Last updated: July 2026 · Compliant with the Digital Personal Data Protection Act, 2023 (India)
The short version: your video never leaves your store. All AI processing happens on the edge device on your premises. Only text metadata — timestamps, event scores, attendance logs — reaches our cloud. We cannot watch your cameras even if we wanted to.
1. What We Collect
On the edge device (your premises — never uploaded)
Data
Purpose
Stored where
Video frames
Real-time AI detection
RAM only — never saved
Video clips
Evidence for security alerts
Device SSD, 30-day rolling deletion
Staff face embeddings
Attendance recognition
Device SSD only
In the cloud
Data
Purpose
Retention
Owner name, phone, email
Account & notifications
Until account deletion
Staff names, roles, salary configuration
HR management
Until staff deactivation
Event metadata (type, score, zone, time)
Alert history
1 year
Attendance & salary records
Payroll & legal compliance
As required by law
2. What We Never Collect
Raw video — video frames are never transmitted to the cloud
Face images — only mathematical embeddings (512 numbers), never photos, and only on your device
Customer biometrics — visitors are detected as persons but never identified
Audio — no audio recording or processing
Location tracking — no GPS or location data from staff phones
3. Lawful Basis for Processing
Staff face recognition — consent (you obtain staff consent during enrollment; we provide a consent form template)
Security monitoring — legitimate interest in property protection
Attendance tracking — employment relationship
WhatsApp notifications — your opt-in during setup
4. Your Responsibilities as a Store Owner
Obtain informed consent from each staff member before face enrollment
Display a notice on premises: “This premises uses AI-powered CCTV for security”
Delete staff face data from the device when an employee requests it or leaves
5. Your Rights (DPDP Act §11–13)
Access — request a copy of your data: privacy@kairoslabs.in
Correction — request corrections to attendance or salary records
Erasure — staff face data is deleted from the edge device on request
Grievance — grievance@kairoslabs.in, or the Data Protection Board of India