Privacy Policy

1. Scope and agency-controlled data

AlphaRelay is built for authorized public-safety, government, and organizational users. When an agency or organization provides your access or directs a mission, it determines why operational information is collected and how long it must be kept, subject to its policies, contracts, public-records obligations, evidence rules, and applicable law. AlphaRelay processes that information to provide the Services and follow the organization’s authorized instructions.

If your question concerns mission footage, an evidence record, or an account managed by an agency, contact that agency first. Its privacy notice and records procedures may apply in addition to this policy.

2. Information we collect

AlphaRelay for iOS permissions

• Camera: used to scan an AlphaRelay organization license QR code. You may enter a pairing or license code instead. The camera is not used to create mission footage through this permission.
• Screen and audio capture: iOS ReplayKit records the screen or app you select after you start a broadcast. Operator audio is included only when you enable the microphone in the system broadcast picker.
• Notifications: used for live mission alerts and upload or capture status when authorized.
• Optional precise location: after you explicitly start Location Sharing, the iOS app uses precise location in the foreground and, when permitted, in the background for up to 12 hours. Duty positions are deleted when sharing stops. Mission-scoped breadcrumb points are retained as mission evidence with custody and integrity records.
• Optional Broadcast Remote ID: during an Android Controller Screen Capture mission, you may enter an aircraft Remote ID. With Nearby Wi-Fi, Bluetooth scanning, and location permission, AlphaRelay listens for that exact Broadcast Remote ID and records its reported position, altitude, course, speed, accuracy, and reception time as advisory mission telemetry. Non-matching identifiers are not published.
• Local storage: an installation identifier, encrypted license context, pending mission events, screenshots, and recordings may remain on the device while capture or upload is in progress.

3. Sources of information

We collect information:

• directly from you when you activate a device, use a feature, upload content, or contact us;
• from your agency or organization, including administrators and other authorized users;
• automatically from the Services, connected devices, aircraft, controllers, and browsers;
• from device permissions and content you deliberately select for capture or upload; and
• from service providers that support hosting, authentication, media delivery, diagnostics, and email.

4. How we use information

We use information to:

• activate licensed devices, authenticate users, and enforce organization-scoped access;
• capture, transmit, synchronize, store, review, search, and export mission records and media;
• deliver live video, alerts, offline synchronization, reports, and evidence-integrity features;
• provide local or cloud AI-assisted detection, analysis, mission questions, and report drafting;
• operate, secure, troubleshoot, measure, and improve the Services;
• respond to inquiries and send transactional or service communications;
• prevent fraud, misuse, unauthorized access, and threats to safety or system integrity; and
• comply with contracts, agency instructions, legal process, and applicable law.

We do not use mission content to advertise to you or build advertising profiles.

5. AI-assisted features

AlphaRelay offers organization-controlled local and cloud AI-assisted features. Local processing can analyze selected video images on supported devices. When an authorized user or organization enables a cloud AI feature, AlphaRelay may send the minimum content needed for that request—such as a selected screenshot, structured mission events, or report context—to our contracted AI service provider. We use the returned output to generate alerts, findings, answers, or draft report content.

For Controller Livestream voice-event logging, the gateway detects the keyword “Relay” locally. It sends only the bounded triggered utterance to the cloud AI provider for transcription, does not continuously stream audio to that provider, and does not retain the temporary audio clip after the transcription request completes.

AI output is assistive and may be incomplete or inaccurate. Authorized personnel remain responsible for reviewing findings and reports. We do not authorize our AI providers to use agency mission content for their own advertising, and cloud AI can be disabled where required by organization policy.

6. How we disclose information

We may disclose information to:

• Your organization and authorized users, including administrators, operators, reviewers, supervisors, and people to whom the organization directs an evidence export or guest upload link.
• Infrastructure and storage providers, such as Supabase, Vercel, and Backblaze, for hosting, authentication, databases, storage, backup, and secure media delivery.
• Feature service providers, such as Cloudflare for configured live video, cloud AI providers for authorized AI requests, Resend for email, PostHog, Google Analytics, and Vercel Analytics for usage measurement, and Sentry for error diagnostics.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse, or complete a merger, financing, acquisition, or transfer of the Services subject to appropriate protections.

