1. Scope and roles
The customer is controller, or a processor authorized by its controller; we are processor or subprocessor accordingly. Processing lasts for the service agreement and the necessary return/deletion period. Its purpose is to host and organize camera settings, Event instructions, AI results and Messages and deliver requested alerts and support. Operations include receiving, storing, organizing, retrieving, transmitting and deleting that information.
Data can include names and identifiers supplied in settings, observed conduct and descriptions, times, places, device/network information and contact or delivery details. Data subjects may include customers, staff, residents, visitors and passers-by. Observations can incidentally reveal health or other sensitive information. Do not intentionally submit special-category or criminal-offence data unless the legal conditions and necessary safeguards are established. Raw frames sent directly from Station to your selected AI provider account are outside our hosted processing of those frames.
2. Documented instructions
We process customer personal data only on documented instructions in the agreement, product settings and authorized support requests, including for transfers, unless law requires otherwise. We inform you of such a legal requirement before processing unless prohibited, and inform you if we consider an instruction contrary to applicable data protection law. You are responsible for lawful instructions, transparency, the required authority to disclose data and the accuracy and necessity of the data you submit.
3. Confidentiality and security
We ensure that persons authorized to process data are bound by confidentiality. We apply risk-appropriate technical and organizational measures under Article 32, including access controls, encrypted transport, encryption of sensitive stored content and credentials, protected password hashes, separation by customer ownership, authorization of Stations and retention controls. We maintain and review security appropriate to the risks. These commitments do not mean that every metadata field or local snapshot is encrypted or that a device compromised under your control is protected from its administrator.
4. Subprocessors and international transfers
We may use subprocessors only under prior specific or general written authorization. The current subprocessor schedule, with each provider’s identity, function and processing location, is published in section 6 of our Privacy policy. By accepting this addendum, you give a general authorization for the providers on it. Under a general authorization, we will give at least 30 days’ notice of intended additions or replacements and an opportunity to object on reasonable data protection grounds. If no reasonable alternative resolves an objection, you may terminate the affected service with a refund of prepaid unused fees.
Each subprocessor must have a written contract with materially equivalent data protection obligations, and we remain responsible for its performance as required by Article 28. EEA transfers require a lawful Chapter V mechanism and necessary supplementary safeguards. Resend may deliver communications we send on your behalf; infrastructure providers may host or transmit hosted customer data as set out in that schedule. Stripe’s independent payment-controller activities, and your AI provider and webhook recipients separately chosen and contracted by you, are not automatically processing under this subprocessor authorization.
5. Assistance and breaches
Taking account of the processing and information available to us, we assist you with data-subject requests, security duties, breach assessment, impact assessments and prior consultation. We forward relevant requests and do not respond on your behalf without instruction unless law requires it. We notify you without undue delay after becoming aware of a personal data breach affecting your customer data, provide available information on the nature, likely consequences, contact point and mitigation, and supplement information as it becomes available. You remain responsible for any required notifications to authorities or affected individuals.
6. Evidence and audits
We make available information necessary to demonstrate compliance and allow and contribute to audits, including inspections by you or an authorized independent auditor. We may agree reasonable notice, confidentiality and security arrangements that protect other customers without preventing statutory audit rights or urgent investigation. We inform you immediately if an audit instruction infringes applicable data protection law. Any charges for exceptional assistance must be agreed in advance and must not prevent mandatory cooperation.
7. Return and deletion
At the end of processing, at your choice we return or delete customer personal data and delete existing copies unless law requires retention. Contact [email protected] to arrange return or deletion and its scope. We confirm the applicable timetable and any legally required retention, restrict retained data to that purpose and isolate backup copies from ordinary use until overwritten under the applicable backup schedule. Your separate copies, local Station files and independently contracted providers remain your responsibility.
8. Order of priority
This addendum prevails over conflicting general terms on the processing of customer personal data. Standard Contractual Clauses and mandatory law prevail over this addendum where applicable. No commercial liability clause limits a data subject’s statutory rights or a party’s duties to a supervisory authority. Contact [email protected] if your organization needs a signed agreement or a copy of the subprocessor schedule.