Privacy Policy | SurveillX

Who we are, and whose data this is

SurveillX provides video, sensing and alerting systems to organizations — construction firms, utilities, industrial operators, public-sector agencies and similar. Our customers are organizations, not consumers.

That distinction shapes this whole policy. For the footage, sensor readings and alerts produced by equipment deployed at a customer's site, the customer organization decides what is collected and how long it is kept. SurveillX processes that material on their behalf. In data-protection terms the customer is the controller and SurveillX is the processor.

For the small amount of data about the people who use our software — the account you sign in with — SurveillX is the controller. Sections 2 and 3 are about that data.

Accounts

You cannot create a SurveillX account yourself. There is no public sign-up. Accounts are created by an administrator at your own organization, who also decides your role and which sites and trailers you can see.

The account record holds your name, email address, role, and the organization you belong to. We use it to authenticate you, to decide what you are permitted to see, and to contact you about the service.

Because your organization creates accounts, your organization also removes them. If you want your account closed, ask your administrator; they can delete it, which removes your personal details from our systems. If you cannot reach an administrator, or you want to make a request directly, use the contact details in section 9 and we will act on it.

We do not sell personal data. We do not use it for advertising. We do not build advertising profiles.

The Prism mobile app

Prism is the mobile client for viewing live video, recorded footage, reports and alerts from equipment your organization operates. It is available on Google Play and requires an account provided by your organization.

What the app sends to us

Account details — your email address and password when you sign in, and afterwards your name, email, role and organization so the app knows what to show you.
Notification token — if you turn on notifications, a device token issued by Google so alerts can reach your phone. You are asked for this after signing in, never before, and you can decline or withdraw it at any time in the app's notification settings or your phone's settings.
Viewing sessions — when you start and stop watching live video, which trailer, the video quality in use, and whether playback is active. This is used to run the service and to account for usage. It records that you viewed a camera, not anything about you personally beyond your account.
Actions you take — for example acknowledging an alert, along with any note you write.

What the app does not collect

We think this list matters as much as the one above, and we have kept it true deliberately:

No device location. The app never reads your phone's GPS or location. Where you see a map position, it comes from the trailer's own GPS, not your handset.
No camera access. The app never opens your phone's camera.
No microphone access. The app never opens your phone's microphone.
No contacts, files, or messages.
No advertising identifier and no advertising of any kind.
No third-party analytics, tracking or crash-reporting service. The app contains no analytics SDK.

You can verify the first three yourself: the app requests only internet access, network status, notifications and the ability to keep the screen awake while you are watching video. Android will show you this list.

What stays on your phone

Your sign-in token and a copy of the trailers you have access to are stored on the device so you are not asked to sign in repeatedly. These are excluded from Android's automatic cloud backup and from phone-to-phone transfer, so your sign-in does not travel off the handset. Signing out removes them.

Video, images and sensor data

Cameras and sensors deployed at a customer's site produce video, still images, detections and measurements. This material is recorded by equipment at the site and made available to the people your organization has authorised.

It is not captured from your phone, and it is not stored on your phone. Prism displays it; it does not collect it.

Some of this material is analysed automatically to produce alerts and written reports — for example detecting movement outside working hours, or summarising activity over a week. Those summaries are generated from the customer's own footage and are visible to that customer's authorised users.

If site cameras may capture members of the public or staff, responsibility for signage, lawful basis and retention periods sits with the customer organization operating the site, as the controller of that footage. We support them in meeting it, and we will act on instructions they give us about their data.

This website

Separately from the app and the portal, this marketing website uses Microsoft Clarity to understand how visitors use our pages. Clarity collects usage information such as pages viewed, clicks, scrolling and general device and browser characteristics, and may record session interactions. This is website analytics only.

It has no connection to the Prism app, the portal, or any customer's footage. The app contains no analytics of any kind. You can opt out through your browser's tracking-protection settings or Microsoft's own controls.

Who we share data with

We share personal data only where it is needed to run the service:

Google (Firebase Cloud Messaging) — to deliver push notifications to your phone. Google receives the device token and the contents of the notification, which may include an alert description and the site or camera it relates to. It receives nothing else about you.
Cloud hosting and infrastructure providers — who store and transmit data on our behalf under contract.
Your own organization — administrators at your organization can see the accounts they manage and the activity within their own sites.
Microsoft (Clarity) — website analytics only, as described above.

We do not sell personal data, and we do not share it with advertisers or data brokers. We may disclose data where we are legally required to, and we will tell the affected customer unless we are prohibited from doing so.

Data in transit is encrypted.

How long data is kept

Account data is kept while your account exists. When your organization's administrator deletes your account, your personal details are removed from our systems.

Notification tokens are removed when you sign out, turn notifications off, or your account is deleted. Tokens that stop working are discarded automatically.

Footage, alerts and reports are retained according to the customer organization's own configuration and their agreement with us.

Some records are kept after an account is closed. Security and audit logs — records of significant actions taken in the system — are retained for a limited period so that we and our customers can investigate incidents and meet legal and regulatory obligations. Footage belongs to the customer organization and is not deleted when an individual user's account is deleted, because it is that organization's record, not that user's.

Your rights

Depending on where you live, you may have rights to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to receive a copy in a portable form.

To exercise any of these, contact us using the details below, or speak to the administrator at your own organization. We will respond within the period required by the law that applies to you, and we may need to confirm your identity first.

Where the request concerns footage or sensor data belonging to a customer organization, we will forward it to that organization, since they decide what happens to their own material — and we will tell you that we have done so.

If you are not satisfied with our response, you may complain to your local data-protection authority.

Contact us

For any privacy question, or to make a request about your data — including deleting your account if you cannot reach an administrator at your organization — contact:

privacy@surveillx.com

Please tell us what you are asking for and the email address associated with your account, so we can find the right records.

Changes to this policy

If we change this policy we will update the date at the top of the page. Where a change materially affects how we handle personal data, we will tell affected customers directly rather than relying on you to notice.