Privacy Policy

1.1 Information You Provide to Us

When you use our website forms or communicate with us directly, we may collect the following:

(i) Contact information: on our case request form, your full name, email address, phone number (if you choose to provide it), and the best way to reach you (email or phone); on our Contact Us form, your name and the email address, phone number, or other reply details you give us.

(ii) Case request details: the type of event you experienced, the date and approximate time, a general location (city, area, or landmark), the number of witnesses, whether the event is ongoing, and your written description of what happened.

(iii) Evidence indicators: the types of evidence you have available (such as photos, video, audio recordings, physical traces, or documents). We do not accept file uploads through our website forms. If we open a case, we will request original files separately to preserve their integrity.

(iv) General inquiries: the message topic, subject line, and message content you submit through our Contact Us form.

(v) Acknowledgements and choices: your responses to the certifications and acknowledgements on our forms (the private investigation certification, the confirmation that you are at least 18, the permanent-record acknowledgement and, on the case request form, the acknowledgement about how we report findings), your answer to the optional request to keep your name and identifying details out of anything AIRRAD publishes, the exact wording and version number of each, and the time of your agreement.

1.2 Submission Metadata

Each form submission automatically records the following alongside the information you provide:

(i) A unique reference number assigned to your submission.

(ii) The date and time the submission was received.

(iii) Your IP address at the time of submission.

(iv) Your browser's user-agent string (a technical identifier that describes your browser and operating system).

This metadata is stored as part of your submission record and is subject to the same retention and redaction rules described in Section 5.

1.3 Information Collected During Investigations

If AIRRAD opens a case based on your request, we may collect additional information during the course of the investigation, including:

(i) Audio recordings, video recordings, photographs, and environmental measurements captured at the investigation site.

(ii) Detailed observations recorded by AIRRAD investigators.

(iii) Statements, accounts, and descriptions provided by clients, witnesses, property owners, or other participants.

(iv) Property and location details relevant to the investigation.

(v) Communications between you and AIRRAD regarding your case.

1.4 Information Collected Automatically

When you visit airrad.org, certain technical information may be collected automatically:

(i) Cloudflare security data. All traffic to our website passes through Cloudflare, which provides security and content delivery services. Cloudflare may collect your IP address, browser type, and related technical data to protect our site from threats. Cloudflare also operates the spam verification check on our forms, which sends your IP address to Cloudflare for processing. Cloudflare's use of this data is governed by Cloudflare's privacy policy, available at cloudflare.com/privacypolicy.

(ii) Web server logs. Our web server records pages requested, referring URLs, browser type, and the date and time of each request. Because all traffic passes through Cloudflare before reaching our server, these logs generally do not contain your public IP address. Web server logs are retained for 14 days and then deleted.

(iii) System logs. A separate system log records security events. Your IP address is recorded in this log only if a form submission you attempt is blocked as spam or rate-limited. System logs are retained for 90 days and then deleted.

(iv) Rate-limiting data. When you submit a form, your IP address is temporarily stored in a short-lived table used solely for rate limiting. Entries are deleted automatically once they are more than 24 hours old, the next time a form is submitted after that.

(v) Cookies. Our website sets a security cookie on pages that contain forms, used to protect against spam and abuse. A separate login cookie is set for authorized staff accessing internal systems. We do not use cookies for advertising, analytics, or behavioral tracking.

We use the information we collect for the following purposes:

(i) To evaluate case requests and determine whether we can open an investigation.

(ii) To conduct investigations, document findings, and generate reports.

(iii) To respond to your inquiries and communicate with you about your case or your question.

(iv) To maintain accurate and complete records of our investigations and case files.

(v) To improve our investigative methods, research capabilities, and services.

(vi) To protect the security and integrity of our website, internal systems, and data, including spam prevention and rate limiting.

(vii) To comply with applicable laws and legal obligations.

AIRRAD does not publish case data, investigation findings, or client information on this website.

AIRRAD generates investigation reports at three levels:

(i) Internal Investigator Report. A detailed report used solely by AIRRAD personnel. This report is never shared outside AIRRAD.

(ii) Client Report. A report shared with the client who requested the investigation, containing findings relevant to your case.

