Privacy Policy

1. Who we are and what this policy covers

IPTECHVIEW, INC. (“IPTECHVIEW,” “we,” “us”) provides a cloud video and AI supervision platform to businesses. This Privacy Policy explains how we handle personal information when:

• you visit our websites (such as iptechview.com), read our content, attend events, or contact us;
• you are a business contact, a customer’s account user, or a partner, and we act as the business/controller of your information;
• you are recorded or identified by a camera or device that one of our customers operates, where the customer is in charge and we act as its service provider/processor (see Section 9).

This policy does not cover the privacy practices of our customers or partners. If you are recorded by a camera at a business that uses IPTECHVIEW, that business’s privacy notice applies, and you should direct requests to it first.

2. Information we collect

Information you give us:

• Contact and account details: name, business email, phone, company, job title, login credentials.
• Billing details: billing contact and address, and payment card details, which are collected and processed by our payment provider, Stripe. Card numbers never reach our systems and we do not store them.
• Communications: support requests, demo requests, survey answers, event registrations, and your marketing preferences.

Information collected automatically when you use our websites and apps:

• device and browser type, IP address, approximate location derived from IP;
• pages viewed, referring URL, clicks, and dates and times;
• app usage, crash logs and diagnostics;
• cookies and similar technologies (Section 6).

Information about account users in the platform: user role, permissions, login history, audit logs of actions taken, device and session data, and mobile push tokens.

Information from others:

• partners and resellers who refer you or manage your account;
• identity providers you sign in with, such as Google (single sign-on), Active Directory or Okta;
• public sources and business-data providers;
• event organizers.

Sensitive information. For our own purposes (websites, accounts, marketing), we do not seek to collect sensitive information such as biometric, health or precise geolocation data. Biometric data that our platform processes for a customer is handled under Section 9.

3. How we use information

We use personal information to:

1. provide, operate, secure and support the platform and your account;
2. process orders, billing and renewals, and send service and renewal notices;
3. respond to inquiries and provide demos, quotes and support;
4. send product updates and marketing, where permitted, with an easy opt-out;
5. understand and improve our websites, products and AI features, using aggregated or de-identified data where possible;
6. detect, prevent and investigate security incidents, fraud and abuse;
7. comply with law and enforce our agreements.

Legal bases (EEA/UK visitors): we rely on:

• performance of a contract, for providing the platform and accounts;
• legitimate interests, for security, B2B marketing, product improvement and website analytics cookies;
• consent, for certain marketing;
• legal obligation, for compliance.

4. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in U.S. state privacy laws. Our websites use analytics tags from Google, LinkedIn, YouTube and X for measurement only; we do not run retargeting or advertising audiences on them.

We share information with:

• Service providers that help us run our business (hosting, email, SMS, analytics, customer support, payment processing, CRM), under contracts that limit their use of the data. Our main providers today are Amazon Web Services (hosting and SMS), Twilio (SMS), Google (Workspace and single sign-on), Stripe (payments) and HubSpot (CRM and marketing). A current list is available on request to privacy@iptechview.com. When a customer selects a Curated AI that runs on a third-party model, or builds a custom AI function in AI Studio, the content needed for that feature is processed by the AI provider behind it. A selection of AI providers is used for this, currently including Anthropic, OpenAI, Google (Gemini) and Hugging Face. Only the providers needed for the features a customer has selected are used, under contracts that limit their use of the data.
• Partners and resellers that sell, install or support your account, as needed for those services.
• Integrations you enable, such as identity providers, alarm or access-control systems, and business software.
• Professional advisers, such as lawyers, accountants and auditors.
• Authorities, when required by law, subpoena or court order, or when necessary to protect someone’s safety or our rights. Where legally permitted and appropriate, we will notify the affected customer of requests for its data.
• A successor business, in a merger, acquisition or sale of assets, subject to this policy’s protections.

5. AI and automated processing

Our AI features analyze video and data on behalf of our customers (Section 9). For our own operations, we do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. We do not use customer video or data to train AI inference models. The only exception is a custom AI project a customer commissions from us under a written mandate, in which case the data is de-identified first and the model is used for that customer only. Some Curated AIs use models from third-party AI providers (see Section 4). These providers are used only when a customer selects such a Curated AI, and they are also available in AI Studio for custom development.

6. Cookies, analytics and your choices

Our websites use a small number of basic cookies and similar technologies:

• strictly necessary cookies, so the site and login work;
• analytics cookies and tags, to understand site usage (Google Analytics via Google Tag Manager, and LinkedIn, YouTube and X analytics tags);
• functional cookies, which remember your preferences.

