Privacy Policy
Last updated: March 2, 2026
1. Introduction
OW Ventures LLC ("we," "us," or "our") operates the Forensic Notes platform, including the web application and iOS application (collectively, the "Service"). This Privacy Policy describes how we collect, use, and protect your information.
2. Information We Collect
Account Information
When you create an account or are invited to an organization, we collect your name, email address, and organizational affiliation.
Evidence and Case Data
The Service stores forensic evidence data including photographs, videos, case notes, examination reports, and associated metadata (GPS coordinates, timestamps, device information). This data is created and managed by your organization.
Usage Data
We collect technical information necessary for the operation of the Service, including IP addresses, browser type, and audit log entries documenting actions taken within the platform.
3. How We Use Your Information
- To provide and maintain the Service
- To authenticate users and enforce access controls
- To maintain audit trails for compliance purposes
- To improve the Service and fix issues
- To communicate important updates about the Service
4. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit: All data is transmitted over TLS 1.2 or higher.
- Encryption at rest: Data is encrypted at rest using AES-256 encryption, both on-device (iOS Data Protection with Secure Enclave) and server-side (Google Cloud Platform managed encryption).
- Access controls: Role-based access control (RBAC) limits data access to authorized users within your organization.
- Audit logging: All actions are logged with immutable audit trails for compliance and accountability.
5. Data Retention
Organization administrators can configure data retention policies through the platform settings. Forensic evidence data is retained according to your organization's configured policy. Account data is retained for the duration of your account's active status.
6. Data Subject Rights
You have the right to:
- Access your personal data stored in the Service
- Export your personal data in a machine-readable format
- Request deletion of your account
- Correct inaccurate personal information
These actions can be performed through the platform settings or by contacting your organization administrator.
7. Third-Party Services
The Service is hosted on Google Cloud Platform. We may use third-party services for:
- Cloud hosting and storage (Google Cloud Platform)
- AI-powered analysis features (Google Gemini API)
- Payment processing (Stripe)
These services are bound by their own privacy policies and our data processing agreements.
8. Compliance
The Service is designed to support compliance with CJIS Security Policy, ISO 17025, and FBI Quality Assurance Standards. Specific compliance certifications may vary by deployment configuration.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes through the Service or via email.
10. Contact
For privacy-related inquiries, contact us at jacob.dym@owventuresllc.com.