Recidiviz Privacy Notice

Last Updated: August 26, 2024

Welcome to Recidiviz—a non-profit organization dedicated to reducing incarceration safely, equitably, and at scale using modern data tools. This Privacy Notice explains how Recidiviz Inc. collects, uses, discloses, and otherwise processes personal data.

This Privacy Notice does not address our privacy practices relating to Recidiviz job applicants, employees and other employment-related individuals, nor data that we process on behalf of third parties or that is otherwise not subject to applicable data protection laws (such as deidentified or publicly available information). This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.

A Note About Justice-Impacted Individual Data

To pursue our mission of reducing incarceration safely, equitably, and at scale, we partner with state criminal justice agencies and other organizations with similar missions to ours in order to unlock the valuable insights state agencies need from data to improve the criminal justice system. We do this by stitching together disconnected databases of government records and publicly available information relating to arrests, probation, prison, parole, and other statistics relating to the experiences of justice-impacted individuals. The resulting interconnected data provides greater transparency into criminal justice settings, empowers criminal justice decision-makers, lawmakers, and advocates to make better informed decisions, and improves the experiences of justice-impacted individuals.

While we love to discuss our work in leveraging data to improve the criminal justice system, this Privacy Notice does not address our processing of data in connection with the services we provide state agencies because each state agency has control over the types of data they choose to share with us and the ways in which we can process it. However, if you have any questions about our work or the ways in which we process information relating to justice-impacted individuals, we encourage you to reach out through our Contact Form.

Our Collection and Use of Personal Data

The categories of personal data we collect depend on how you interact with us and our services. For example, you may provide us with your personal data directly when you choose to partner with us, donate to our mission, or otherwise contact or interact with us.

We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.

Personal Data Provided by Individuals

We collect the following categories of personal data individuals provide us:

Contact Information, including first and last name, phone number, email address, mailing address, and communication preferences. We use this information primarily to fulfill your request, to communicate with you directly, to request donations to our mission, and to send you other communications about our services in accordance with your preferences.
Professional Information, including your company or state employer and role / title.
Account Information, including first and last name, email address, phone number, account credentials, one-time passcodes, and passwords. We use this information primarily to administer your account, provide you with our services, communicate with you regarding your account and your use of our services, and for service support purposes.
User Content, including any files, documents, audio, videos, images, data, or communications you choose to input, upload, or transmit to our services. We use this content primarily to provide you with our services, to facilitate your requests, and to improve our services.

Donation Information, including contact information, donation type, donation amount, and any other information you chose to provide in connection with your donation. We use this information to facilitate your donation. We use third-party donation platforms and payment providers, including Stripe, to facilitate your donation. We do not receive or retain any personally identifiable financial information, such as payment card number, you provide these platforms and providers in connection with your donation. Rather, all such information is provided directly by you to the platform or provider. The platform or provider’s use of your personal data is governed by their own privacy notice. To view Stripe’s privacy notice, please click here.
Inquiry, Feedback and Support Communications Information, including the contents of custom messages sent through the forms, chat platforms, email addresses, or other contact information we make available to you, as well as recordings of calls with us, where permitted by law (including through the use of automated tools provided by us or our third-party providers). We use this information primarily to investigate and respond to your inquiries, to communicate with you, and to improve our services.

If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal data we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Personal Data Automatically Collected

We, and our third-party partners, automatically collect information you provide to us and information about how you access and use our services when you engage with us. We typically collect this information through the use of a variety of our own and our third-party partners’ automatic data collection technologies, including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. Information we collect automatically about you may be combined with other personal information we collect directly from you or receive from other sources.

We, and our third-party partners, use automatic data collection technologies to automatically collect the following data when you use our services or otherwise engage with us:

Information About Your Device and Network, including the device type, manufacturer and model, operating system, IP address, browser type, Internet service provider, language preference, referring site, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier). We collect this information when you use our services, for example, when you check the leadership dashboard for your Department of Corrections.
Information About the Way Individuals Use Our Services and Interact With Us, including the site from which you came, the site to which you are going when you leave our services, how frequently you access our services, whether you open emails or click the links contained in emails, whether you access our services from multiple devices, and other browsing behavior and actions you take on our services (such as the pages you visit, the content you view, the communications you have through our services, and the content and links you interact with). We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services and other browsing, search or engagement behavior. These third-party technologies may also record information you enter when you interact with our services or engage in chat features or other communication platforms we provide.
Information About Your Interactions With Other Users, including information when you are logged in to your account with us and share information with a colleague, for example, sharing data analysis conducted by Recidiviz. We collect this information to make better recommendations in your sharing dialog in the future.
Information About Your Location, including general geographic location that we or our third-party providers may derive from your IP address, as well as more precise geolocation when you grant us access through your device settings. We collect and use this information to, for example, calculate how many people visit our services from certain geographic regions.