Managing cookies is up to you. You can block or delete cookies at any time in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on. If you block cookies, some features of the site may not work.

We honor Global Privacy Control (GPC) browser signals as an opt-out request, and you can also use the Do Not Sell or Share My Personal Information link in the website footer.

7. Data retention

We keep personal information only as long as needed for the purposes above:

• account data, for the life of the account plus the period needed for legal, tax and dispute purposes;
• marketing data, until you opt out or it becomes stale;
• platform and security logs, for a limited period set by our security practices.

Customer video and biometric data are retained according to the customer’s settings and our contract with the customer (Section 9): the customer chooses a retention period of 30, 60, 90, 180 or 365 days, recordings are deleted automatically when it ends, and data remains available for 30 days after a subscription ends so the customer can export it, then is deleted.

8. Security

We use administrative, technical and physical safeguards appropriate to the information, including encryption in transit and at rest, access controls, logging and regular security reviews. Our platform is hosted on Amazon Web Services, whose infrastructure is covered by AWS’s SOC 2 and related attestations; IPTECHVIEW applies industry-standard safeguards to its own platform layer. No system is perfectly secure. If a breach affects your personal information, we will notify you and regulators as the law requires.

9. Video, images, audio and biometric data we process for our customers

Our customers decide what to record and how to use our platform. When a customer’s cameras or devices capture you (for example as an employee, visitor, patient or member of the public), the customer is responsible for that data, and we process it only on the customer’s instructions, under a data processing agreement.

• What may be processed:
  • video and images;
  • audio, only if the customer enables it and the law allows;
  • license plates;
  • sensor readings;
  • event and access logs;
  • where a customer enables Biometric Features (outside the EEA, UK and Switzerland only; they are disabled on our servers for accounts in those regions), facial geometry templates or other biometric identifiers, used to recognize enrolled individuals.
• Notice and consent: customers must give legally required notices (such as signage and employee notices) and obtain any required consent, including written consent before biometric identifiers are captured where the law requires it.
• We never sell, lease or trade biometric data, and we use it only to provide the customer’s requested features.
• Retention: customers set retention periods. Biometric templates are deleted when their purpose ends, and in any case within the time the law requires (for example, no later than one year after the purpose expires under Texas law, and within three years of the last interaction under Illinois law).
• Your requests: if you want to access or delete footage or biometric data about you, contact the business that operates the cameras. If you contact us, we will forward your request to that customer and help it respond, as required.

10. Your privacy rights

Depending on where you live, you may have rights to:

• know or access the personal information we hold about you, and receive a portable copy;
• correct inaccurate information;
• delete your information;
• opt out of targeted advertising, the sale of personal information, and profiling with legal or similarly significant effects;
• limit the use of sensitive personal information;
• withdraw consent where processing is based on consent;
• not be discriminated against for exercising your rights.

These rights apply under California law (CCPA/CPRA) and the comprehensive privacy laws of other U.S. states, including Texas, Colorado, Connecticut, Virginia, Utah, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, as each law applies.

How to make a request: email privacy@iptechview.com or write to the address in Section 14. We will verify your identity before acting. To protect you, we confirm every request by email before acting on it, and we may ask for further verification and we will respond within the time the law requires (generally 45 days).

Appeals: if we deny your request, you may appeal by replying to our decision. If you remain unsatisfied, you may contact your state attorney general.

EEA/UK/Switzerland: you also have the right to object, to restrict processing, and to lodge a complaint with your local data protection authority.

• Controller: IPTECHVIEW, INC. (United States), for website, account and marketing data. For video captured by a customer’s cameras, the customer is the controller.
• No biometrics in Europe: facial recognition and other biometric features are disabled for customers and sites in the EEA, UK and Switzerland, so we do not process biometric data of people in those countries.

California “Shine the Light”: we do not share personal information with third parties for their own direct marketing.

11. International transfers

We are based in the United States, and our service providers may process data in other countries. When we transfer personal information from the EEA, UK or Switzerland, we rely on the EU Standard Contractual Clauses (and the UK Addendum and Swiss amendments), with supplementary security measures such as encryption in transit and at rest and strict access controls. Customer data for business customers in the EEA, UK and Switzerland is stored in our EU hosting region, on AWS infrastructure in Frankfurt and Paris; data for other customers is stored in one of our two United States regions. You can request a copy of the relevant safeguards by contacting us.

12. Children

Our services are for businesses and are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect children’s personal information for our own purposes. If you believe we have, contact us and we will delete it. Customers whose cameras may capture minors are responsible for complying with laws that apply to that recording.

13. Changes to this policy

We will post updates here and change the “Last updated” date. For material changes, we will notify account holders by email or in the platform before they take effect.