Privacy Policy

We know you are navigating something difficult. We built this service for families of incarcerated people, and we take seriously the responsibility of handling your information. This policy explains what we collect, why we collect it, and how we protect it. We will never sell your data or use it for advertising.

1. Who We Are

RightToNotify ("we," "us," or "our") is a notification service that monitors the federal Bureau of Prisons (BOP) inmate locator on behalf of subscribers and sends SMS alerts when an inmate's facility changes. We operate independently of the BOP and the federal government.

By using RightToNotify, you agree to this Privacy Policy. If you do not agree, please do not use the service.

2. Information We Collect

Information you provide directly:

• Your phone number. We collect your mobile phone number when you subscribe. This is how we send you notifications and verify your identity.
• BOP Register Number. You provide the federal register number (inmate ID) of the person you want to monitor. This is used solely to query the BOP's public inmate locator.

Information generated through your use of the service:

• One-time passcode (OTP) data. When you verify your phone number, we generate and temporarily store a 6-digit code. It expires within 10 minutes and is deleted after verification.
• Notification log. We maintain a record of every SMS we send you, including the date, time, content, and delivery status. This record exists so we can confirm what we told you and when.
• Poll and subscription status. We record the last known facility for each monitored inmate and the status of your subscription (active, verified, or cancelled).

Information we do not collect:

• We do not collect your name.
• We do not collect payment information — this service is free.
• We do not collect location data, device identifiers, cookies, or any data beyond what is described above.

3. How We Use Your Information

We use the information we collect for the following purposes only:

• To verify your phone number. We send an OTP via SMS to confirm that you control the phone number before any notifications are sent.
• To send transfer notifications. When we detect a change in the facility associated with the register number you provided, we send an SMS to your verified phone number.
• To maintain an audit trail. We log outgoing notifications so we can answer questions about what was sent and when.
• To operate and improve the service. Subscription and error data help us identify failures, paused polls, and system health issues.
• To comply with legal obligations. We may retain or disclose information as required by law.

We do not use your information for advertising, marketing, or any purpose unrelated to operating this notification service.

4. The Source of Inmate Location Data

Inmate location information is obtained exclusively from the Bureau of Prisons' official public inmate locator (bop.gov). We do not maintain an independent inmate database. We query the same government-operated system that is publicly available to anyone. We are an automation layer — we monitor that system on your behalf and alert you when it changes.

We do not have access to any non-public BOP systems or records.

5. How We Protect Your Information

• Phone number verification before any notification. We will not send location updates about any inmate to an unverified phone number. Only the person who has completed OTP verification receives alerts for a given register number.
• Encrypted transmission. All communication between your device and our service uses HTTPS/TLS encryption.
• Limited retention. OTP codes are deleted immediately after verification or after 10 minutes, whichever comes first. We retain subscription and notification log data only as long as necessary to operate the service or as required by law.
• Infrastructure security. Our service runs on AWS infrastructure in a private network. Databases are not publicly accessible. We use industry-standard security practices for our cloud environment.
• No third-party advertising or analytics trackers. We do not embed any advertising pixels, analytics SDKs, or third-party tracking into our service.

6. Sharing of Your Information

We do not sell, rent, trade, or share your personal information with third parties for their own purposes. We share your information only in the following limited circumstances:

• Twilio (SMS delivery). We use Twilio to send text messages. Your phone number is transmitted to Twilio to deliver SMS notifications. Twilio processes this data under its own privacy policy, available at twilio.com/legal/privacy.
• AWS (infrastructure). Our servers, databases, and message queues are hosted on Amazon Web Services. AWS processes data in accordance with its privacy policy and applicable data protection agreements.
• Legal requirements. We may disclose information if required by law, subpoena, court order, or to protect the safety of any person.

We do not share inmate register numbers or facility information with any third party other than as described above.

7. Data Retention

• OTP codes: Deleted within 10 minutes of generation, or immediately upon successful verification.
• Subscription records: Retained while your subscription is active and for a reasonable period after cancellation for recordkeeping and dispute resolution purposes.
• Notification logs: Retained for up to 2 years to provide an accurate audit trail of alerts sent.
• Poll error logs: Retained for up to 1 year to support system diagnostics and reliability monitoring.

You may request deletion of your data at any time. See Section 9 for how to contact us.

8. Your Rights and Choices

Regardless of where you are located, you have the following rights with respect to your information:

• Access. You may request a copy of the information we hold about you.
• Correction. You may ask us to correct inaccurate information.
• Deletion. You may ask us to delete your subscription and associated data. Deleting your subscription will stop all future notifications. We may retain records required by law or for legitimate business purposes (such as notification logs already sent).
• Cancellation. You may cancel your subscription at any time by texting STOP to our number or by using the unsubscribe option in any notification. Cancellation takes effect immediately.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we collect and the right to opt out of the sale of personal information. We do not sell personal information.

9. Children's Privacy

This service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

10. SMS Messaging Terms

By subscribing, you consent to receive automated SMS messages from RightToNotify at the phone number you provide. Message frequency depends on inmate transfer activity — most subscribers receive few or no messages in a given month. Standard message and data rates may apply depending on your carrier plan. You may opt out at any time by replying STOP to any message.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this page. If we have your phone number and make a significant change that affects how we use your data, we will attempt to notify you by SMS. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

RightToNotify
Email: info@righttonotify.com

We will respond to all privacy-related requests within 30 days.

© 2026 RightToNotify. All rights reserved.