Interim Privacy Notice

1. What this covers

This interim notice describes information processed through RM-UCIE (the “Service”) for invited users and visitors to the public website.

2. Information we collect

If you’re an invited user of the Service:

• Account and authentication information, such as your email address and authentication factors.
• Operational data that you or your organization submit to the Service. The Service is designed to keep each organization’s workspace separate.
• Session, security, and audit information used to support sign-in, accountability, security, and troubleshooting.

If you’re a website visitor:

• If you submit the “RM-UCIE Intelligence Brief” email signup form, we store the email address you provide, the source page, and may store a public IP address for abuse prevention.
• If you submit a contact or pilot-application form, we store the information you provide so we can respond. We may also store a public IP address for abuse prevention and security review. The initial public forms do not accept attachments.
• We do not run third-party advertising trackers or analytics scripts on the public site.

3. How we use it

• To operate the Service: authenticate you, enforce your organization’s access controls, and store the records your team creates.
• To communicate with you: invite emails, and — if you signed up for it — occasional updates from the RM-UCIE Intelligence Brief list. You can ask to be removed at any time (see Contact below).
• To keep the Service secure and working, including abuse prevention, troubleshooting, and deployment-specific error monitoring.
• Optional AI assistance is disabled by default. If expressly enabled and authorized, limited submitted content may be processed by the configured AI service for the requested function. Applicable retention depends on the deployed service configuration and provider terms.

4. What we don’t do

• We do not sell your information, or your organization’s data, to anyone.
• RM-UCIE does not intentionally use your organization’s operational data to train an RM-UCIE model. If optional external AI assistance is authorized, provider processing is subject to applicable customer and provider terms.
• We do not share one organization’s data with another organization on the Service.

5. Who else sees it

Within your organization, visibility follows the role-based access your administrator configures — not everyone with an account can see everything. Outside your organization, the Service may rely on deployment providers for hosting and, when configured, outbound email, server-side error tracking (Sentry), and on-demand evidence-intake assistance (OpenAI). Those providers may receive the limited information described above. Their handling is subject to the applicable customer agreement, deployment configuration, and provider terms; this interim notice does not itself establish or verify those contractual protections.

6. How long we keep it

Operational and audit records are generally retained while your organization’s account is active. Public email-signup, contact, and pilot-application records — including any stored request IP address — are retained until an authorized deletion or applicable retention process removes them. Backups and external providers may have additional retention periods determined by the applicable deployment and provider terms. Contact us to request access, correction, or deletion and to confirm what can be changed without compromising required security or audit records.

7. Your choices

You can ask us to access, correct, or delete personal information we hold about you — including unsubscribing from the Intelligence Brief list, or requesting removal of a website signup, contact inquiry, or pilot application — by emailing us. For invited-user accounts, your organization’s administrator is typically the fastest path to changes, since your account belongs to their workspace.

8. Changes to this notice

If this notice changes materially, we’ll update the date at the top of this page and, for invited users, notify your organization’s administrator.

9. Contact

Questions, or a request about your data: Contact RM-UCIE