All of the information collected automatically through these tools allows us to improve the user experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our services, and to improve the effectiveness of our services and communications. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our services.

For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below.

Personal Data from Other Sources and Third Parties

We may receive the same categories of personal data as described above from the following sources and other parties:

Single Sign-On: We may provide you the ability to log in to our services through certain third-party accounts you maintain. When you use these single sign-on protocols to access our services, we do not receive your login credentials for the relevant third-party service. Instead, we receive tokens from the single sign-on protocol to help identify you in our system (such as by your username) and confirm you successfully authenticated through the single sign-on protocol. This information allows us to more easily provide you access to our services.

Employers: If you interact with our services in connection with your role as a representative of one of our business or government partners, we may obtain personal data about you from your employer or another company or government entity for which you work. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer’s relationship with us.
Social Media: When you interact with our services through other social media networks, such as when you follow us or share our content on other social networks, we may receive some information that you permit the social network to share with third parties. The data we receive is dependent upon your privacy settings with the social network, and may include profile information, profile picture, username, and any other information you permit the social network to share with third parties. You should always review and, if necessary, adjust your privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information primarily to operate, maintain, and provide to you the features and functionality of our services, as well as to communicate directly with you, such as to send you messages about features that may be of interest to you.
Business Partners: We may receive your information from our business partners, such as companies that offer their products and/or services as a part of or in connection with our services. For example, certain of our services allow for the integration of third-party services. If you choose to leverage these third-party service integrations, we may receive confirmation from our business partner regarding whether you are an existing user of their services.
Service Providers: Our service providers that perform services on our behalf, such as analytics providers, collect personal data and often share some or all of this information with us. For example, we receive personal data you may submit in response to requests for feedback to our survey providers.
Other Sources: We may also collect personal data about you from other sources, including publicly available sources, third-party data providers, or through transactions such as mergers and acquisitions.
Inferences: We may generate inferences or predictions about you and your interests and preferences based on the other personal data we collect and the interactions we have with you.

Additional Uses of Personal Data

In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:

Provide services, and get insights on how people use our services so we can make our services better, and understand and make predictions about user retention;
Customize the user experience, such as personalize your experience by serving you relevant notifications and alerts from our services, recommending additional tools or features, and providing content more directly relevant to your role, employer or location;
Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations, to facilitate donations, or to deliver the services requested;
Manage our organization and its day-to-day operations;
Communicate with you, including via email, text message, chat, social media and/or telephone calls;
Facilitate the relationship we have with you and, where applicable, the company you represent;
Request you provide us feedback about our service offerings;
Address inquiries or complaints made by or about an individual in connection with our services;
Create and maintain accounts for our users;
Verify your identity and entitlement to our services;
Administer, improve, and personalize our services, including by recognizing you and remembering your information when you return to our services;
Develop, operate, improve, maintain, protect, and provide the features and functionality of our services;
Identify and analyze how you use our services;
Infer additional information about you from your use of our services, such as your interests.
Create aggregated or de-identified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Notice;
Conduct research and analytics on our user base and our services, including to better understand the demographics of our users;
Improve and customize our services to address the needs and interests of our user base and other individuals we interact with;
Test, enhance, update, and monitor the services, or diagnose or fix technology problems;
Help maintain and enhance the safety, security, and integrity of our property, services, technology, assets, and business;
Defend, protect, or enforce our rights or applicable contracts and agreements (including our Terms of Service), as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Recidiviz and others;
Facilitate business transactions and reorganizations impacting the structure of our business;
Comply with contractual and legal obligations and requirements; and
Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.

