Invincible Cat is committed to protecting the privacy and security of our users. This Privacy Policy describes how we collect, use, and share information when you use our mobile application, which is designed exclusively for verified Law Enforcement Agencies (LEA).

1. Information We Collect

To ensure the integrity of our investigative platform, we collect the following:

• Account Information: Official email address and secure password for authentication.
• Verification Data: A digital copy/image of your Official Police Identity Card used solely for verification.
• Location Data: Precise location to provide geotagged investigative leads and ensure jurisdiction compliance.

2. How We Use Information

• Verification: To verify user eligibility and prevent unauthorized access.
• Operations: To facilitate investigative searches via legal API providers.
• Audit Integrity: To maintain a secure audit trail of official inquiries.

We reserve the right to provide logs to Department Heads or Authorized Officers upon formal request for internal disciplinary or investigative purposes.

3. Data Processing & Third Parties

• Data Residency: All investigative logs and user data are stored on secure servers located within the sovereign territory of India to ensure compliance with local data residency requirements
• OSINT & Legal APIs: Invincible Cat acts as a data processor, retrieving information from Legal API Providers and publicly available open-source intelligence.
• Limited Disclosure: Identifiers (e.g., phone numbers) are transmitted to legal API partners to fulfill queries. We do not share user PII (Police ID or location) with these third-party providers.
• No Commercial Sharing: Invincible Cat does not sell, rent, or trade user data or investigative leads to any third-party marketing or commercial entities.

4. Data Security & Retention

• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest (AES-256)
• Retention: Police ID images are retained only during the verification period. User activity logs and location data are purged after 90 days, unless required by law or for ongoing judicial/departmental inquiries.
• Withdrawal of Consent: Users may withdraw consent at any time. However, due to the sensitive nature of law enforcement work, certain account metadata and audit logs will be retained for the mandatory legal period (90 days) to ensure accountability and prevent the destruction of evidence.

5. Compliance & Grievance Redressal

This policy complies with the Indian IT Act (2000) and the Digital Personal Data Protection (DPDP) Act (2023).

• Breach Notification: In the event of a personal data breach, we will notify the Data Protection Board of India and affected users without undue delay, as prescribed under the DPDP Act and Rules.
• Grievance Officer: For any grievances or data requests, contact our Grievance Officer at contact@invinciblescat.com