non-evidentiary account data by contacting us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active clients of material changes via the contact information on file. The effective date at the top of this page reflects the most recent update. Continued use of the Services after notice of changes constitutes acceptance.
12. Contact
For privacy inquiries, data subject requests, or GDPR-related questions: privacy@cyphermission.com. For all other inquiries: cyphermission.com/contact.