Privacy Policy for Mentalix, Inc.
At Mentalix, Inc one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Mentalix and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.
This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they share and/or collect in Mentalix.com. This policy is not applicable to any information collected offline or via channels other than this website.
Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms.
Information we collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
When you register for an account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.
How we use your information
We use the information we collect in various ways, including to:
- Provide, operate, and maintain our website
- Improve, personalize, and expand our website
- Understand and analyze how you use our website
- Develop new products, services, features, and functionality
- Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
- Send you emails
- Find and prevent fraud
Mobile Applications
This section applies to the mobile applications published by Mentalix, Inc.,
including Fed Submit Mobile. These applications are supplied to law
enforcement and government agencies. Where this section conflicts with the sections
above, which describe the mentalix.com website, this section governs the applications.
Account information
The application requires an account. You may create one with an email address and a
password, or sign in with a Google account. When you register, we collect and store:
- Your email address
- Your password, held only as a stored credential by our authentication provider — we never see or store it in readable form
- A unique user identifier assigned to your account
- Whether your email address has been verified
Access to the application additionally requires authorization by the agency you work
with. We store an authorization record indicating whether your account has been enabled
by that agency. The agency name you enter is used to locate that record.
Where two-factor authentication is enabled, we store the mobile telephone number used to
deliver verification codes.
Biometric and transaction data
The application captures fingerprint images and, in some configurations, photographs, for
the purpose of identity verification and enrollment on behalf of the agency operating it.
Mentalix does not store fingerprint images, photographs, or other biometric data
on its servers. Biometric data captured during a transaction is transmitted to
the system operated by the submitting agency and, where applicable, onward to federal or
state identification repositories. Records held by those systems are controlled by the
agency and by the receiving repository, not by Mentalix, and are governed by their own
retention rules and by applicable criminal justice information policy.
Device permissions
The application requests the following device permissions:
- Camera — to capture fingerprint images and photographs
- Storage — to hold captured images temporarily on the device while a transaction is prepared and transmitted
- Network and network state — to transmit transactions and verify connectivity
- Device biometric unlock — where the device is configured to protect access to the application
Usage analytics
The application reports aggregate operational analytics so that we can measure reliability
and performance. This telemetry is deliberately constructed so that it cannot identify a
subject, an officer, an agency, or a transaction.
We collect:
- Counts and timings, such as the number of fingers captured, whether a photograph was included, how long a capture or search took, and whether the operation succeeded, failed, timed out, or was cancelled
- The capture method used, and whether a result came from a state or federal source
- Non-identifying properties describing the application mode and the class of device in use
We do not collect, through analytics:
- Transaction control numbers, case numbers, or any other transaction identifier
- Your user identifier, email address, or name
- Agency names or originating agency identifiers
- Subject demographics, dates of birth, social security numbers, or FBI numbers
- Fingerprint data or photographs
- Identification search verdicts or results
- Free text of any kind
Our analytics provider automatically records technical information independent of the
above, including device model, operating system version, and an approximate,
city-level location derived from your network address.
The application contains no advertising, does not use an advertising identifier,
and we do not sell personal information or share it for advertising purposes.
Service providers
We use Google Firebase for authentication, database storage, and analytics. Data described
in this section is processed on Google infrastructure on our behalf. See the
Firebase Privacy and
Security documentation for details.
Retention
- Account information is retained for as long as your account remains active, and is deleted on request
- Security and access logs are retained for 90 days
- Business and billing records are retained as required by law
Deleting your account and data
You may request deletion of your account and associated data at any time, without
installing the application or signing in. See
Account and Data Deletion
Request for instructions and for details of what is deleted and what is retained.
Children
These applications are intended for use by authorized adult personnel of government and
law enforcement agencies. They are not directed to children and we do not knowingly
collect personal information from children through them.
Log Files
Mentalix.com follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information. Our Privacy Policy was created with the help of the Privacy Policy Generator and the Privacy Policy Template.
Advertising Partners Privacy Policies (Website Only)
This section applies to the mentalix.com website only. Our mobile applications contain no advertising and do not use advertising identifiers.
You may consult this list to find the Privacy Policy for each of the advertising partners of Mentalix.com.
Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on Mentalix.com, which are sent directly to users’ browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.
Note that Mentalix.com has no access to or control over these cookies that are used by third-party advertisers.
Third Party Privacy Policies
Mentalix’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options. You may find a complete list of these Privacy Policies and their links here: Privacy Policy Links.
You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.
CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, among other rights, California consumers have the right to:
Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
Request that a business delete any personal data about the consumer that a business has collected.
Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
GDPR Data Protection Rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
Children’s Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Mentalix.com does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
