Privacy
OALS is a consent-based investigation and safeguarding platform. We collect only the information necessary to operate authorised cases.
What information is collected
- Account details for authorised users (name, email, role).
- Investigation metadata created by investigators.
- Uploaded images stored in private object storage.
- Location coordinates and accuracy — only after you explicitly allow the browser Geolocation permission on a protected link.
- Limited request metadata for security and audit (hashed IP where configured, user agent category).
When location is collected
Location is never collected automatically on page load. It is requested only after you click "Allow Location & View" and grant the browser's native permission prompt. If you deny permission, we do not attempt to bypass it or repeatedly prompt.
How long it is retained
Location events are retained according to configurable retention periods (default 7 days; options include 30 or 90 days). Expired location records are securely deleted.
Who can access it
Only authenticated users with appropriate roles (investigator who owns the case, assigned reviewers, or administrators) can view consented location events inside the secure dashboard. Location data is not public and is not sent to advertising or analytics platforms.
Deletion and contact
Authorised administrators can configure retention and delete case data according to organisational policy. Contact your organisation administrator or email privacy@mylos.cyou for privacy requests.
What we do not do
- Secret GPS collection
- Camera or microphone activation without permission
- Covert device fingerprinting for tracking
- Continuous background location tracking
- Public searchable person databases