We require service providers that receive personal information to protect it consistently with this policy, our contracts, and applicable law; process it only for authorized purposes; and use appropriate security and confidentiality measures.

AlphaRelay does not sell personal information and does not share it for cross-context behavioral advertising. We do not use third-party advertising networks in the Services.

7. Retention and deletion

We retain information only as long as reasonably necessary to provide the Services, follow an organization’s instructions and retention schedule, preserve authorized evidence and custody records, meet security and contractual requirements, resolve disputes, and comply with law. Because mission content may be an official record or evidence, deleting an individual account does not automatically delete mission records associated with that person.

In the hosted service, a mission moved to Trash is generally recoverable for 30 days before scheduled permanent deletion of its database and cloud-storage objects. An organization may preserve, export, or be legally required to retain a mission before that deadline. Backup, audit, security, billing, or legal records may remain for a limited additional period where necessary and permitted by law.

Pending mobile recordings and screenshots may be kept in app-private storage until upload succeeds or an authorized user removes the app data. Removing an AlphaRelay license deletes the saved license context from the device, but does not delete records already synchronized to the organization.

8. Cookies and analytics choices

AlphaRelay uses necessary cookies and similar storage to support sign-in, security, service operation, and to remember your privacy choice. The cookie that remembers whether you accepted or rejected optional analytics expires after 180 days. Necessary technologies remain available when you reject optional analytics.

If you select “Accept analytics,” AlphaRelay may load Google Analytics, PostHog, and Vercel Analytics to measure page visits, product interactions, device context, and service performance. These optional tools may use cookies or local storage. They are not loaded until you affirmatively accept analytics. AlphaRelay does not use these tools to serve targeted advertising.

You may reject optional analytics without losing access to the service. You can reset your saved choice at any time by clearing AlphaRelay site data in your browser. Rejecting optional analytics stops future optional analytics and clears associated browser cookies where technically available.

9. Your choices and privacy rights

Device and browser choices

• You can revoke camera, microphone, screen-recording, notification, or location permission in your device settings. Some capture, alert, or aircraft-connection features will no longer work without the related permission.
• You can remove the saved AlphaRelay license from the app’s Device controls.
• You can reset your optional website analytics choice by clearing cookies and local storage using browser controls. Because we do not sell personal information or use it for targeted advertising, we do not offer an advertising opt-out. Where legally required, we honor recognized browser privacy signals for covered processing.

Access, correction, deletion, and other rights

Depending on your location and relationship with AlphaRelay, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to limit or object to certain uses; to withdraw consent; to appeal a denied request; and to receive equal service without discrimination for exercising a privacy right. These rights may be limited by evidence-retention, public-records, security, contractual, or other legal obligations.

For an agency-managed account or mission record, contact your organization’s administrator or records/privacy contact first. For AlphaRelay-controlled information, submit a request through the contact method below. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law, subject to verification.

10. Security, storage, and international transfers

We use administrative, technical, and physical safeguards designed for the sensitivity of the information, including encrypted network transport, organization-scoped access controls, role-based permissions, audit and custody records, restricted service credentials, and integrity hashes for supported media workflows. No security measure can guarantee absolute protection.

AlphaRelay’s production services are operated primarily in the United States. If you use the Services from another country, information may be transferred to and processed in the United States under applicable contractual and legal safeguards.

11. Children’s privacy

The Services are designed for authorized professional and organizational use and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Mission content captured by an authorized agency may incidentally depict minors; the agency’s lawful authority, policies, and records obligations govern that operational content.

12. Changes to this policy

We may update this policy as the Services, vendors, or legal requirements change. We will post the updated policy here, revise the “last updated” date, and provide additional notice when required. App Store privacy disclosures are maintained separately and should reflect the data practices of the app version currently available.

13. Contact us