Learn how InMato's privacy policy protects your data in plain English — what's collected, what's never sold, and how to stay in control.
In this guide
- Why Privacy Matters Especially in Inmate Search
- What Data InMato Collects — and What It Does Not
- How Search Queries Are Handled
- Cookies, Tracking, and Third-Party Scripts
- Your Rights Under California and Utah Privacy Law
- How InMato Handles Children's Privacy
- Scam Avoidance and Privacy Intersect
- InMato+ Subscription and Privacy
- Accessibility and the Privacy Policy Document Itself
- How to Exercise Your Rights in Practice
- Where to Read the Full Policy
- About InMato LLC
- Get Started with InMato LLC
- Related Articles
01
The privacy policies that govern most tech products are written by lawyers for lawyers. They run dozens of pages, deploy passive-voice constructions that obscure who does what, and bury the most important disclosures under walls of legalese. Families navigating the jail system are already under acute stress, and the last thing they need is another document that demands a law degree to parse. This guide walks through the privacy policy at InMato in plain English, explaining every meaningful section in the order a family member is most likely to encounter it — from the moment they search for a loved one through account creation, alert setup, and eventual cancellation.
02Why Privacy Matters Especially in Inmate Search
When someone searches online to find a loved one in jail, they are sharing more than a name and a location. They are revealing that someone in their life is incarcerated, a fact that carries social stigma and, in some contexts, professional risk. The data generated by that search has real-world weight, and the service holding it owes that family member a clear account of what happens to it.
Many sites that appear when families search for how to find someone in jail are not what they seem. Some are data-broker aggregators that treat a desperate search as a monetization opportunity. Others are imitation deposit portals designed to capture payment credentials under the guise of being the official facility provider. Privacy disclosures on these sites are often vague by design, allowing operators broad latitude to sell or share whatever they collect.
A county jail inmate search on a legitimate service should produce a clear answer about what data is logged, how long it is retained, and whether it is ever shared with third parties for marketing. That transparency is not just good ethics — it is increasingly a legal obligation. California's Consumer Privacy Act, the Utah Consumer Privacy Act, and the FTC's enforcement posture on dark patterns all create enforceable standards for how services must disclose and manage personal data.
InMato LLC was built with those standards as a baseline, not an afterthought. Being a Delaware limited liability company with operations headquartered in Santa Barbara, California means InMato is subject to both federal and California state privacy frameworks from day one. The privacy policy reflects that exposure honestly rather than trying to minimize it.
03What Data InMato Collects — and What It Does Not
The first question any privacy-conscious user should ask is simply: what do you know about me? InMato's answer is structured around the distinction between data you actively provide and data that is passively generated by the act of using the service.
Actively provided data includes the name of the person you are searching for, the state or county you believe they are being held in, and any contact information you supply if you create an account or subscribe to InMato+. If you choose to set up jail booking alerts, the service needs an email address or phone number to send those alerts. That data goes nowhere except the delivery mechanism for your alert.
Passively generated data is the kind most policies gloss over. When you visit any website, your browser sends the server information including your IP address, the browser type you are using, the referring URL, and the pages you view. InMato collects this information in standard server logs. The policy is explicit that this data is used for security monitoring, abuse prevention, and product improvement — not for building advertising profiles.
InMato does not collect payment card numbers directly. When a family member is ready to send money to someone in jail or make a jail commissary deposit, the deposit goes directly to the official facility provider on their own secure system. InMato never touches user money, which means InMato also never holds, processes, or retains payment credentials. That single operational decision eliminates an entire category of privacy risk.
04How Search Queries Are Handled
A county jail inmate search on InMato generates a query against jail roster data that InMato sources from official facility feeds and public records. The search itself — the name, county, and state you enter — is logged transiently for performance and abuse-prevention purposes. It is not stored in a persistent user profile unless you are signed in and have explicitly chosen to save a search.
This matters because search history is one of the most sensitive categories of data a service can hold. On a data-broker site, your search history is an asset. On InMato, it is operational overhead that the service tries to minimize. The privacy policy specifies retention periods for log data and distinguishes between aggregate, anonymized query statistics — which help InMato understand which jail systems families are searching most often — and individual query records tied to a specific session.
If you use the InMato app to search for a loved one, the mobile environment adds one additional data point: the device identifier your operating system assigns to the app. This identifier is used for session continuity and for delivering jail booking alerts to the right device. It is not combined with your search history to build an advertising profile, and it is not shared with data brokers.
