Privacy Policy

1Scope, and the two roles we play

This policy explains what BlueWave Technology, Inc. collects through FusionTrace, why, and what we do with it. FusionTrace is the portal at le.fusiontrace.org and the FusionTrace app. It covers two different situations, and it matters which one you are in.

• You visit FusionTrace, use it at your agency, or contact us. Here BlueWave decides what to collect and why. Sections 2 to 6 are about you.
• You are a person a business has documented a record about and chosen to share with an agency through FusionTrace. Here the business is the operator of record and decides what it shares and with which agency. Each record it releases carries the business's own case number, which FusionTrace assigns when the record is first released if the business has none. BlueWave processes that data on the business's instructions under its subscription. Section 7 is about that, and it is the section to read if you want to know what FusionTrace does and does not do with information about people.

BlueWave does not sell personal information and does not use it for advertising.

2Information we collect from visitors

Browsing. FusionTrace's pages do not use advertising cookies, analytics trackers or third-party tracking pixels. When you load a page, our hosting provider receives the ordinary technical information any web server receives: your IP address, browser type, the page requested and the time. We use it to serve the page and keep FusionTrace secure, and we do not build profiles from it.

Cookies. FusionTrace sets only the cookies it needs: one that keeps you signed in, one that remembers which phone registered for notifications, and one that holds a single sign-on check for ten minutes while your agency's login answers. The board remembers on your device whether you last chose the map or the list. None of these is used for advertising or tracking.

Contacting us. If you email us, we receive what you send, including your address, and we keep it to respond and to keep a record of the conversation.

3Information we collect when your agency adds you

FusionTrace has no public sign-up. Your agency's lead adds you, or BlueWave adds an agency's first lead when the agency joins. Certification has not opened. Access today is by invitation and governed by the agency's own agreement. Either way we receive your name, work email, agency and role as they were entered, and email you an invitation. The link is good for seven days and works once, and we keep only a fingerprint of it, never the link itself.

When you accept, you choose a passcode, which we keep only as a salted hash that cannot be turned back into the passcode. If your agency signs in through single sign-on, no passcode is kept: your agency's own login confirms your work email each time you sign in, through the sign-in service named in Section 5, and we keep that service's identifier for you so it can be erased with your account, at once or, if that service does not answer, by the daily retry.

Agency accounts. Each agency's leads manage its people. We hold the name, email and role of each person so FusionTrace can sign them in and enforce their permissions, and we log sign-in events, when each person last used FusionTrace, and changes to who may sign in.

4Information we collect while you use FusionTrace

The chain-of-custody record. Every look and every request is written down: each record or image you opened, each board load (including one that showed nothing released), each case page that showed you a record a business released, each record added to or taken out of a case, and each request you made to a business with the purpose and the authority you stated, each with the business's case number the record was released under, when it has one, and your work email. Every event about a released record (the request, the business's approval, the end of the release, and each look) is also kept as an append-only record chain, each entry sealed to the one before it, which your agency sees on the record. Your agency keeps this record in FusionTrace, and the FusionTrace Global Network, which holds what businesses share, keeps its own ledger of what it served, with the same details.

Cases. The cases your agency opens, each a folder of records released to it, with who opened them or added records to them or took records out. A case has no title and a pin has no note. FusionTrace never collects your agency's own case number: it does not ask for it, has no place to type it, and holds none. Your case number stays in your own case management system, and you copy the business's case number into it.

On your phone. For notifications, the app gives FusionTrace your phone's push token, whether it is an iPhone or an Android phone, and the app version. When the app registers for notifications, and each time it checks for an update, Expo, which runs both services, receives a random identifier for the app's installation. Face ID, a fingerprint or the phone's passcode is checked by the phone itself, and the app learns only whether the phone accepted it. The camera is used only to read the QR code on a sealed evidence package, on the phone; no image leaves it.

On Android. The QR scanner uses Google's ML Kit, which reads the code on the phone. ML Kit may send Google information about how the scanner is used and performs, with the phone's model, its system version and an identifier for the app's installation, none of which includes your name, your email or anything you enter. It never sends the camera image.

Notifications. A notification says only one of these: Request approved, with the business's case number; Request declined; or Approval ends in 7 days (6 days when a day's reminder comes late), with the business's case number when the record has one. It never carries your agency's own case number, a name, a face, a plate, a place or an image.

