Privacy & Data Handling
This page is a structural placeholder pending legal review — headings only, no substantive claims. Every section below needs counsel sign-off before publication.
1. What data the system processes
TODO(legal review): Describe video streams, detection metadata (timestamps, zones, classifications, confidence scores), and any identity data processed for access-control capabilities.
2. Where data is stored and processed
TODO(legal review): Describe on-premise vs. hosted (Canadian region) processing, and how the two differ for this client's deployment.
3. Retention and deletion — client-controlled
TODO(legal review): Describe how retention periods are configured, who controls them, and how deletion requests are handled.
4. Biometric data — facial recognition and people authorization
TODO(legal review): Requires counsel sign-off before any substantive language is drafted. Do not publish this section without a legal review pass.
5. Access controls
TODO(legal review): Describe who within the client organization can view footage, event records, and enrolled identity data.
6. Client obligations regarding notice to workers and visitors
TODO(legal review): Describe the client's responsibility to post notice of camera-based monitoring and, where applicable, biometric enrollment, per applicable provincial law.
7. Contact for data questions
TODO(legal review): Provide a designated contact or process for data-handling questions and requests.