One thing worth understanding is what InMato does not do with your search data: it does not sell it, does not license it to background-check companies, and does not allow advertising networks to match it against their own user graphs. The operational model — free search supported by a subscription tier and referral relationships with licensed providers — removes the financial incentive to monetize user data through side channels.
06Your Rights Under California and Utah Privacy Law
Because InMato is headquartered in California and expressly compliant with both the California Consumer Privacy Act and the Utah Consumer Privacy Act, users from those states have specific, enforceable rights. The policy explains these rights in terms of what you can actually do, not just what the law abstractly says.
You have the right to know what personal information InMato holds about you. You can submit a data access request and receive a list of the categories of data collected, the purposes for which it is used, and any third parties it has been shared with. InMato is required to respond within the statutory window, and the privacy policy describes the submission process in plain steps.
You have the right to request deletion of your personal information. If you decide to cancel your InMato+ subscription — which you can do at any time through self-service cancellation, with no phone call required — you can also request that your account data be deleted. The policy specifies what data must be retained for legal compliance purposes and what can be fully purged, so you know what to expect.
You have the right to opt out of the sale of your personal information. InMato's policy on this point is direct: InMato does not sell personal information. The opt-out right exists because the law requires it to be disclosed, but the underlying activity it guards against does not occur. That is not a loophole or a technicality — it reflects the architecture of the business model.
Even if you do not live in California or Utah, these rights function as a practical floor for how InMato treats all users. The policy does not create a two-tier system where families in other states receive inferior privacy protections.
07How InMato Handles Children's Privacy
Incarceration affects entire families, including children who may be trying to understand what happened to a parent. InMato's privacy policy addresses this explicitly. The service is not directed at children under thirteen, and InMato does not knowingly collect personal information from anyone in that age group.
If a minor does use the search feature — which requires no account and no data entry beyond the search terms themselves — the transient log data described above applies equally. There is no age-gated feature that collects additional information, so the exposure is minimal. If InMato becomes aware that it has inadvertently collected personal information from a child under thirteen, the policy describes the deletion process that follows.
For families, this means that a parent helping a teenage child understand how to look up a relative does not expose that child to a separate data collection risk. The service was designed to be navigable without an account for precisely this reason, and the privacy implications of that design choice benefit every user regardless of age.
08Scam Avoidance and Privacy Intersect
Privacy and scam-avoidance are more connected than most families realize. The same sites that harvest personal data for resale are often the ones that impersonate official providers. Understanding a service's data practices is one of the clearest signals of whether it is operating legitimately.
Lookalike payment sites — designed to appear as though they are the official commissary or phone provider for a specific jail — are a documented problem in this space. Families urgently trying to make a deposit hand over payment credentials to what they believe is the official system. The privacy risks compound the financial risks: those credentials are now in the hands of an unauthorized operator who has no legal obligation to protect them.
InMato's approach to scam-avoidance is structural, not just advisory. By connecting families only with official, licensed providers and never processing payment itself, InMato removes itself from any payment data flow. The privacy benefit is the inverse of the scam risk: there is no InMato payment record to breach because no payment data enters InMato's systems.
The privacy policy documents this explicitly in the section on data InMato does not collect. It is a short list, but payment card numbers, bank account numbers, and financial account credentials appear on it. Reading that list is itself a quick check on whether a service claiming to be a legitimate inmate-search or deposit tool is being honest about its role.
09InMato+ Subscription and Privacy
When a family member upgrades to InMato+ at $19.99 per month per loved one, they gain access to jail booking alerts, release and transfer alerts, court date alerts, bail bond and attorney referrals, and real-time case tracking with court document summaries. Each of these features involves some additional data handling that the privacy policy addresses in turn.
Booking-watch alerts require InMato to monitor jail roster feeds on your behalf. The names and identifiers you specify in your alert configuration are stored as long as the alert is active. If you cancel the alert or cancel the subscription, that monitoring configuration is deleted. The policy is specific about this because monitoring data is inherently sensitive — it means InMato knows who you are watching for and in which facilities.
Court date alerts and case tracking involve InMato pulling court record data from official public sources. The case information itself is already public record, but the fact that you are tracking a specific case is a piece of personal data that InMato handles under the same rules as everything else. It is not shared with advertising networks, not sold, and not retained after you stop tracking the case.
The cancel-anytime self-service model for InMato+ has a direct privacy implication: because cancellation does not require a phone call or human interaction, your reason for canceling is never captured as a support interaction record. You retain control of the data lifecycle simply by acting through the account interface.
