Privacy policy
How PeopleSense handles your data
Who is responsible
PeopleSense (PeopleSenseAI), Hyderabad, India. Questions and requests: [email protected].
PeopleSense is used by organisations (a workplace or a shop — "the customer") on their own premises. For the camera analytics of those premises, the customer is the data controller and we process that data for them. For your sign-in account and this website, we are the controller.
What we handle
| Data | What it is | Where it lives |
|---|---|---|
| Account data | Your email, name and role, the product your account opens (Workplace or Retail), sign-in sessions per device. | Our cloud (Cloudflare, PlanetScale), India-facing. |
| CCTV-derived analytics | People counts, dwell time, attendance and presence, zone and movement summaries, alerts. | Processed on the customer's edge box on their premises; stored for that customer. Visible only to that customer's users, by role. |
| Face and identity data | Face embeddings (numbers derived from a face, not a photo) and snapshots used to recognise enrolled people or to tell visitors apart. | Processed on the customer's edge box; stored for that customer; visible only to the customer's admin roles. Other roles see counts only. |
| Device and diagnostic data | Edge box and camera health (online, temperature, disk, sync times), app version, error logs without personal content. | Our cloud, to keep the service running. |
The app itself does not use your phone's camera, microphone or location. It shows the console of the product your account belongs to.
Why and on what basis
- To sign you in and open your product (contract with you / your organisation).
- To provide the customer's security, safety, attendance and footfall analytics (the customer's instructions and legitimate interests; the customer is responsible for notices on their premises).
- To keep the service secure and working (legitimate interest). We apply the Indian Digital Personal Data Protection Act, 2023 (DPDP Act) and the customer's own obligations under it.
Retention
Analytics and snapshots are kept as set by the customer; default 30 days for snapshots, summaries for longer as the customer configures. [OWNER TO CONFIRM exact defaults per product] Account data is kept while your account exists and removed within 30 days of deletion. Diagnostic logs are kept for a short, fixed period.
No ads, no sale
We show no advertising, sell no data and share nothing with third parties other than the processors that run the service: Cloudflare (hosting, network, email routing) and PlanetScale (database). Both act on our instructions under contract.
Your choices
- Delete your account: in the app (Profile → Delete my account) or on peoplesenseai.com/delete-account.html. Completed within 30 days. Your login, sign-in sessions and the link between your email and your product account are deleted. Records your organisation keeps about its premises (attendance, visit records, counts) belong to the organisation and stay with it.
- Access or correct your account data: ask your organisation's administrator or write to [email protected].
- For face data or footage recorded on a customer's premises, contact that customer; we will help them answer.
Security
Everything travels over HTTPS. Passwords are stored only as salted hashes. One account opens exactly one product; sessions are per device. Face data stays on the customer's edge box and in the customer's own storage.
Changes
We will post updates here with a new effective date. Material changes are also announced in the app.