Please do not put passcodes, case details or images into ordinary email. Support never asks for them.

5How we use information, and how we share it

We use the information above to run FusionTrace, sign you in, keep the chain-of-custody record, send the notifications and emails this policy describes, respond to you, keep records we are required to keep, protect FusionTrace and the people who use it from misuse, and comply with law.

Within your agency. Everyone at your agency who uses FusionTrace can see your agency's chain-of-custody record, with the work email beside each entry, and your agency's leads see its People list. When you ask a business for a record, you state the purpose (the event, its date and its place) and the authority you rely on, documented as your agency's own law and policy require, and the business sees them with your agency's name, your name and your work email before it decides. It never sees your agency's case number. Once it approves, the record carries the business's own case number. A request that states only "investigation" is not sent.

We share it only with the service providers who help us do those things, each bound to use it only for that purpose and to protect it at least as this policy does:

• Cloudflare runs FusionTrace and holds its database, and serves the map library the portal's pages load
• Supabase connects an agency's own login for single sign-on, for agencies that use it
• Resend delivers FusionTrace's email: invitations, and the notices when an account is deleted
• Expo delivers notifications to the app, through Apple's and Google's notification services, and delivers app updates; a notification carries the business's case number, as Section 4 describes
• Apple and Google deliver those notifications to iPhones and Android phones
• Google ML Kit reads the QR code on Android phones and reports to Google how the scanner is used and performs, as Section 4 describes
• Google Fonts and Esri serve the portal's fonts and its map imagery, and see your IP address when your browser loads them

These providers host in data centers primarily in the United States. We will also disclose information when the law requires it, to enforce our terms, to protect the rights, property or safety of BlueWave, our customers or others, and as part of a merger, reorganization or sale of the business, in which case the successor takes on this policy.

Beyond that, we do not share personal information with anyone.

6How long we keep it

• Your account is kept until it is deleted, by you (Section 9), or by us when you or your agency ask. If your agency's lead suspends you, it is kept so they can restore you.
• The chain-of-custody record, and your agency's cases and pins are kept with no set end date, together with the record chain, because they are evidence of who looked at what and who added what to a case, under which case number. Deleting your account does not change them. Entries written before 17 October 2026 keep the case number a look was made under as written then, because the record is never edited.
• A push token is kept until you sign out on that phone, your phone stops accepting notifications, your access ends, or 30 days pass without you opening the app, and is then deleted after 30 days. Deleting your account erases every one of yours at once.
• Notification delivery receipts are deleted within 2 days, and the list of notifications already sent, which holds case numbers and no names, after 120 days.
• Invitation sending logs (an address and a time, kept to limit how many invitations go out) are deleted within 2 days.
• Server and security logs are kept for a short, rolling period.
• Email is kept for as long as the conversation is useful to either side.

Records businesses share follow Section 7: the FusionTrace Global Network holds them until the business withdraws them, and the agency portal keeps no copy.

7Data inside FusionTrace

FusionTrace is an evidence exchange. Authorized agency staff use it to receive evidence that businesses choose to share with them, to verify it, and to keep a record of every look. The business that documented an incident is the operator of record for everything it shares, and decides what it shares and with which agency, and each record it releases carries its own case number; BlueWave processes it on the business's instructions and under the business's subscription. If you believe a business shared a record about you through FusionTrace, that business is the party to contact, and we will help them respond.

Here is how FusionTrace treats information about people:

• No general population processing. The system does not analyze, enroll or index the general public and keeps no general population database. Processing happens only on a predicate: a documented incident, media an authorized user submits, or a verification an authorized user initiates. There is no continuous scanning of people entering a space.
• Similarity Results are not identifications. Where the system compares media, the output is a computational similarity that a human reviews and confirms or rejects. A comparison never links two records by itself: records are linked only when a named person at the business that ran the comparison confirms the link, and only confirmed links are shown to an agency. It does not identify anyone, confirm identity, or establish wrongdoing.
• Not a consumer reporting or screening service. BlueWave is not a consumer reporting agency under the Fair Credit Reporting Act, and customers may not use system output to decide eligibility for employment, housing, credit, insurance or any similar purpose.
• The FusionTrace Global Network is opt-in. Businesses choose to join it. Before a business approves a request, an agency sees a record only as what was observed, in the network's shared words, its time, the kind of business and its metro area, and another business in the network sees no more than that. No narrative, image, name, address or member identity crosses the network boundary until a named person at the business approves one agency's request, and then only that record, to that agency, under the business's case number. The approval takes effect only once the business's own system has recorded it. In the other direction, a request carries the agency's name, the requesting investigator's name and work email, the stated purpose and authority, and the record it asks for, and never the agency's own case number. Demonstration records are seen only by demonstration agencies.
• Release is narrow and time-limited. An approval releases one record to one agency, under the business's case number, for 90 days, counted from when the business's own system recorded the approval. The FusionTrace Global Network holds what a business shared (its narrative, images and place) until the business withdraws it; the agency portal keeps no copy: each look reads it from the network and is written to the chain-of-custody record. Images are served only inside such a release, never to another business. A withdrawal never removes or changes a record already released to an agency: that agency reads it, unchanged, for its full release term. A business can withdraw what it shared at any time, and a withdrawn record is no longer shown.
• Sealed evidence. Records are packaged into integrity-protected, signed evidence packages held under the customer's own account. The FusionTrace app's scanner reads the code on a package's cover sheet and opens its verification page, so the recipient the customer chose, and the prosecutor, defense and court the case brings in, can check it has not changed. BlueWave does not initiate contact with law enforcement on a customer's behalf and does not transmit records to any authority absent the customer's action or valid legal process.
• Everything is logged. Every look, request, decision, sign-in, change to who may sign in and account deletion is logged and non-editable.

Customers are responsible for the notices, signage and consents their own operations require, and for the laws that apply to their environment. As of the effective date, FusionTrace functions involving identity artifacts or face-based similarity are not offered for service sites in Illinois or Washington.

8Security

We maintain commercially reasonable administrative, technical and physical safeguards appropriate to FusionTrace. Traffic to the portal and the app is encrypted in transit, access to production systems is limited to authorized BlueWave staff, and the highest administrative role in FusionTrace, the one that creates agencies, is reserved to BlueWave and is never granted to an agency. No system is immune from every security event; if one affects your information we will tell you as the law requires.

9Your choices and rights

You may ask us what personal information we hold about you, ask us to correct it, ask us to delete it, or object to a use of it, by writing to the address below. We will verify that you are who you say you are and respond within the time the law allows, and we will not treat you differently for asking. Depending on where you live you may have additional rights under state privacy law, and you may have the right to complain to a regulator.

If your request concerns a record a business shared through FusionTrace, we will forward it to that business, who is the party able to act on it, and help them do so.

Withdrawing what you allowed. Notifications and the camera are each your choice, and so is Face ID on an iPhone. Turn any of them off in your phone's settings at any time, and the rest of FusionTrace keeps working. Signing out on a phone stops its notifications.

Deleting your account

You can delete your account yourself at any time, in the FusionTrace app or at le.fusiontrace.org: open Account (the button with your initials on a phone, or your name at the top of the page on a computer), choose Delete my account, and confirm. Nothing waits on a person or an email exchange. When you confirm, at once:

• You can no longer sign in, with a passcode or through single sign-on.
• You are signed out everywhere, on every browser and phone.
• Every phone you registered is removed, with its push token.
• Your passcode, and any single sign-on link to your agency's login, are erased.
• Your profile is removed from your agency's People list.
• Your agency's leads are told that your account was deleted.
• You see the time it happened, and a confirmation is emailed to your work email.

One thing stays: the chain-of-custody record and the record chain (who looked at what, and who opened a case or added a record to one, under which case number) keep your name and work email as they were written at the time, because that record is evidence.

If you cannot sign in, write to standard@fusiontrace.io from your work email and we will delete it the same way.

10Children

FusionTrace is for organizations and the adults who work for them, and is not for anyone under 18. We do not knowingly collect information from anyone under 18, and if we learn we have, we will delete it.

11Where we operate

BlueWave is a United States company and processes information in the United States. If you use FusionTrace from elsewhere, you understand your information will be handled here, where the law may differ from your own.

12Changes to this policy

When we change this policy we will update the effective date at the top. If a change materially affects how we handle information we already hold about you, we will tell you before it takes effect. Prior versions are available on request.

Questions

Write to standard@fusiontrace.io. Put the name of this document in the subject line and we will route it to the right person.