Privacy
What this website and the license service collect, why, and for how long.
Who we are
Blue Basin Systems, L.L.C., doing business as Morpheus Investigative Systems, a Louisiana limited liability company. Contact: info@bluebasinsystems.com.
The applications
ChatOps and Capture store agency data only on storage the agency designates and transmit none of it to us. They contain no telemetry, analytics or crash reporting. When an agency uses an online license key, the application sends the license service only the license key or identifier, the product and version, a hashed machine identifier and, at the time a key is redeemed, the first name, last name, agency and email address the redeeming user enters. The license service records the time and originating network address of each request and the status of the seat. This list is enumerated in section 5 of the license agreement and is a contractual limit.
Capture can save a problem report on the agency's computer when a user asks for one. Capture never sends it. A user can read it in full and choose to email it to us. It describes Capture's settings, the connected phones and their Wi-Fi link, file and folder names, and errors. It leaves out recordings, screenshots, text read from the screen, chats, names typed into Capture, license keys and signing keys. We use a report we receive only to diagnose and fix the problem, and we never share it. We delete it within 90 days after the issue is closed, or sooner on request. Section 5.5 of the license agreement sets this out as a contractual commitment.
This website
An account holds a name, an agency email address, a password hash where a password is set, the agency it belongs to, its role, and the times it signs in. We record orders, invoices and license entitlements; which release each signed-in user downloaded, when, and from which network address; access requests as submitted; and an audit log of administrative actions. Session cookies are strictly necessary and hold a random identifier only. We set no advertising or analytics cookies and load no third-party scripts. We count how many times each public page is viewed each day, and the name of the website a visitor followed a link from, as daily totals kept about 13 months. With each public page view, counted or not, we also record, for 30 days, the visitor's network address, the network's organization and approximate location as our hosting provider reports them, and the browser type, so we can tell visitors apart and spot automated traffic. Requests that look for weaknesses in the site, such as addresses it does not have, are recorded the same way, with the address requested, for 30 days, to watch for attacks. A network address that sends one may be blocked from the site; the block, with the address, its network and location, is kept until it ends, at most a year. Fonts are loaded from Google Fonts, which receives the request's network address; if your agency blocks that host the site renders in a system font.
Payments
Card payments and hosted invoices are processed by Stripe. We never see or store card numbers. Stripe's processing is governed by its own privacy policy. Purchase-order payments are recorded as an order reference and an invoice. A copy of a purchase order or a sales-tax exemption certificate that an agency administrator uploads is kept privately with the order or the agency's account, visible only to that agency's administrators and to us, for as long as the order records are kept.
We send transactional email only: verification and sign-in links, order confirmations, license delivery, renewal reminders and replies to your requests. We do not send marketing email and we do not sell or share addresses.
Retention
Licensing and order records are kept for the license term and a reasonable period afterwards for audit and records purposes. Download logs are kept for two years. Access requests that are rejected are deleted after one year. You may ask for a copy of your account data or for its deletion, subject to records we are required to keep.
Disclosure
We disclose information only to the service providers that host this site, the license service and email (Cloudflare, Stripe, Resend), under confidentiality obligations, or as required by law or legal process, in which case we notify the agency where lawful.
Changes
Changes are posted here with a revised date. Material changes are also emailed to agency administrators.