Privacy Policy

1. Data we collect

Account data

When you register, or sign in with Google, we collect your email address and basic profile information (name and profile picture). If you sign in with Google, we receive this from Google under the email and profile scopes only. We do not request access to your Gmail, Drive, Calendar, or contacts.

Organisation data

We store the organisation you belong to, your role within it, and your approval status, in order to apply access controls.

Video and analytics data

The platform connects to video sources you configure (for example RTSP camera streams) and runs computer vision analytics over them. This produces analytics events — such as face detection results, timestamps, and associated image frames — which we store so you can review them.

This data may include images of identifiable individuals, and depending on your jurisdiction may constitute biometric or sensitive personal data. You are the controller of this data; see “Your responsibilities” below.

Technical data

We record standard server logs, including IP address, request paths, and timestamps, to operate and secure the service. We also use Vercel Web Analytics, which is cookieless and does not collect personal identifiers, to count page views and demo-form submissions. If you arrive from a campaign link, the campaign tags in that link are stored with any demo request you send.

2. How we use data

• To authenticate you and maintain your session.
• To enforce organisation membership and role-based access controls.
• To run the video analytics you configure and show you the results.
• To operate, secure, debug, and improve the platform.
• To comply with legal obligations.

We do not sell personal data, and we do not use your video or analytics data for advertising.

3. Google user data

Information received from Google APIs is used solely to authenticate you and identify your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to third parties except as necessary to provide the service, for security purposes, or to comply with applicable law.

4. Sharing and processors

We host the platform on Google Cloud Platform and serve the web application through Vercel. These providers process data on our behalf under their own security and privacy commitments. We disclose data to others only where required by law, or to protect the rights and safety of users and the public.

5. Retention

Account and organisation data is retained while your account is active. Analytics events and captured frames are retained until deleted by you or your organisation administrator, or until the underlying environment is decommissioned. You may request deletion at any time using the contact details below.

6. Security

Traffic between your browser and our API is encrypted in transit using TLS. Access to the platform requires authentication, and administrative actions are restricted by role. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent to Google sign-in at any time by revoking access in your Google Account permissions. To exercise these rights, contact us below.

8. Your responsibilities

If you connect cameras or video sources to Visalytix, you are responsible for having a lawful basis to record and analyse the individuals who appear in them, for providing any notices and obtaining any consents required in your jurisdiction, and for complying with applicable surveillance, data protection, and biometric privacy laws.

9. Changes

We may update this policy from time to time. Material changes will be reflected by a new “Last updated” date on this page.

10. Contact

Questions about this policy or your data can be sent to x@navyaai.com.