InmateLink trust center

Privacy Policy

This Policy explains how InmateLink LLC handles personal information across our public directories, accounts, private workspaces, provider tools, communications, support, and related services.

Effective and last updated: August 25, 2026.

This Policy also serves as our Nevada online privacy notice and general U.S. notice at collection. State-specific rights apply where the law provides them.

Open privacy choices Open legal center

1. Scope and controller

InmateLink LLC is responsible for the personal information covered by this Policy. This Policy does not control a third-party provider, court, facility, agency, map, website, payment processor, identity provider, or other service you choose to use. Their policies apply to their handling of information.

2. Information we collect

Account and identity information, such as name, email address, phone number, account identifiers, authentication status, profile photo, language, and general location preferences.
Private workspace and user content you choose to enter into an enabled feature, such as trusted contacts, plans, notes, case-organizing metadata, saved resources, invitations, and permissions. The exact fields depend on the feature currently available to you.
Provider and business information, such as organization identity, public contact details, services, service areas, office locations, licenses or credentials submitted for review, verification links, claim requests, profile drafts, billing status, advertising market requests, submitted creative and destination links, and review history.
Support, correction, privacy, review, and communication information, including the content of requests and our responses.
If paid services are activated, transaction information such as purchase, subscription, entitlement, invoice, and payment-status records. A payment processor would collect payment-card or bank details directly; InmateLink would not need to receive full card data to confirm a transaction.
Device and usage information, such as IP address, browser and device type, operating system, pages and features used, timestamps, referring pages, coarse location derived from IP, security events, and limited event analytics. For direct advertising measurement, this may include the campaign, public market placement, day, event type, and a rotating pseudonymous value used to limit duplicate impression or click counts.
Public directory and source information about organizations, providers, facilities, courts, and agencies, including information from official records, first-party sites, public sources, correction requests, and provider submissions.
Cookies, local storage, and session storage used for authentication, security, draft continuity, saved preferences, location settings, and pending actions as described in our Cookie Notice.

3. Sources of information

Directly from you when you create an account, enter content, contact support, submit a correction, claim or update a listing, submit an advertisement, communicate, or purchase a service.
From your device and browser when you use the Service, including limited first-party events when a direct contextual ad is displayed or its outbound link is selected.
From a person who invites you or adds information about you, subject to that person's responsibility to have permission and use the information lawfully.
From public, official, regulator, court, facility, provider, government, and first-party business sources used to build and verify directories.
From identity, hosting, database, communications, security, and other service providers acting for us, and from payment or analytics providers if those services are activated.

4. Why we use information

Provide, authenticate, personalize, maintain, and support the Service; preserve drafts and preferences; and perform actions you request.
Create and manage accounts, private workspaces, trusted-contact invitations, saved entities, provider organizations, listing claims, and profile reviews, plus messaging or purchases if those services are activated.
Research, verify, correct, source, deduplicate, and maintain directory information and prevent unsupported public claims.
Communicate about accounts, security, service changes, support, corrections, reviews, transactions, and, where permitted, products or provider opportunities.
Protect users, investigate misuse, enforce policies, detect fraud and security incidents, maintain audit records, comply with law, and establish or defend legal claims.
Review, deliver, secure, and report on direct contextual advertising orders and exclude duplicate, invalid, automated, or suspicious activity where practical.
Measure and improve performance, accessibility, reliability, and user experience using data minimized for the task.

5. How we disclose information

Service providers that host, authenticate, store, secure, communicate, or support the Service, plus analytics, creative-storage, or payment providers if those services are activated, subject to restrictions appropriate to their role.
Advertisers may receive aggregate or campaign-level impression and outbound-click counts. We do not provide them a person's identity, private workspace content, case or custody information, or a user-level activity profile through the founding direct-advertising program.
People and organizations you direct us to contact or share with, including invited trusted contacts, message participants, providers, and support recipients.
The public, when you submit or approve public content or when organization and provider directory information is published. Private workspace content is not public by default.
Authorities, courts, regulators, advisors, and other parties when reasonably necessary to comply with law, protect rights or safety, investigate misuse, or respond to valid legal process.
A buyer, successor, lender, investor, or advisor in connection with a merger, financing, reorganization, bankruptcy, sale, or diligence process, subject to appropriate confidentiality and legal requirements.

6. Sales, sharing, and targeted advertising

InmateLink does not sell personal information for money. We do not use or disclose private workspace, message, case, custody, crisis, treatment, medication, recovery, or consumer health data for cross-context behavioral advertising.

