Sentis
Client Portal
DATA PROTECTION & PRIVACY GOVERNANCE

Enterprise Privacy Policy

Version: 4.2-PRIV
Last Updated: October 25, 2026
Scope: Commercial CCTV Stream Analytics & Alert Routing
Role: Data Processor / Service Provider

01. Introduction & Privacy Architecture

At Sentis Vision Technologies ("Sentis", "we", "our"), we build computer vision software to optimize physical operations, sanitation compliance, and facility management for real estate managers, industrial operators, and commercial properties. We operate on a principle of privacy by design and data minimization.

This Enterprise Privacy Policy explains how our platform processes video stream feeds, technical telemetry, alert metadata, and administrative account data.

02. Roles: Data Processor vs. Data Controller

Under applicable privacy statutes—including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the New York Stop Hacks and Improve Electronic Data Security Act ("NY SHIELD Act"), and relevant state data privacy frameworks:

  • The Customer (Building Owner / Property Manager) is the Data Controller: Customer determines the lawful basis, camera locations, recording parameters, retention schedules, and statutory notice postings for all on-premise video surveillance cameras.
  • Sentis is the Data Processor / Service Provider: Sentis processes digital video feeds strictly in accordance with Customer's instructions and for the business purpose of providing automated operational intelligence and alert routing.

03. Categories of Data We Process

Data Category Description & Processing Scope Storage & Retention
RTSP Video Frames & Snapshots In-memory digital video frames pulled via RTSP/ONVIF streams from Customer's local NVR. Frames are processed ephemerally in RAM by computer vision models. Ephemeral in memory. Discarded immediately after inference unless a rule violation (e.g. propped door, refuse overflow) occurs. Incident snapshots are cached temporarily (up to 30 days) to render alert digests.
Alert & Incident Metadata Timestamps, camera ID tags, rule class names (e.g., "Refuse Room Dwell", "Roof Door Breach"), duration, and resolution verification status. Retained in structured append-only event logs for daily compliance reporting and operational audits.
Dispatch Routing Coordinates Telegram group chat IDs, WhatsApp telephone numbers, Slack channel webhooks, and SMS endpoints provided by Customer for alert delivery. Stored securely in customer configuration tables until updated or deleted by Customer.
Administrative & Billing Data Customer contact names, business emails, billing addresses, and payment tokens. Credit card processing is handled via PCI-DSS compliant third-party gateways. Retained for account maintenance, invoicing, and statutory tax compliance.

04. AFFIRMATIVE EXCLUSION OF BIOMETRIC DATA

SENTIS DOES NOT COLLECT, RECORD, EXTRACT, PROCESS, STORE, OR TRANSMIT BIOMETRIC IDENTIFIERS OR BIOMETRIC INFORMATION.

To maintain absolute compliance with state and municipal biometric privacy statutes—including the Illinois Biometric Information Privacy Act (740 ILCS 14/ "BIPA"), New York City Administrative Code § 22-1201, and Texas Business & Commerce Code § 503.001:

  • Sentis DOES NOT utilize facial recognition algorithms, facial geometry mapping, or facial signature extraction;
  • Sentis DOES NOT capture or analyze retina or iris scans, fingerprints, or voiceprints;
  • Sentis algorithms evaluate scene geometry, bounding-box motion vectors, object categories (e.g., vehicles, carts, boxes, human shapes), and dwell duration without individual identification.

05. Edge-First Architecture & Data Retention

Continuous 24/7 video footage is recorded and retained locally on Customer's on-premise NVR or VMS (e.g., DW Spectrum, Hanwha, Hikvision, or Axis). Sentis does NOT operate bulk 24/7 cloud video archives.

Our retention policy for data processed on Sentis infrastructure:

  • Ephemeral Video Frames: Discarded immediately from GPU/RAM buffers after model inference;
  • Incident Snapshots: High-resolution JPEG crops associated with verified rule triggers are stored in encrypted object storage for a default window of thirty (30) days to populate midnight PDF digests and portal audits, after which they are automatically purged;
  • Review Queue Frames: Stale review-queue staging files are automatically wiped every 48 hours;
  • Event Audit Logs: JSON-Lines structured metadata is retained for twelve (12) months to furnish building compliance audits.

06. Third-Party Subprocessors & Data Sharing

We never sell, rent, lease, or monetize Customer video footage, metadata, or contact information.

Data is shared strictly with authorized subprocessors bound by stringent confidentiality and data protection agreements:

  • Cloud Infrastructure Providers: Secure enterprise VPS and object storage facilities located in the United States;
  • Alert Delivery Gateways: Messaging APIs explicitly selected by Customer (Telegram Open Platform, WhatsApp Business Cloud API, Slack API, Twilio SMS) to transmit operational alerts to Customer's designated responders;
  • Payment Processors: PCI-DSS Level 1 certified payment gateways for subscription billing.

07. Enterprise Security Architecture

Sentis deploys enterprise-grade administrative, technical, and physical safeguards designed to preserve the confidentiality and integrity of all stream connections:

  • Transport Layer Security: All API, web portal, and stream tunnel sessions are protected by TLS 1.3 cryptographic encryption;
  • Network Isolation: Camera stream processing occurs in sandboxed, containerized environments with strict firewall rules;
  • Role-Based Access Control (RBAC): Access to portal dashboards and administrative endpoints requires authenticated credentials;
  • No Public Stream Exposure: RTSP credentials and stream endpoints are encrypted at rest and never exposed to public internet endpoints.

08. Individual Privacy Rights & Tenant Inquiries

Because Sentis processes video footage solely as a service provider to property owners, building tenants, employees, or visitors who have questions, concerns, or requests regarding on-premise camera placement or recorded video should direct their inquiries to the owner or managing agent of the applicable property. Where required by law, Sentis will assist Customer in fulfilling verified data subject inquiries.

09. Contact the Privacy & Data Governance Office

For questions regarding this Enterprise Privacy Policy, data retention policies, or security audits, contact:
Sentis Vision Technologies • Privacy & Data Governance
Email: privacy@sentisvision.com