Privacy Policy

1. Who We Are

1SitePRo LLC, a New Jersey limited liability company, d/b/a InmateResearch and Pena Data Research & Analytics. Principal contact: Orlando Peña, Founder. Elizabeth, New Jersey 07208. Email: orlando@inmateresearch.com.

We are a data research and analytics firm. We are not a law firm. Nothing in this Policy or on this Site is legal advice. See our Terms of Service for the complete Services Agreement.

2. What We Collect

We collect only what is necessary to perform the Services you request — nothing more:

• Contact form: your name, email address, phone number (optional), and the topic of your inquiry (e.g., "Recently Sentenced," "Family Member Seeking Help"). We do not collect inmate names, inmate ID numbers, or case details through the general contact form.
• Service intake forms: when you order a report, we collect your name, email, and the subject person's first name, middle name (optional), last name, state or federal inmate ID, facility state, and any additional case details you provide voluntarily.
• Payment information: processed exclusively by Stripe (PCI-DSS Level 1 certified). We never see, store, or have access to your full card number, CVV, or billing address. We receive only payment confirmation and the last four digits of the card for recordkeeping.
• Site analytics: aggregate, anonymized analytics (Google Analytics 4) recording pages visited, device type, approximate location, and referring source — used only to understand site performance. No case-specific or personally identifying case information is ever sent to any analytics platform.
• Communications: the content of emails, text messages, or calls you send us, retained only to service your request and as required by law.

Confidentiality commitment: All information you share — including case details, inmate records, uploaded documents, and family circumstances — is handled with complete and absolute confidentiality. It will never be shared, sold, or disclosed for any commercial purpose under any circumstances. Every form on this Site displays this commitment and links to this Privacy Policy.

3. How We Use Your Information

We use the information you provide solely to:

• Perform the research, reports, and packets you purchase.
• Communicate with you about your order, intake, delivery, and follow-up questions.
• Process payments and prevent fraud.
• Meet legal, tax, and recordkeeping obligations.
• Improve the Services and the Site using aggregate, anonymized data only — never individual case data.

We will never use your personal information, case details, or inmate data for profiling, behavioral targeting, resale, or any purpose beyond the services you explicitly requested.

4. Absolute Prohibitions — What We Will Never Do

5. Who We Share With — Limited Infrastructure Processors Only

We share information only with the following service providers who power our infrastructure, under strict contracts that require them to protect your information and prohibit them from using it for their own commercial purposes:

• Stripe — payment processing only. They never receive your case details, inmate information, or communications.
• Google Workspace — email hosting only. Case details in email communications are encrypted in transit and at rest.
• Google Analytics 4 — aggregate site traffic analytics only. No case details, inmate data, names, or personally identifying case information is ever transmitted to Google Analytics.
• Brevo — transactional email delivery for order confirmations only. They receive your name and email address only — no case details.
• Cloudflare — site hosting, DDoS protection, and SSL/TLS encryption. They do not receive or process your case details.

No advertising pixels that transmit personal or case-related data are used on this site. We do not share data with advertising networks in a way that links your identity or case details to your browsing behavior.

We will disclose information when required by a valid, lawful court order, subpoena, or federal law — and only to the minimum extent legally required. Where legally permitted, we will notify you before any such disclosure.

6. Data Retention & Secure Destruction

We retain order records, deliverables, and communications for as long as needed to perform the Services and for seven (7) years thereafter, as required by New Jersey law, federal tax law, and fraud-prevention obligations.

Data Destruction Policy: Upon expiration of the mandatory seven-year retention period — or earlier upon your written request where no legal obligation requires retention — all client records including personal information, case details, intake forms, deliverables, and communications are permanently and securely destroyed using industry-standard deletion methods that make recovery impossible. We do not archive, resell, license, or retain data beyond what is legally required. Destruction is permanent and irreversible.

To request early destruction of your records (subject to our legal obligations), email orlando@inmateresearch.com with the subject line "Data Destruction Request." We will confirm in writing within thirty (30) days, including the scope of what was destroyed and what must be legally retained.

