Privacy Policy

This Privacy Policy describes how personal information submitted through the Odin Lost & Found platform (the “Service”) is collected, used, and protected. The Service is operated by CHT Legatum, LLC, doing business as JMA Strategy Group (“we”, “us”), on behalf of the operating organization that published the form you are using (the “Operator”).

Operator-specific policy: the Operator is the controller of the personal information you submit. Where the Operator has published its own privacy policy, that policy governs how the Operator uses your information and takes precedence over the general terms in this document.

Information We Collect

• Contact information you provide: name, email address, phone number.
• Details about the lost item: description, photographs, brand, color, category, and approximate location and date of loss.
• Travel context you choose to share: flight number, arrival or departure date.
• Technical metadata: IP address and browser information collected automatically to operate and secure the Service.

Information about found property. When the Operator's staff log an item that has been handed in, they record what it is and photograph it. If the item is itself a personal document — a passport, driving licence, boarding pass or bank card — that record may contain personal information about its owner, including a document number, date of birth or nationality, before that person has contacted anyone. Photographs of documents are automatically obscured where the Operator has configured it, as described under Automated Processing below. This information is held so the item can be returned to the person it belongs to, and is available to that person on request.

How Information Is Used

• To match your report against items found by the Operator's staff.
• To contact you when an item matching your report is found, recovered, or returned.
• To facilitate shipping, pickup, or release of the recovered item.
• To comply with applicable laws, retention obligations, and lawful requests from authorities.
• To improve the safety, accuracy, and performance of the Service.

How Information Is Shared

Your information is shared only with: (a) the Operator's authorized staff handling lost property; (b) the service providers listed below, which process information on our instructions and under contractual confidentiality obligations; and (c) authorities or courts where required by law.

We do not sell your personal information, and we do not use it for advertising.

Service Providers

We use the following providers to operate the Service. Each receives only the information needed for the purpose shown.

• Amazon Web Services — hosting, database storage, storage of photographs and documents, and outbound email delivery. Also used to detect text and faces in photographs, as described under Automated Processing below.
• Anthropic — AI processing of item photographs and descriptions, as described under Automated Processing below.
• Clerk— sign-in and account security for the Operator's staff. Passengers do not have accounts and are not processed by this provider.
• Stripe — payment processing where you choose to pay for return shipping. Card details are entered directly with Stripe; we do not receive or store your full card number.
• FedEx and other carriers — shipping the recovered item to you, which requires your name and delivery address.
• Google — address autocomplete. What you type into an address field is sent to Google Places to suggest completions.
• Expo— delivery of push notifications to the Operator's staff devices. No passenger information is sent in a notification.

Automated Processing and AI

Photographs of found property, and the descriptions written about them, are processed automatically to make lost items findable:

• Photographs are sent to Anthropic to identify what the item is — its category, brand, color and any visible model name — and to compare found items against lost-item reports. Item descriptions are also used to draft correspondence to you and to estimate an item's value for shipping and insurance.
• Photographs are sent to Amazon Textract to locate text in the image, and to Amazon Rekognition to locate the position of any faces. This is done so that personal details on a photographed identity document — a passport, driving licence or boarding pass — can be automatically obscured before the photograph is stored.

Face detection is used only to find where a face appears in an image so it can be covered. It does not identify anyone, is not matched against any face database, and no facial recognition is performed.

These providers process this content to return a result to us. They do not use it to train their models, and we do not use your information to train any AI model of our own.

No decision that produces a legal or similarly significant effect about you is made solely by automated means. A member of the Operator's staff reviews and confirms every match before an item is released or shipped.

What We Do Not Collect

The purpose of the Service is narrow: to work out who owns a piece of lost property and get it back to them. We collect what serves that purpose and not more.

• Race and ethnicity. We do not ask for it, there is no field for it, and we do not infer it.
• Biometric identifiers. We do not create, store, or match biometric templates, and we do not perform facial recognition. Face detection locates where a face appears in a photograph so that it can be covered; the coordinates are used for that and are not kept as a means of identifying anyone.
• Health information about you. We hold no medical records and ask no health questions. Where a found item is itself medication, spectacles, or a medical device, we record what the item is so it can be returned — that description is about the object, not about your health.
• Advertising and tracking data. There is no advertising identifier, no analytics or tracking software, and no profiling. We do not sell personal information.
• Payment card numbers. We never receive or store a full card number, in either of the two places a card can arise. Where you pay for return shipping, your card details are entered directly with our payment processor; what it returns to us, and what is kept against the shipping record, is the card type and the last four digits, so that a payment can be identified if it has to be queried or refunded. And where a found item is itself a bank card, we record the card type, the last four digits and the expiry date so the card can be matched to the person who lost it.

Two details can be recorded when a found item is a personal document, because they are often the only way to confirm who it belongs to: a date of birth, and the country that issued the document. An agent may also note the type and number of an identity document shown at the counter when property is collected, as a record that the handover was checked. These are used to confirm ownership and for no other purpose, and you may ask for them to be removed.

Retention

Personal information is retained for as long as needed to resolve your inquiry and meet the Operator's record-keeping obligations. After the Operator's retention period, records are archived or anonymized in accordance with applicable law.

Your Rights

Subject to your jurisdiction, you may request access to, correction of, or deletion of the personal information you provided. Contact the Operator directly to exercise these rights. Where required, we will support the Operator in honoring your request.

Redaction on request. This applies to photographs as well as text. If a photograph of your property shows a document, a face, or anything else you would rather was not held, you may ask the Operator to obscure it or to delete the image outright, and it will be done. You do not need to give a reason, and you do not need to have made a report to us to ask — if a document of yours was handed in, the record about it is yours to have corrected or removed once the item is back with you.

Security

Information is transmitted over encrypted connections and stored using industry-standard safeguards. No system is perfectly secure; please contact the Operator promptly if you believe your information may have been compromised.

Children

The Service is not directed to children under 13. If you believe a child has submitted personal information, please contact the Operator so we can remove it.

Changes

We may update this Policy from time to time. The current version will always be available at this URL with an updated effective date.