Privacy Policy
Our Privacy Commitment
TiPortal is committed to protecting the privacy and safety of all individuals mentioned in incident reports. Our system is designed with privacy-by-default principles to prevent any form of doxxing or public exposure of personally identifiable information (PII).
Information We Never Publicly Share
The following information is never displayed on public pages or returned through public APIs:
- Full legal names of victims, witnesses, or suspects
- Exact addresses or precise location coordinates
- Phone numbers, email addresses, or social media handles
- National ID, passport, or birth registration numbers
- Bank account or financial information
- Any unique identifiers that could identify individuals
- Vehicle registration numbers or license plates
- Unredacted photographs showing identifiable faces
What We Display Publicly
Public incident reports only contain:
- Anonymized incident summaries and narratives
- General location (district level only, never precise addresses)
- Incident category and severity level
- Timeline of events (with all PII redacted)
- Redacted media attachments (faces blurred, text removed)
Internal Data Handling
Full incident details, including sensitive information, are only accessible to authorized verification officers and administrators through our secure internal dashboard. All access is logged for audit purposes.
We implement role-based access control (RBAC) to ensure that staff members only have access to the information necessary for their responsibilities.
Your Rights
You have the right to:
- Request deletion: If you are mentioned in an incident report, you can request its removal through our deletion request process.
- Request correction: If information about you is inaccurate, you can request corrections.
- Access information: You can inquire about what information we hold about you.
Data Retention
Incident data is retained according to our data retention policy. Deleted incidents are removed from public view immediately, with complete data purge occurring within 30 days.
Audit logs are retained for security and accountability purposes for a period of 2 years.
Security Measures
- All data is encrypted in transit and at rest
- Access to sensitive data requires authentication
- All actions are logged for audit purposes
- Regular security reviews and updates
- Rate limiting to prevent abuse
- Content Security Policy headers to prevent XSS attacks
Contact Us
If you have any questions about our privacy practices or wish to exercise your rights, please contact our data protection team.
Last updated: 2/12/2026