(iii) Public Case Study. An anonymized and redacted report that may be made available for educational or research purposes through channels outside this website. AIRRAD does not publish case studies on airrad.org.

In addition to the three report levels described above, AIRRAD may prepare information for disclosure to government agencies, courts, or regulators when required or authorized by law, consistent with Section 4(iii) of this policy.

All identifying details, including your name, address, and any information that could identify you or your property, are removed from public case studies by default. We do not publish identifying details without your express consent. If you indicate on our case forms that your name and identifying details should be kept out of anything published, we honor that preference without exception.

AIRRAD does not sell, rent, or trade your personal information to any third party, for any reason.

We may share your information only in the following limited circumstances:

(i) Service providers. Our website is hosted on AIRRAD's own server. We use the following third-party services in connection with the website: Cloudflare provides security, content delivery, and spam verification for all website traffic; Proton Mail delivers form submission notification emails to AIRRAD personnel, and those emails contain the full contents of the submission. These providers receive only the information necessary to perform their services and are bound by their own privacy policies.

(ii) Client reports. If you are the requesting client, your case report is shared with you. Investigation findings are not shared with other clients or unrelated third parties without your consent.

(iii) Legal requirements. We may disclose your information if required by a valid law, court order, subpoena, or lawful government request, or if disclosure is reasonably necessary to protect the rights, safety, or property of AIRRAD, our personnel, or others.

(iv) With your consent. We may share your information in circumstances not described above only if you provide specific, informed consent to that sharing.

AIRRAD treats every piece of data entrusted to us with the highest level of care. Our approach to data retention is built on the following principles.

5.1 Submissions Are Kept as Permanent Records

Every submission made through our website, whether a case request or a general inquiry, is stored as a permanent record. AIRRAD staff cannot change or delete a submission. AIRRAD's Owner may, in exceptional cases, correct a submission, change its recorded date, or delete it. Every such change is permanently logged, recording who made it, when, why, and what changed, so the log shows that a deleted submission existed and was deleted. When you submit a case request, you acknowledge that your submission is kept as a permanent record. This permanence exists to protect the integrity of the investigative record, ensure that findings and communications can be independently verified, and preserve the evidentiary chain for every case. General inquiries are retained under the same standard because our systems do not distinguish between submission types for storage purposes, and because general inquiries may relate to a future case or operational matter.

5.2 Read-Only Access

AIRRAD staff can view website submissions but cannot edit, modify, backdate, or delete them. The only exceptions are redaction (Section 5.3) and the Owner's changes described in Section 5.1. Every staff view of a submission, including each view of a list of submissions, is logged.

5.3 Redaction

Staff may also perform an irreversible administrative redaction. Redaction is normally performed once. AIRRAD's Owner may later redact further details from the same submission, but a redaction is never undone. Redaction is available only to an AIRRAD administrator, requires a stated reason, and is permanently logged, recording who performed it, when, why, and which fields were affected.

For case request submissions, the following fields are replaced with "[redacted]" when a redaction is performed: the submitter's name, contact details (email and phone number), location, description, and the browser user-agent string. The submitter's IP address is permanently deleted rather than replaced. The following fields are retained after redaction: the submission's reference number, the date and time it was received, the event date and approximate time, the preferred contact method, the witness count, whether the event is ongoing, evidence types selected, the certification wording and version number agreed to, the event type, and all checkbox answers.

For Contact Us submissions, the following fields are replaced with "[redacted]": the submitter's name, reply contact details, subject line, and message content, and the browser user-agent string. The submitter's IP address is permanently deleted. The following fields are retained after redaction: the submission's reference number, the date and time it was received, the message topic, the certification wording and version number agreed to, and the answers to the age confirmation and the permanent-record acknowledgement.

If any correction notes (described in Section 8(iv)) are attached to a submission at the time of redaction, the text of each correction note is redacted. The record of who added the note and when it was added is retained.

Redaction is a privacy safeguard. It removes identifying details from the active record, but the record itself, including the fact that it existed and was redacted, remains in our system. If AIRRAD's Owner later deletes a redacted submission under Section 5.1, the log still shows that it existed, was redacted, and was deleted.