7. Security Measures

We implement the following administrative, technical, and physical safeguards to protect your information:

• Encrypted transmission (HTTPS/TLS 1.2+): All data transmitted to and from this Site is encrypted. We enforce HTTPS site-wide.
• Strict access controls: Client files and case details are accessible only to Orlando Peña and are stored in password-protected, access-controlled systems. No third party has routine access to client files.
• Payment security (PCI-DSS): Payment data is processed entirely by Stripe (PCI-DSS Level 1 certified). We store zero payment card data on our systems.
• Cloudflare enterprise security: The Site is protected by Cloudflare's Web Application Firewall (WAF), DDoS mitigation, bot protection, and enterprise-grade security infrastructure.
• Encrypted file storage: Deliverables and case files are stored in encrypted, access-restricted cloud storage. They are never publicly accessible.
• Secure email: All client communications are handled via Google Workspace, which provides encryption at rest and in transit.
• Minimum data collection: We collect only what is necessary to perform the service — nothing more. We do not speculatively collect data for future use.
• No unauthorized access: We do not share login credentials, file access, or client data with subcontractors, affiliates, or third parties except as described in Section 5.

No system is perfectly secure. In the event of a data breach that materially affects your personal information, we will notify you as required by applicable state and federal law and will take immediate steps to contain, remediate, and report the breach.

8. ECPA Protection & Federal Confidentiality

All client communications and case information handled by 1SitePRo LLC are treated as strictly confidential and protected under the Electronic Communications Privacy Act (18 U.S.C. § 2511). Unauthorized access to, interception of, or disclosure of client electronic communications is prohibited by federal law and may subject violators to civil and criminal penalties. Every deliverable issued by 1SitePRo LLC contains a Document Confidentiality Notice prohibiting unauthorized copying, sharing, forwarding, or distribution, and is prepared exclusively for the named recipient.

9. Your Rights

Depending on where you live — including California (CCPA/CPRA), Virginia (VCDPA), Colorado, Connecticut, Utah, and the EU/UK (GDPR) — you may have the right to:

• Know what personal information we hold about you.
• Receive a copy of that information in a portable format.
• Correct inaccurate information.
• Request deletion of your records (subject to mandatory retention obligations).
• Request secure destruction of your data after the mandatory retention period ends.
• Opt out of any sale of personal information (we do not sell personal information).
• Withdraw consent for future processing.
• Lodge a complaint with your applicable data protection authority.

To exercise any of these rights, email orlando@inmateresearch.com with the subject line "Privacy Request." We will respond in writing within thirty (30) days.

10. Cookies & Tracking Technologies

This Site uses cookies and similar technologies for site analytics and session management only. We do not use third-party behavioral advertising cookies that link your identity to your case details. You may disable cookies in your browser settings; some site features may not function correctly if you do. To opt out of Google Analytics tracking across all websites, visit tools.google.com/dlpage/gaoptout.

11. Children

Our Services are intended for adults 18 years of age and older. We do not knowingly collect, process, or store personal information from children under 13 years of age. If you have reason to believe that a child under 13 has submitted information to us, contact us immediately at orlando@inmateresearch.com and we will delete that information promptly.

12. International Users

The Services are operated from the United States. By using the Services, you acknowledge that your information will be transferred to and processed in the United States, which may have data-protection laws different from those in your country of residence. We process all data in compliance with applicable U.S. federal and state privacy law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always posted at this URL with a "Last updated" date at the top. For material changes that affect how we handle your case information, we will notify active clients by email at least fourteen (14) days before the change takes effect. Continued use of the Services after any update constitutes your acceptance of the updated Policy.

14. Contact & Privacy Complaints

1SitePRo LLC
d/b/a InmateResearch & Pena Data Research & Analytics
Elizabeth, New Jersey 07208
Email: orlando@inmateresearch.com
Phone: (908) 280-1879
Web: https://inmateresearch.com

Privacy complaints will be acknowledged within 5 business days and resolved within 30 days. If you believe your privacy rights have been violated and we have not resolved your complaint, you may contact the New Jersey Division of Consumer Affairs or your applicable state or national data protection authority.