Operator: Evidence Web
Platform: Evidence Web App
Contact: support@evidenceweb.app
This Privacy Policy applies to visitors to our websites, users who create accounts and use the Service, and people whose personal information may appear inside Case Data.
Depending on the context, Evidence Web may act as the Responsible Party for platform account and billing data, and or as an Operator when processing Case Data on behalf of a Business Customer. Where you are a Business Customer uploading Case Data, you are typically the Responsible Party for that Case Data.
Account and contact details may include name, surname, email address, mobile or contact number, company or organisation name if applicable, user role and permissions.
Billing and transaction details may include plan, invoices, payment status, and payment reference identifiers from processors. We do not store full card details.
Case Data may include files, images, video, audio, documents, notes, descriptions, tags, metadata, and email to case messages and attachments if enabled.
Technical and usage data may include internet protocol address, device and browser data, login timestamps, audit logs, and security logs, and cookies and similar technologies.
Account and billing data is retained as required for business and legal purposes, such as tax and audit, typically for seven years or longer if required by law.
Case Data is retained according to your plan and case or account level instructions, plus limited backup retention. Evidence items are generally append only and cannot be deleted by users.
Corrections. Where an item was uploaded in error, we support withdrawal, superseding, or annotation where available rather than deletion.
Legal compliance removals. If we must remove content for legal reasons, we may retain a tombstone audit record without retaining the removed content, where technically feasible and legally permitted.
Logs are retained for security and troubleshooting for six months.
We use reasonable technical and organisational measures which may include encryption in transit, access controls, audit logging, monitoring, backups, and abuse prevention. Two factor authentication is supported and recommended.
You may have the right to request access, correction, restriction, or deletion of your personal information where applicable. However, where deletion requests relate to append only Case Data and deletion would undermine lawful retention, integrity, or audit requirements, we may instead, as permitted by law, restrict access, de identify, or attach a correction or withdrawal record to preserve the audit trail. If the request concerns Case Data controlled by a Business Customer, we may redirect you to that customer.