5.4 Notification Emails and Backups

When a form is submitted, a notification email containing the full submission (including the submitter's IP address) is delivered to AIRRAD personnel via Proton Mail. When a redaction is performed, the corresponding notification email is manually deleted from the mailbox as part of the redaction process.

Our database is backed up nightly, and the 14 most recent backup copies are retained (approximately two weeks). The server is also backed up separately. If a submission is redacted, the original unredacted details may persist in backup copies and in any notification emails not yet deleted until those copies age out of the retention cycle or the emails are removed. Backups are stored securely and are accessible only for system recovery purposes.

5.5 Requests to Remove Your Information

If you contact us asking to remove your personal information from a submission, we will explain the options available to you. AIRRAD does not delete submissions on request. We can perform an irreversible redaction of your identifying details from the submission record, as described in Section 5.3, along with deletion of the corresponding notification email. Identifying details in any public-facing materials, such as public case studies, can be removed or further redacted at any time upon your request.

We take the protection of your data seriously and have implemented the following measures:

(i) Our website is hosted on AIRRAD's own server, giving us direct control over the infrastructure, configuration, and access to the systems that store your data.

(ii) Access to submission data and internal systems is restricted to authorized AIRRAD personnel through strict authentication procedures.

(iii) Our internal case management platform is not accessible to the public and is actively monitored and defended against cyber threats.

(iv) All public website traffic passes through Cloudflare security services.

(v) We maintain cyber liability insurance, general liability insurance, and professional liability and errors and omissions insurance.

(vi) We conduct regular reviews of our security practices and make improvements as threats evolve.

No method of electronic storage or transmission is completely secure. While we protect your information using commercially reasonable and, where appropriate, advanced technical measures, we cannot guarantee absolute security.

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 through our website. If you believe a child under 13 has submitted information to us through our forms, please contact us immediately using the information in Section 11, and we will take prompt steps to redact that information.

AIRRAD does not carry out any investigation activity at a location while a minor (a person under 18) is on the premises. If a minor arrives, the activity stops until the minor leaves. AIRRAD does not interview minors or take statements from them. A minor's account is received only as relayed by a parent or legal guardian who has signed AIRRAD's Parent or Guardian Consent, and it is recorded as relayed by that parent or guardian. If a minor contacts us on their own, we record what we received, do not follow up with the minor, and keep it sealed for AIRRAD's internal use only. If a minor is recorded or photographed by accident during an investigation, the material is sealed for internal use only and is not used or shared. Information that identifies a minor is never included in anything AIRRAD shares outside its team, except where the law requires it.

Regardless of where you are located, you have the following rights with respect to your personal information:

(i) Access. You may request to know what personal information we hold about you.

(ii) Portability. You may request a copy of your personal information in a commonly used, portable format.

(iii) Redaction. You may request redaction of your identifying details from a submission record, as described in Sections 5.3 and 5.5. AIRRAD addresses removal requests by redaction, not deletion.

(iv) Correction. If personal information we hold about you is inaccurate, you may request that we note the correction in your file. Corrections are recorded as a separate notation attached to the original record rather than as an edit to the record itself. If the submission is later redacted, the text of any correction notes is also redacted; the record of who added the note and when is retained.

(v) Opt-out. You may opt out of any sale or sharing of your personal data for targeted advertising. We do not currently sell or share personal data for any such purpose.

To exercise any of these rights, contact us using the information in Section 11. We will respond to verified requests within 45 days. If we need additional time, we will notify you of the reason and the expected timeframe.

We will not discriminate against you for exercising any of these rights.

Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policy of any external site you visit through a link on airrad.org.

We may update this Privacy Policy from time to time. When we make changes, we will revise the effective date at the top of this page. If we make material changes to how we handle your personal information, we will provide prominent notice on our website. Your continued use of our website or services after any update takes effect constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how your information is handled, contact us at:

AIRRAD, LLC
Salt Lake County, Utah
[email protected]
(385) 240-1124

This Privacy Policy is governed by the laws of the State of Utah. Any dispute arising under or relating to this policy will be resolved in the state or federal courts located in Utah.