10Accessibility and the Privacy Policy Document Itself
The privacy policy at InMato in plain English is not just a phrase describing this guide — it describes how InMato actually writes and presents the document. WCAG 2.1 AA accessibility conformance means the privacy policy page is readable by screen readers, navigable by keyboard, and structured with appropriate heading hierarchy so that a user can jump directly to the section they need.
For families who are not native English speakers, the privacy policy is available in Spanish. The Spanish version is a full translation, not a summary, which means Spanish-speaking families receive the same level of detail as English speakers. This reflects the broader service design: InMato is available in both English and Spanish at every stage from search through support.
The plain-language commitment also means InMato avoids the passive-voice constructions that allow other services to obscure who does what with your data. Where the policy says data is shared with a third-party processor, it identifies the category of processor and the function. Where it says data is retained, it specifies how long. Where it says data is deleted, it explains what triggers deletion.
11How to Exercise Your Rights in Practice
Knowing your rights in theory is less useful than knowing the specific steps to exercise them. The privacy policy includes a dedicated section on submission channels — email contact address, in-account request forms, and the timeframe within which InMato will acknowledge and respond to a request.
For a data access request, the process involves verifying your identity so that InMato can confirm it is delivering your data to you and not to someone else. The verification step uses the contact information already associated with your account, which means it does not require you to provide new data to exercise a right about your existing data. That circularity is a known weakness in some services' verification processes; InMato's approach avoids it.
For a deletion request, the policy distinguishes between full account deletion and selective deletion of specific data categories. If you want only your alert configuration deleted but you want to keep your account, you can do that. If you want everything gone, the policy walks through what can be deleted immediately, what must be retained for a statutory period, and when you will receive confirmation.
Questions about the privacy policy itself can be directed to the contact listed in the document. InMato is an information, search, and referral service, not a legal advice provider, so the team can explain how the policy applies to InMato's own data practices but cannot give legal advice about how privacy law applies to your specific situation.
12Where to Read the Full Policy
This guide explains the meaningful substance of InMato's privacy practices, but it is not a substitute for the document itself. The authoritative version lives on the InMato website at all times and is updated whenever practices change. The policy includes a version date and, when changes are material, InMato notifies account holders before those changes take effect rather than relying on passive notice.
One way to evaluate whether a service is treating you honestly is to look at when their privacy policy was last updated and whether the update history matches the evolution of their product. A policy that has not been updated in years on a product that has added features is a warning sign. The privacy policy at InMato tracks the product, including the addition of new alert types and the expansion to new jail systems.
Families searching for a loved one deserve to know exactly who is holding their data and what it will be used for. That transparency is part of what InMato LLC was designed to provide from the outset — alongside free county jail search across 289 jail systems in 14 states, connection to official licensed providers, and the plain commitment that InMato never touches your money.
13About InMato LLC
InMato is an information, search, and referral service that helps families locate a loved one in county jail and connect with official, licensed providers. Founded by J.T. Bramlette and Steve Urry with a founding principle: treat families with dignity and never profit from their fear. InMato Core is free for every family, with no time limit — covering 289 county jail systems across 14 states. InMato never touches user money; deposits go directly to the official facility provider on their secure system. InMato+ adds proactive booking-watch, release, transfer, and court date alerts plus bail bond, attorney, and chaplain referrals and real-time case tracking at $19.99/month per loved one, cancel anytime. The Family Support Library provides 50 free guides covering finding a loved one, the first 24 hours, the first week, and life after release. Available in English and Spanish. InMato LLC, a Delaware limited liability company, headquartered in Santa Barbara, California.
14Get Started with InMato LLC
Search for your loved one now at inmato.com — free for every family, with no time limit. Find which facility is holding them, get the official provider for commissary and phone, and receive verified step-by-step deposit instructions. No account required to search. Available in English and Spanish. If questions about InMato's privacy practices come up as you get started, the privacy policy is there in plain language — and this guide will still be here too. Responses to access and deletion requests come within 48 hours of verification.
Originally published at https://www.inmato.com/blog/inmato-privacy-policy-explained-plain-english
Written by InMato
Looking for someone right now?
Search participating county jails for free and connect to the facility's official, licensed providers — no money ever passes through InMato.
Find a loved oneThis guide is general information from the InMato Family Support Team, not legal, financial, or correctional advice. Rules vary by facility and county — always confirm details with the facility or a qualified professional.