Data Minimization
Reporter contact information is used for follow-up and is stored as a hash in the default case record. Public incident records exclude contact data, suspect contact fields, exact private locations, and admin-only evidence.
Production policy
Reporter contact information is used for follow-up and is stored as a hash in the default case record. Public incident records exclude contact data, suspect contact fields, exact private locations, and admin-only evidence.
Evidence metadata is separated by consent scope: public redacted, admin only, or official packet. File access uses private storage, signed URLs, audit logs, and restricted staff access. Public pages use redacted summaries instead of raw uploads.
GringoGuard keeps data-subject access, correction, removal, and appeal workflows available for Colombia Law 1581-style, Mexico LFPDPPP-style, and Dominican Republic privacy requests. Data-subject requests can be started at Review Requests.
Public safety records keep the minimum narrative needed to warn travelers. Admin-only reporter details, evidence references, and review notes are retained only for safety, dispute, compliance, and abuse-prevention needs, then reviewed for removal when they no longer serve those purposes.