Privacy Policy

1. Introduction

IronCase, Inc. ("IronCase," "we," "us," or "our") is committed to protecting the privacy and security of information collected through our law enforcement investigation management platform. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our services.

Given the sensitive nature of law enforcement data, we maintain the highest standards of data protection in compliance with CJIS Security Policy, applicable federal and state laws, and industry best practices.

2. Information We Collect

2.1 Account Information

• Name and contact information
• Agency or department affiliation
• Badge number and rank (if applicable)
• Authentication credentials
• Multi-factor authentication information

2.2 Case and Investigation Data

• Case information entered by authorized users
• Evidence metadata and files
• Investigation notes and reports
• Witness and person-of-interest information
• AI analysis results and recommendations

2.3 Usage and Audit Data

• System access logs and timestamps
• Actions performed within the platform
• IP addresses and device information
• Session duration and activity patterns

3. How We Use Your Information

We use collected information to:

• Provide and maintain our investigation management services
• Process and respond to AI analysis requests
• Ensure compliance with CJIS and other regulatory requirements
• Maintain comprehensive audit trails
• Improve our platform and develop new features
• Communicate important updates and security information
• Respond to legal requests and prevent fraud

4. Data Security

We implement industry-leading security measures including:

• AES-256 encryption for all data at rest
• TLS 1.3 encryption for all data in transit
• Multi-factor authentication requirements
• Role-based access controls
• 15-minute session timeouts per CJIS Policy 5.5.5
• Regular security audits and penetration testing
• SOC 2 Type II certification

5. Data Retention and Deletion

We retain data in accordance with applicable law enforcement retention requirements:

• Homicide cases: Retained indefinitely
• Felony cases: 10 years after case closure
• Misdemeanor cases: 5 years after case closure
• Audit logs: 7 years per CJIS requirements

Upon request, we can provide data deletion in compliance with applicable regulations.

6. Information Sharing

We do not sell personal information. We may share information only:

• With authorized personnel within your agency
• With other agencies when explicitly authorized for case collaboration
• With service providers under strict confidentiality agreements (Cloudflare, AWS)
• When required by law or valid legal process
• To protect safety and prevent illegal activities

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to certain processing activities
• Receive a copy of your data in a portable format

To exercise these rights, contact your agency administrator or our privacy team.

8. CJIS Compliance

IronCase is designed to comply with FBI CJIS Security Policy requirements. All employees with access to Criminal Justice Information (CJI) have completed background checks and security awareness training. Our platform implements all required technical controls including encryption, access logging, and session management.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or concerns: