How we handle your information.

Website and inquiry information

When you submit the walkthrough-request form, the information you provide is stored in Blackwatch Investigations LLC’s private inquiry inbox so authorized coordinators can respond about Black Watch Compliance, evaluate product fit, and arrange follow-up conversations. The form does not create a customer account or add you to a general marketing list.

Account and workspace information

When you create an account, we process your organization name, organization type, industry, primary contact name, work email, account-security information, and a unique workspace identifier. Your password is handled by our authentication provider and is not visible to Black Watch in readable form.

Authentication and database provider

Supabase provides account authentication and database services for the application. Email verification, password recovery, sessions, multi-factor authentication, and logically separated organization records are processed through that service under its applicable terms and safeguards.

Uploaded-file safety checks

Files submitted through authenticated document, field evidence, and client portal tools are stored in private Supabase storage and held in quarantine. The file content and original filename are sent to Cloudmersive so it can check for malware, disguised formats, scripts, macros, unsafe archives, and related content risks. A file cannot be opened, reviewed, linked, or released unless those checks pass.

Cloudmersive states that its stateless APIs do not store or retain payload data after the transaction completes. Black Watch retains the original file, safety status, and audit receipt under the workspace's retention and security controls. Safety clearance does not establish authenticity, forensic integrity, or legal admissibility. See Cloudmersive security information.

Inquiry storage and receipts

Supabase stores inquiry records in the Black Watch application; OpenAI Sites hosts this website. A receipt confirms storage, not a response, acceptance, or email/SMS delivery. Intake alerts are not enabled. Inquiry records are retained for follow-up and business history; declining or closing a request does not delete it. Contact us about correction or deletion. Application abuse controls retain a daily keyed address hash; hosting providers may process routine connection information.

Workspace records and authorized recipients

Depending on the features your organization uses, we process personnel and credential profiles, work assignments, schedules, time and leave records, requirements, reminders, recruiting and onboarding information, documents, evidence, case and field reports, agreement signatures, invoices and audit history. Your organization manages access and decides which records to share with employees, clients, applicants or other authorized recipients. Ask your organization’s administrator about its use of your records.

Use the appropriate protected workspace feature for records you are authorized to provide. Do not send passwords, Social Security numbers, payment-card details or unnecessary sensitive personal information through the public inquiry form or routine support email.

AI requests, documents and voice

When you use AI features, your request, selected files or extracted document content, relevant authorized workspace context, conversation history and preferences may be sent to OpenAI to produce an answer, summary, image, transcription or spoken response. Black Watch stores conversation and workflow records, saved outputs, usage receipts and preferences to support continuity and account controls. A file or record selected for AI processing may contain personal information; include only information needed for the task.

Microphone features process audio when you enable them. Where our phone assistant is enabled, Twilio handles calls and speech processing, and OpenAI processes conversation content for responses and summaries. Call metadata, callback contact details and summary or delivery records may be retained and provided to the authorized person handling the callback. The phone assistant is not an emergency service. Provider processing and retention are subject to the applicable provider service terms and account configuration.

Billing and client payments

Stripe processes subscriptions, checkout, payment methods, connected payment accounts, invoices, refunds and disputes. We retain identifiers, billing contact information, amounts, subscription or payment status, and reconciliation or audit records needed to operate billing. Payment-card entry is handled by Stripe; do not send card details to Black Watch by email or through workspace notes.

Email and delivery information

Resend processes application email such as invitations, reminders, agreement notices and callback summaries. We and our communications providers process recipient addresses, message content, provider identifiers, timestamps and delivery, bounce or complaint information to operate and support these messages. Authentication email is handled through the configured authentication service. Administrators and authorized support staff can review delivery status.

Routine technical data

Our hosting and communications providers may process routine technical information needed to deliver and secure the website and messages, such as IP address, browser information, timestamps, and security logs, under their own applicable terms.

Use and sharing

We use inquiry and account information to provide secure access, operate the workspace, answer questions, evaluate product fit, support the service, and improve the product. We do not sell it. We may disclose information when required by law or to service providers that support these functions.

Text-message information

If you choose to enroll in text notifications, we process your mobile number, the organization connected to your workspace, consent and withdrawal records, delivery and error status, and incoming preference keywords such as STOP, START, and HELP. Black Watch, Twilio, and participating mobile carriers process this information only as needed to deliver, secure, monitor, and administer account and compliance reminders. Enrollment does not add you to marketing messages.

We do not sell or share mobile numbers, text-message opt-in data, or consent with third parties or affiliates for marketing or promotional purposes. We may provide this information only to service providers and carriers needed to operate the messaging program, to the organization identified during enrollment, or when required by law.

Retention, correction and deletion

Contact us to request correction or deletion of account information. For employer-managed records, start with your organization’s administrator. Retention depends on the record type, workspace settings, service operation and applicable obligations. Closing a request, canceling billing or removing account access does not by itself delete records. Security and policy-acceptance evidence, agreements, financial and audit history may need to be retained for legal, security or dispute-resolution purposes. Ask us about the retention and deletion options that apply to your workspace, including retained copies and provider-held information.

Contact

Call (888) 604-5012 for help.

Questions about this notice may be sent to contact@blackwatchinvestigations.com.