1. Introduction

This Privacy Policy describes how the RAC Body Cam evidence storage and management system (the "Service") collects, uses, stores, and protects information when you use our Service. We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

2.1 Evidence Files

When you upload evidence files (videos or images), we collect and store:

The file itself (video or image content)
File metadata (filename, file type, file size)
Title and description provided by you
Upload timestamp
Unique evidence code assigned to your upload

2.2 IP Address Information

We automatically collect and log IP addresses for:

Users who upload evidence (uploader IP)
Users who view evidence using evidence codes (viewer IP)
Timestamp of uploads and views

IP addresses are collected for security, audit, and administrative purposes.

2.3 Administrative Accounts

For platform administrators, we collect:

Email address (for authentication)
Account creation timestamp
Administrative access status

2.4 Reports

When users report evidence, we collect:

Report reason
Optional report details
Report timestamp
Evidence code being reported

3. How We Use Your Information

We use the collected information to:

Store and provide access to evidence files through evidence codes
Maintain security and prevent unauthorized access
Monitor and audit system usage
Respond to reports and moderate content
Provide administrative access to authorized personnel
Comply with legal obligations and law enforcement requests
Improve and maintain the Service

4. Data Storage

Your evidence files and associated data are stored securely using cloud storage services (Supabase). Data is stored in encrypted form and protected by industry-standard security measures. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share or disclose information in the following circumstances:

Authorized Administrators: Platform administrators have access to evidence files, metadata, IP addresses, and reports for system management purposes.
Legal Requirements: We may disclose information if required by law, court order, or government request.
Service Providers: We use third-party service providers (such as Supabase) for data storage and processing, who are bound by confidentiality agreements.
Evidence Access: Evidence files are accessible to anyone with a valid evidence code, as this is the intended functionality of the Service.

6. Data Retention

Evidence files and associated data are retained for as long as necessary to provide the Service and comply with legal obligations. Evidence that is taken down due to policy violations may be retained for administrative and legal purposes. IP address logs are retained for security and audit purposes.

7. Your Rights

You have the right to:

Access evidence you have uploaded using your evidence code
Report inappropriate content
Request information about data we hold (subject to verification)

Note: Since the Service does not require user accounts for general use, you must have your evidence code to access your uploaded evidence. Please keep your evidence codes secure.

8. Security Measures

We implement various security measures to protect your data, including:

Encrypted data storage
Secure file upload and transfer protocols
Access controls and authentication for administrators
IP address logging for security monitoring
Regular security assessments

9. Cookies and Tracking

The Service may use cookies or similar technologies for session management and security purposes. We do not use cookies for advertising or third-party tracking. Administrative accounts may use authentication cookies for secure access.

10. Children's Privacy

The Service is intended for use by authorized personnel and law enforcement. We do not knowingly collect information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. International Data Transfers

Your data may be stored and processed in servers located outside your country of residence. By using the Service, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact the Service administrator through the appropriate channels.

14. Consent

By using the Service, you consent to the collection, use, and storage of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.