Privacy Policy — Cefa Tribal Affairs

Plain-Language Summary

We never sell your data — to anyone, ever.
Tribal community data is treated as sovereign and is never shared without Tribal government consent.
Missing person case data is controlled by the reporting family, not by Cefa Tribal Affairs.
Tips are encrypted end-to-end and only decrypted by assigned law enforcement.
You can request deletion of your account and all associated data at any time.
We use role-based access control — only verified, appropriate users see sensitive information.

1. What We Collect

We collect information you provide directly: name, email address, phone number, account credentials, and role-specific information (such as Tribal affiliation, law enforcement agency, or business registration details). For missing persons cases, we collect the information you submit in the report form. For tips, we collect only what you voluntarily provide — anonymous tips do not require any personal information. We also collect basic usage data (pages visited, features used) to improve the platform. We do not use behavioral advertising or sell usage data.

2. How We Use Your Information

We use your information to: operate your account and provide platform features; verify your role and identity level; route tips to appropriate law enforcement agencies; send case-related notifications you have opted into; comply with legal obligations. We do not use your information for advertising. We do not share your information with data brokers. We do not build behavioral profiles for sale.

3. Tribal Data Sovereignty

Cefa Tribal Affairs recognizes that Tribal Nations hold inherent rights to govern information about their communities, members, and territories. Data submitted by Tribal government officials through verified Tribal government accounts is treated as Tribal sovereign data. We will honor written requests from Tribal governments for data deletion, data portability, or data processing agreements. We do not share Tribal community data with state or federal agencies without a court order, Tribal consent, or mandatory legal disclosure.

4. Missing Person Case Privacy

Families control what information is public. Certain fields — including exact last-seen addresses, date of birth, minor's full name, and vehicle license plates — are never made public, regardless of submitter preference. These fields are encrypted at rest and accessible only to verified law enforcement officers assigned to the case. Tips submitted about a case are encrypted and are never visible to the public or to the reporting family — only to assigned law enforcement.

5. Children's Privacy

We do not knowingly collect personal information from users under 13. Missing person profiles for minors receive additional protections as described in Section 4. If you believe we have inadvertently collected information from a child under 13, contact us at privacy@nativelink.org for immediate deletion.

6. Data Retention

Account data is retained until you delete your account. Missing person case records are retained indefinitely unless the reporting family requests removal, the case is legally closed, or a Tribal government requests removal. Resolved cases are archived (not deleted) by default to support investigative record-keeping. You may request full deletion at any time.

7. Security

We use industry-standard encryption (AES-256 at rest, TLS 1.3 in transit) for all data. Sensitive fields (tips, exact addresses, dates of birth) are encrypted at the application layer with separate key management. We maintain role-based access controls, audit logs for all sensitive data access, and regular security reviews. Two-factor authentication is required for law enforcement and Tribal government accounts.

8. Your Rights

You have the right to: access a copy of your personal data; correct inaccurate data; delete your account and associated data; withdraw consent for optional data uses; receive your data in a portable format. To exercise these rights, email privacy@nativelink.org or use the Privacy Center in your account dashboard.

9. Contact

Privacy Officer: privacy@nativelink.org. For Tribal data processing agreements, contact partnerships@nativelink.org. For law enforcement data requests, contact legal@nativelink.org with your agency credentials and judicial authorization.