Our founding direct-advertising program is contextual. A clearly labeled ad may be selected from the approved public state or city and directory category, not from a person's private activity or profile. Advertisers receive limited campaign reporting, not user-level profiles. Third-party behavioral ad cookies and advertiser pixels are not part of this program.

If we later introduce advertising technology that constitutes a “sale,” “sharing,” or targeted advertising under applicable law, we will update this Policy, provide required notice and controls, and honor applicable opt-out preference signals before using it.

7. Consumer health data

Information about treatment, medication, mental health, recovery, disability, or health-related needs may receive additional protection. See our Consumer Health Data Privacy Policy. We do not represent that InmateLink is a HIPAA-covered entity or that all information entered into InmateLink is governed by HIPAA.

8. Cookies, analytics, and browser storage

We use essential authentication and security cookies and browser storage for requested features, drafts, pending saves, language, location, workspace preferences, and limited same-session advertising measurement. We may use privacy-limited analytics to understand page and feature performance. We do not permit advertising or analytics event fields to include message text, private plans, passwords, case content, custody data, treatment or recovery information, consumer health content, or payment credentials. See our Cookie Notice.

9. Data retention

We retain personal information only as long as reasonably necessary for the purposes described here, including to provide an account or feature, complete a review or transaction, maintain source and correction history, protect security, resolve disputes, and meet legal obligations.
Retention varies by record. Account and private workspace records generally remain while the account or feature is active and for a limited period afterward; security, payment, consent, advertising-order, creative-review, and legal records may be kept longer where needed. Advertising event details are retained only as long as reasonably needed for deduplication, security, reporting, and disputes, and may then be aggregated or deleted.
Browser-only drafts or preferences remain until they expire, are cleared by the feature or browser, or you clear browser data. Backups may remain for a limited recovery cycle before deletion or overwrite.
We may deidentify or aggregate information so it can no longer reasonably identify you and retain that form for lawful purposes.

10. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, authentication, encrypted network transport, database controls, logging, and feature-specific protections where implemented.

No system, transmission, or storage method is completely secure. Do not place passwords, recovery codes, private keys, full payment credentials, full account numbers, government identifiers, or unnecessary private documents in ordinary notes or fields. Use only a feature specifically marked for that kind of data and review its current security description before relying on it. Contact us immediately if you suspect unauthorized account access.

11. Your choices and rights

You may access or update certain information through account or provider settings and may use our Privacy Choices page to request access, correction, deletion, portability, or an applicable opt-out.
You may unsubscribe from marketing email using its link and may reply STOP to an enabled marketing text program. Account, security, transaction, and service messages may still be sent where needed.
Applicable state law may provide additional rights, including rights to know, access, delete, correct, obtain a copy, opt out of certain sales, sharing, profiling, or targeted advertising, limit certain sensitive-data use, appeal a denial, and receive equal service.
We may verify your identity and authority before acting. We may deny or limit a request where law permits, including to protect another person's privacy, security, fraud prevention, legal claims, or recordkeeping duties.

12. Nevada and California notices

Nevada consumers may request to review and correct covered information and may submit an applicable request not to make a covered sale through the Privacy Choices page or support@inmatelink.com. We will respond as required by Nevada law.
If InmateLink becomes subject to the California Consumer Privacy Act for a relevant activity, California residents may exercise the applicable rights described above. We will honor a legally required Global Privacy Control signal for covered browser activity.
We do not knowingly sell or share personal information of consumers under 16.

13. Children

Public information is intended for a general audience, but account, private workspace, and provider features are for adults age 18 or older. The Service is not directed to children under 13, and we do not knowingly collect personal information directly from a child under 13. If you believe a child provided information, contact us so we can investigate and delete it as required.

14. U.S. processing and third-party links

InmateLink is operated in the United States. Information may be processed in the United States and other places where our service providers operate, subject to applicable safeguards.
Links to official sources, providers, maps, payment services, and other websites take you outside InmateLink. Their privacy practices control there.

15. Changes to this Policy

We may update this Policy as the Service or law changes. We will post the new effective date and provide additional notice when required. We will not use previously collected information for a materially different purpose without the notice or consent required by law.

16. Contact

For privacy questions or requests, use the Privacy Choices page, email support@inmatelink.com, or use our support page. Identify the request and the state where you live. InmateLink LLC will verify and respond as applicable.

This Policy explains how InmateLink LLC handles personal information across our public directories, accounts, private workspaces, provider tools, communications, support, and related services.

Effective and last updated: August 25, 2026.

This Policy also serves as our Nevada online privacy notice and general U.S. notice at collection. State-specific rights apply where the law provides them.