Privacy Policy

1. Scope and agency-controlled data

AlphaRelay is built for authorized public-safety, government, and organizational users. When an agency or organization provides your access or directs a mission, it determines why operational information is collected and how long it must be kept, subject to its policies, contracts, public-records obligations, evidence rules, and applicable law. AlphaRelay processes that information to provide the Services and follow the organization’s authorized instructions.

If your question concerns mission footage, an evidence record, or an account managed by an agency, contact that agency first. Its privacy notice and records procedures may apply in addition to this policy.

2. Information we collect

AlphaRelay Copilot for iOS permissions

• Camera: used to scan an AlphaRelay organization license QR code. You may enter a pairing or license code instead. The camera is not used to create mission footage through this permission.
• Screen and audio capture: iOS ReplayKit records the screen or app you select after you start a broadcast. Operator audio is included only when you enable the microphone in the system broadcast picker.
• Notifications: used for live mission alerts and upload or capture status when authorized.
• Local storage: an installation identifier, encrypted license context, pending mission events, screenshots, and recordings may remain on the device while capture or upload is in progress.

3. Sources of information

We collect information:

• directly from you when you activate a device, use a feature, upload content, or contact us;
• from your agency or organization, including administrators and other authorized users;
• automatically from the Services, connected devices, aircraft, controllers, and browsers;
• from device permissions and content you deliberately select for capture or upload; and
• from service providers that support hosting, authentication, media delivery, diagnostics, and email.

4. How we use information

We use information to:

• activate licensed devices, authenticate users, and enforce organization-scoped access;
• capture, transmit, synchronize, store, review, search, and export mission records and media;
• deliver live video, alerts, offline synchronization, reports, and evidence-integrity features;
• provide local or cloud AI-assisted detection, analysis, mission questions, and report drafting;
• operate, secure, troubleshoot, measure, and improve the Services;
• respond to inquiries and send transactional or service communications;
• prevent fraud, misuse, unauthorized access, and threats to safety or system integrity; and
• comply with contracts, agency instructions, legal process, and applicable law.

We do not use mission content to advertise to you or build advertising profiles.

5. AI-assisted features

AlphaRelay offers on-device and cloud AI-assisted features. On-device analysis can process selected video images locally. When an authorized user or organization enables a cloud AI feature, AlphaRelay may send the minimum content needed for that request—such as a selected screenshot, structured mission events, or report context—to our contracted AI service provider. We use the returned output to generate alerts, findings, answers, or draft report content.

AI output is assistive and may be incomplete or inaccurate. Authorized personnel remain responsible for reviewing findings and reports. We do not authorize our AI providers to use agency mission content for their own advertising, and cloud AI can be disabled where required by organization policy.

6. How we disclose information

We may disclose information to:

• Your organization and authorized users, including administrators, operators, reviewers, supervisors, and people to whom the organization directs an evidence export or guest upload link.
• Infrastructure and storage providers, such as Supabase, Vercel, and Backblaze, for hosting, authentication, databases, storage, backup, and secure media delivery.
• Feature service providers, such as Cloudflare for configured live video, OpenAI for authorized cloud AI requests, Resend for email, PostHog, Google Analytics, and Vercel Analytics for usage measurement, and Sentry for error diagnostics.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse, or complete a merger, financing, acquisition, or transfer of the Services subject to appropriate protections.

We require service providers that receive personal information to protect it consistently with this policy, our contracts, and applicable law; process it only for authorized purposes; and use appropriate security and confidentiality measures.

AlphaRelay does not sell personal information and does not share it for cross-context behavioral advertising. We do not use third-party advertising networks in the Services.

7. Retention and deletion

We retain information only as long as reasonably necessary to provide the Services, follow an organization’s instructions and retention schedule, preserve authorized evidence and custody records, meet security and contractual requirements, resolve disputes, and comply with law. Because mission content may be an official record or evidence, deleting an individual account does not automatically delete mission records associated with that person.

In the hosted service, a mission moved to Trash is generally recoverable for 30 days before scheduled permanent deletion of its database and cloud-storage objects. An organization may preserve, export, or be legally required to retain a mission before that deadline. Backup, audit, security, billing, or legal records may remain for a limited additional period where necessary and permitted by law.

Pending mobile recordings and screenshots may be kept in app-private storage until upload succeeds or an authorized user removes the app data. Removing an AlphaRelay Copilot license deletes the saved license context from the device, but does not delete records already synchronized to the organization.

8. Your choices and privacy rights

Device and browser choices

• You can revoke camera, microphone, screen-recording, notification, or location permission in your device settings. Some capture, alert, or aircraft-connection features will no longer work without the related permission.
• You can remove the saved AlphaRelay Copilot license from the app’s Device controls.
• You can clear website cookies and local storage using browser controls. Because we do not sell personal information or use it for targeted advertising, we do not offer an advertising opt-out. Where legally required, we honor recognized browser privacy signals for covered processing.

Access, correction, deletion, and other rights

Depending on your location and relationship with AlphaRelay, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to limit or object to certain uses; to withdraw consent; to appeal a denied request; and to receive equal service without discrimination for exercising a privacy right. These rights may be limited by evidence-retention, public-records, security, contractual, or other legal obligations.

For an agency-managed account or mission record, contact your organization’s administrator or records/privacy contact first. For AlphaRelay-controlled information, submit a request through the contact method below. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law, subject to verification.

9. Security, storage, and international transfers

We use administrative, technical, and physical safeguards designed for the sensitivity of the information, including encrypted network transport, organization-scoped access controls, role-based permissions, audit and custody records, restricted service credentials, and integrity hashes for supported media workflows. No security measure can guarantee absolute protection.

AlphaRelay’s production services are operated primarily in the United States. If you use the Services from another country, information may be transferred to and processed in the United States under applicable contractual and legal safeguards.

10. Children’s privacy

The Services are designed for authorized professional and organizational use and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Mission content captured by an authorized agency may incidentally depict minors; the agency’s lawful authority, policies, and records obligations govern that operational content.

11. Changes to this policy

We may update this policy as the Services, vendors, or legal requirements change. We will post the updated policy here, revise the “last updated” date, and provide additional notice when required. App Store privacy disclosures are maintained separately and should reflect the data practices of the app version currently available.

12. Contact us