Privacy policy

This policy explains what information Inmate Outpost(“we”, “us”) collects, why we collect it, who we share it with, and the choices you have. Inmate Outpost is operated by Flipvo LLC. If anything here is unclear, email us at the address at the end of this page.

Who this policy covers

Three groups interact with the site, and we treat each differently:

• Listing submitters — family members or close contacts who create and pay for a profile.
• Profile subjects — the incarcerated people whose profiles appear in the directory.
• Visitors — anyone browsing the directory or writing a letter. Visitors do not have accounts and are not asked for personal information.

Information we collect

• From listing submitters:your name, email address, and the billing details needed to take payment. We also collect everything you provide about the profile subject — bio text, photos, the facility's mailing address and inmate ID number, and any expected release date.
• From visitors: when a profile page loads, we record a daily-salted, one-way hash of your IP address together with a truncated user-agent string. This lets us count profile views and detect abuse. We do not store your raw IP address, and the hash cannot be reversed back into it. We collect no name, email, or contact details from visitors.
• From admins: the email address used to sign in to the moderation panel.
• Payment card data: we never see or store full card numbers. Card details are entered directly with our payment processor (see below).

How we use information

• To publish, maintain, and renew profiles in the directory.
• To take and process listing payments.
• To send transactional email — submission receipts, payment confirmations, approval or rejection notices, and listing-expiry reminders.
• To count profile views and protect the site from abuse and fraud.
• To respond to support, correction, and removal requests.
• To enforce our terms and to comply with valid legal obligations.

Information we do not collect

• The contents of letters mailed to incarcerated people. Mail goes directly to the facility — it never passes through us and we have no access to it.
• Any name, email, return address, or other contact detail for letter-writers. Browsing and writing are anonymous.
• Full payment card numbers — those stay with our payment processor.

Service providers we share information with

We do not sell personal information. We share data only with the service providers (“sub-processors”) we rely on to run the site, and only as far as each one needs to do its job:

• Stripe — payment processing. Stripe receives the card and billing details needed to take a listing payment.
• Amazon Web Services (S3 and CloudFront) — profile photo storage and content delivery. Uploaded photos are stored in S3 and served through the CloudFront CDN.
• Resend — delivery of our transactional email. Resend receives the recipient address and message content for those emails.
• Google Analytics 4 — aggregate web analytics about how the site is used.
• Sentry — error and performance monitoring, so we can find and fix bugs.

The site is hosted on Amazon Web Services infrastructure. We may also disclose information when required to do so by law or in response to a valid legal request.

Cookies and analytics

Google Analytics 4 sets cookies and collects usage data to help us understand site traffic in aggregate. Separately, our own view counter records the hashed-IP value described above each time a profile page loads; it is used purely to tally views and curb abuse, and it is not linked to any identity. We do not use advertising or cross-site tracking cookies. Most browsers let you block or clear cookies in their settings.

Data retention

A profile's data stays live while its listing subscription is active. After a listing's subscription ends — through cancellation or non-payment — the profile is removed from the public directory, and its photos are deleted from storage within roughly 90 days. Transactional email logs are kept for about one year for troubleshooting and dispute resolution. Payment records are retained as long as needed for accounting and legal compliance.

Your rights and choices

Family of a profile subject may request correction or removal of that profile at any time. To do so, email us from the address that submitted the listing, or include the profile URL together with proof that you are family. We act on verified requests promptly, normally within 7 business days. Depending on where you live, you may also have rights to access or delete personal information we hold about you — contact us and we will respond as the applicable law requires.

Children

The site is intended for adults. We do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy as the service evolves or as the law requires. Material changes will be reflected by a revised effective date at the top of this page.

Contact

Questions about this policy, or a request about your information, can be sent to support@inmateoutpost.com.