Our Disclosure of Personal Data

We disclose or otherwise make available personal data in the following ways:

To Our Affiliates and Independent Contractors: We are able to offer the services we make available because of the hard work of our team members across Recidiviz entities and the independent contractors we engage. To facilitate our services, Recidiviz entities and independent contractors disclose personal data to other Recidiviz entities and independent contractors for purposes and uses that are consistent with this Privacy Notice. For example, Recidiviz may disclose your personal data to the independent contractor responsible for managing our email newsletter to facilitate communications between you and Recidiviz.
To Your Employer: If you interact with our services in connection with your employment, we may disclose personal data to your employer or another company for which you work. For example, we may provide information to your employer about your usage of our services in connection with your work for them.
To Marketing Providers: We coordinate and share personal data with our marketing providers in order to advertise and communicate with you about the services we make available.
To Business Partners: We may share personal data with our business partners, or we may allow our business partners to collect personal data directly from you in connection with our services. Our business partners may use your personal data for their own business and commercial purposes, including to send you information about their products and services.
To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above. Depending on the applicable services, these service providers may process personal data on our behalf or have access to personal data while performing services on our behalf.
To Other Businesses as Needed to Provide Services: We may share personal data with third parties you engage with through our services or as needed to fulfill a request or transaction including, for example, payment processing services.
In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
In Connection with a Support Request: If you send us a request for assistance, for example using a support email or feedback mechanism, we reserve the right to publish that request in order to clarify or respond to your request or help us support other users.
To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement: some text
- in connection with the establishment, exercise, or defense of legal claims;
- to comply with laws or to respond to lawful requests and legal process;
- to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
- to detect, suppress, or prevent fraud;
- to reduce credit risk and collect debts owed to us;
- to protect the health and safety of us, our customers, or any person; or
- as otherwise required by applicable law.
With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites.

Your Privacy Choices

Communication Preferences

Email Communication Preferences: You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in any of our email communications. Please note you cannot opt-out of service-related email communications (such as account verification, donation confirmation, or service update emails).
Phone Communication Preferences: You can stop receiving promotional phone communications from us by informing the caller you no longer wish to receive promotional phone calls from us, following the instructions provided on the call for opting out of promotional phone calls (where available), or replying STOP to any one of our promotional text messages. Please note we may need to continue to communicate with you via phone for certain service-related messages (such as, sending a verification code to your phone via call or text for purposes of verifying the authenticity of a log-in attempt).
Push Notification Preferences: You can stop receiving push notifications from us by changing your preferences in your device’s notification settings menu or in the applicable service-specific application. Please note we do not have any control over your device’s notifications settings and are not responsible if they do not function as intended.
Direct Mailing Preferences: You can stop receiving promotional direct mail communications from us by contacting us at hello@recidiviz.org. Please note this opt-out does not affect any mailings that are controlled by third parties that may feature or mention our services.

Automatic Data Collection Preferences

You may be able to utilize third-party tools and features to restrict our use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.

Partner-Specific Preferences

Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:

Device-Specific / Platform-Specific Preferences: The device and/or platform you use to interact with us (such as your mobile device or social media provider), may provide you additional choices with regard to the data you choose to share with us. For example, many mobile devices allow you to change your device permissions to prevent our services from accessing certain types of information from your device (such as your precise geolocation data), and many social media platforms allow you to change your platform permissions to prevent integrated services from accessing certain types of information connected with your profile. Please refer to your device or platform provider’s user guides for additional information about implementing any available platform-specific preferences.
Google Analytics: Google Analytics allows us to better understand how our customers interact with our services. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google's website here: www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Add-On here: https://tools.google.com/dlpage/gaoptout/.

Children’s Personal Data

Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 13. If an individual is under the age of 13, they should not use our services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 13 has provided personal data to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 13, we will promptly delete that personal data.

Security of Personal Data

We have implemented physical, technical, and organizational safeguards that are designed to help protect your personal data. In addition, we take steps designed to ensure any third party with whom we share personal data agrees to provide a similar level of protection. However, despite these safeguards, we cannot ensure or warrant the security of your personal data. You can find out more about how we protect personal data here.

Retention of Personal Data

We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfill the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

Third-Party Websites and Services

Our services may include links to third-party websites, plug-ins, applications and other services. Except where we post, link to, or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please hello@recidiviz.org.

‍

Change log

September 24, 2024: Updated policy to include clarification of JII policies.
August 20, 2020: Removal of some inherited commercial terms not applicable to nonprofit organizations.
August 7, 2020: Initial privacy policy uploaded.

‍