Privacy policy

1. Your CCTV footage stays at your premises

For subscribers, all camera footage, detections, snapshots and clips are processed and stored on the ExtraEyes device installed at your premises. They are viewed directly from that device on your phone or computer. We do not upload or store your footage on our servers.

If you ask us for help, we may access your device remotely or on site only for the support you requested, using a time-limited access pass. You are responsible for informing people on your premises that CCTV is in use, as you would be without ExtraEyes.

2. What we collect

• Account: your name, mobile number, email address, and the site address, city and PIN code where the device is installed.
• Subscription: number of cameras, plan term, payment mode, payment status and invoices. Card, UPI and bank details are entered on Razorpay's pages and are never seen or stored by us.
• App members: the mobile numbers of people you invite to view alerts for your site.
• Device: the device's serial number and identity key, its software versions, the number of cameras connected, and the date the first camera started streaming (which starts your free month). No footage or detections are included.
• Security and logs: sign-in sessions, IP address and browser type, records of one-time passwords sent, and an audit log of changes made to your account.
• Contact form: the details you enter when you ask for a quote.
• Website chat: the messages you type into the ExtraEyes assistant and, if you ask the team to contact you, the name, phone number or email, city and other details you give there.
• Website demo: footage you upload to "Try it yourself", your IP address, and a record of your consent.

3. Website demo uploads

Footage you upload to "Try it yourself" is analysed on ExtraEyes servers and, with your consent, kept to test and improve our detection. Only upload footage you own or have permission to share and that contains no copyrighted material. Your IP address is used to limit uploads to three per day and to prevent abuse. To have an upload deleted, email [email protected] with the date and time of the upload.

3A. Website chat assistant

The chat assistant on this website is an AI. Your messages are sent to a third-party AI provider, IFM, so that it can generate replies. Please do not share sensitive details such as payment, identity or health information. We do not keep a separate copy of chats. If you ask us to contact you, the conversation and the contact details you share are saved in our sales records and used to call or message you back about ExtraEyes; they are not used for advertising. To limit abuse we also keep a scrambled (hashed) form of your IP address with a count of your messages for 30 days. To have a chat saved in our sales records deleted, email [email protected].

4. Why we use it

• To create your account, sign you in with a one-time password and keep it secure.
• To install, activate, support and update your ExtraEyes device.
• To bill you, collect payments and send renewal and payment reminders by SMS and email.
• To let the people you invite view your site's alerts in the app.
• To answer your enquiries, including chat messages, and, for demo uploads you consented to, to improve our detection.
• To meet legal, tax and accounting obligations.

We do not sell your personal data and we do not use it for advertising.

5. Who we share it with

Only with service providers that process it on our behalf, for the purposes above:

• Razorpay — payments and recurring mandates.
• MSG91 — SMS one-time passwords and reminders.
• Email delivery provider — receipts and reminders.
• Vercel and Neon — website hosting and the portal database.
• Cloudflare Turnstile — protecting forms and the demo from bots.
• Web3Forms — delivering contact-form messages to us.
• IFM — an AI provider that generates the chat assistant's replies from the messages you type.

We may also disclose data where the law requires it, for example to a government authority with a valid legal request.

6. How long we keep it

• Account and subscription data: while your subscription is active, and for up to 8 years after it ends for tax and accounting records.
• Sign-in and one-time-password records: up to 90 days.
• Website chat: not stored on its own. If you ask to be contacted, the conversation is kept with your sales lead until we have dealt with your enquiry; hashed IP rate-limit records are kept for 30 days.
• Demo uploads: until you ask us to delete them.
• Footage on your device: as configured on the device (30 days by default); it is erased when the device is returned.

7. Your rights

You can ask to access, correct or erase your personal data, withdraw a consent you gave, or nominate someone to exercise these rights on your behalf. Email [email protected]. We reply within 30 days. Erasing your account ends your subscription; records we must keep by law are retained only for that purpose.

8. Security

Connections to the portal, the app and the device are encrypted. Devices accept only signed access passes from ExtraEyes, and only accept software updates signed by ExtraEyes. Access to customer data inside ExtraEyes is limited to staff who need it.

9. Children

Our services are for businesses and adults. We do not knowingly collect data from anyone under 18.

10. Grievance officer

Grievance Officer, ExtraEyes Edge Solutions. Email: [email protected]. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Changes

We will post changes here and update the date above. For significant changes we will notify subscribers by SMS or email.