Privacy
What this website and the license service collect, why, and for how long.
Draft for attorney review. Not yet in force.
Who we are
Blue Basin Systems, L.L.C., doing business as Morpheus Investigative Systems, a Louisiana limited liability company. Contact: info@bluebasinsystems.com.
The applications
Morpheus Chat Ops and Morpheus Capture store agency data only on storage the agency designates and transmit none of it to us. They contain no telemetry, analytics or crash reporting. When an agency uses an online license key, the application sends the license service only the license key or identifier, the product and version, a hashed machine identifier and, at the time a key is redeemed, the first name, last name, agency and email address the redeeming user enters. The license service records the time and originating network address of each request and the status of the seat. This list is enumerated in section 5 of the license agreement and is a contractual limit.
This website
An account holds a name, an agency email address, a password hash where a password is set, the agency it belongs to, its role, and the times it signs in. We record orders, invoices and license entitlements; which release each signed-in user downloaded, when, and from which network address; access requests as submitted; and an audit log of administrative actions. Session cookies are strictly necessary and hold a random identifier only. We set no advertising or analytics cookies and load no third-party scripts. Fonts are loaded from Google Fonts, which receives the request's network address; if your agency blocks that host the site renders in a system font.
Payments
Card payments and hosted invoices are processed by Stripe. We never see or store card numbers. Stripe's processing is governed by its own privacy policy. Purchase-order payments are recorded as an order reference and an invoice.
We send transactional email only: verification and sign-in links, order confirmations, license delivery, renewal reminders and replies to your requests. We do not send marketing email and we do not sell or share addresses.
Retention
Licensing and order records are kept for the license term and a reasonable period afterwards for audit and records purposes. Download logs are kept for two years. Access requests that are rejected are deleted after one year. You may ask for a copy of your account data or for its deletion, subject to records we are required to keep.
Disclosure
We disclose information only to the service providers that host this site, the license service and email (Cloudflare, Stripe, Resend), under confidentiality obligations, or as required by law or legal process, in which case we notify the agency where lawful.
Changes
Changes are posted here with a revised date. Material changes are also emailed to agency administrators.