Legal
How we handle your footage
The page to forward when a city, a DOT or your own principal asks what happens to the video. Not a contract — a straight description of where the data lives and who can reach it.
Where it lives
Footage is stored in encrypted object storage in the United States and processed on systems we own and operate. It is never sent to a third-party analysis service, never posted to a public endpoint, and never used to train any model outside our own pipeline.
Who can reach it
Access is per project and per person. Only the staff processing or reviewing your study can open your footage, each under individual credentials. Storage is isolated by client account, so no client can see another's projects.
How long we keep it
Footage is kept for ninety days from receipt, then automatically deleted — long enough that a client asking for a metric nobody requested at order time does not need a new deployment, short enough that we are not sitting on your clients’ video forever. We warn you fourteen days before a project ages out, hold it longer if you ask within the window, and delete earlier on request with written confirmation. Deliverables are exempt: those stay for the life of your account.
What we don't do
No facial recognition. No license plate reading or storage. No linking footage to individuals. No sale or licensing of your data to anyone, ever. Our extraction produces counts and classifications — nothing that identifies a person.
Controls, in detail
| Control | How it works |
|---|---|
| Encryption | TLS in transit; encrypted at rest in object storage. |
| Tenancy | Storage paths and portal access scoped per client account. No shared buckets across clients. |
| Authentication | Individual credentials per user, no shared logins, with per-firm roles for who can order, upload and pay. |
| Sub-processors | Hosting, object storage, transactional email and payment processing only. All under contract, none permitted to use your data for their own purposes. Current list available on request. |
| Backups | Deliverables and study data backed up so a hardware failure cannot lose finished work. |
| Deletion | Raw footage deleted automatically ninety days after receipt, with a warning fourteen days beforehand. Project-level deletion on request at any time, with written confirmation naming the project and the date. |
| Incident response | Notification without undue delay if a security incident affects your data, with what we know and what we are doing about it. |
| Personnel | Everyone with data access is bound by confidentiality obligations at least as strict as our mutual NDA. |