Privacy policy

1. Who is responsible

Blockfactory Sp. z o.o. is the controller of account, billing, website security and support information for its own service operations. For personal data in camera settings, instructions, observations and alerts processed on a business customer’s behalf, that customer determines the purposes and is normally the controller; we act as processor under the data processing addendum. If you are filmed by a customer, contact that camera operator about the monitoring. We can help route a request when we can identify the relevant operator.

2. Footage, frames and AI providers

When you choose Local model for detection, Station processes the masked frames with an optional model on that computer, without sending them to a cloud AI provider. Assessment results, incident information, usage counts and device health still reach our API. Model downloads contact the selected upstream download hosts. Setup paths are encrypted for the Station; our API stores the encrypted commands and model status, not plaintext paths. Local detection has no AI provider token charge but uses your hardware and electricity. It still requires an active Agentinosaurus account and API connection. Camera Chat is separate and continues to send its images and questions to OpenAI when used.

With a cloud AI provider, Station reads your camera stream on your network, selects frames and sends them directly to the AI provider selected for that camera (OpenAI or TypeSafe AI) using your API key, together with Event instructions and relevant assessment history. Those frames do not pass through our application API. This is external AI processing, not analysis confined to your home or business. The selected provider receives images that may show people, surroundings, documents and other personal or sensitive information.

Our API receives the resulting assessments, incident descriptions, timestamps, identifiers, camera health and usage information. Descriptions can reveal personal information even without an image. We also exchange connection information to enable direct Station-to-browser viewing and snapshots; that connection information can contain network addresses.

If you select TypeSafe AI, Station sends the same categories of selected frames and instructions directly to TypeSafe AI using your key. Review its current terms, privacy policy, processing locations and retention settings before selecting it. OpenAI-specific data controls described below do not apply to TypeSafe AI. Its image API is experimental and may change or become unavailable. We do not automatically switch providers if a request fails.

Your OpenAI contract, project settings and applicable policies govern its handling of your inputs and results. OpenAI states that API data is not used for model training by default unless you opt in. Its default abuse-monitoring retention can be up to 30 days, with exceptions and additional retention for some features or legal and safety purposes. Zero Data Retention requires eligibility and configuration and is not supplied merely by using Agentinosaurus. Review OpenAI’s current data controls before monitoring personal or sensitive information.

When you use Camera Chat, Station captures three fresh frames, or uses the retained incident snapshot when you ask about an incident, and sends them with your question and recent answers directly to OpenAI using your key. Questions and answers pass through our API in transit to reach your browser; we do not store a chat transcript. Station keeps the last three questions and answers in memory for follow-up questions and forgets them when the conversation closes. We record usage, such as token counts and estimated cost, without questions, answers or images.

Context you add to a camera, such as a description of the place and the names, descriptions and positions of areas, is stored encrypted with the camera and sent to your AI provider with assessments. Hidden areas are painted black on Station before motion filtering, buffering, snapshots and any request, and their names are never sent. The still image you use to draw areas travels directly from Station to your browser and is not saved by our API.

3. Information we receive

Account information includes your email, protected password hash when you set a password, verification and session records, accepted terms version and date, the language you used, support communications and billing references. We send account and billing emails in that language. Stripe handles payment details; our application does not collect or store your full payment-card number.

If you use Google sign-in, Google supplies your verified email and a stable account identifier so we can create or connect your account. Google receives the sign-in request and related browser metadata under its own privacy policy. We do not request access to your Gmail, contacts, Drive or camera footage through Google sign-in, and do not retain Google access or refresh tokens.

When you subscribe, we record the plan and camera slots you ordered, when you asked for the service to start immediately and which terms version was shown, the contract confirmation we sent you and any withdrawal statement, including your name, account email, the time we received it and the refund made.

Workspace information includes camera and Station names, connection settings, pairing and authorization records, Event instructions, schedules, saved provider credentials, AI observations, incidents, Messages, notification preferences and webhook configuration and delivery records. Names, URLs, instructions and support material may themselves contain personal data.

Technical information includes IP addresses and request metadata, platform and software versions, timestamps, health and usage counters. Desktop Station diagnostics use predefined error codes, processing stages, platform/version and occurrence counts linked to the Station/account, rather than uploaded raw logs, images, messages or AI keys. Diagnostic handling and availability vary by platform. Do not send passwords, API keys or unnecessary footage in support messages.

4. Purposes and legal bases

We use account and service information to perform our contract with you (GDPR Article 6(1)(b)); accounting and other legally required records to meet legal obligations (Article 6(1)(c)); and proportionate security, abuse prevention, troubleshooting, business contact and legal-claims processing for our legitimate interests (Article 6(1)(f)), balanced against your rights. We keep purchase, immediate-start and withdrawal records to perform the contract, to meet consumer and accounting obligations and to establish or defend legal claims. Where consent is legally required for an optional activity, we obtain it separately and you may withdraw it without affecting earlier lawful processing.

Required account information is necessary to provide access; without it we cannot create or operate your account. Optional features such as push and Webhooks need the information required for their delivery. Browser permission to receive push is a technical choice, not a lawful basis for all camera monitoring. The camera operator must establish its own lawful basis, including any additional condition for sensitive data.

5. Recipients and your choices

Authorized personnel and the service providers listed in section 6 process information as necessary to operate, secure or support the service. Each receives only what its function requires; for example, Resend receives the recipient address and content of the emails it delivers, and Cloudflare receives request metadata such as IP addresses when traffic reaches it.

If you enable push, your browser or operating-system push provider receives a subscription endpoint and encrypted notification delivery. Our push content is a generic notice rather than a scene description. If you enable Webhooks, incident information is delivered to the endpoint you choose; its operator can retain and further process it. Your recipients and your AI provider are services selected by you, not automatically our subprocessors for footage.

If you turn on Email for an Event, alert emails to your account address contain the Event and camera names, the time and the incident description, but no images. Resend delivers them and your email provider stores them under its own terms.

If you enable native notifications, Android uses Google Firebase Cloud Messaging (FCM) and iOS uses Apple Push Notification service (APNs). Delivery involves installation/device identifiers or tokens, the app identifier and a generic notification; language determines the displayed wording. We do not include footage, frames, incident descriptions, camera names or AI keys in these push payloads. You can disable alerts in the app or operating-system settings. Firebase Analytics is not enabled. These services may process technical metadata outside the EEA; see their privacy and processing terms.

If you connect Zapier, it receives your account email to label the connection, camera and Event names, incident identifiers, timestamps and links to authenticated workspace pages. Incident summaries are shared only if you allow them when connecting and enable them for that automation. We do not send footage, frames, camera credentials or AI provider keys to Zapier. Zapier and the apps you connect may retain and further process the information under their own terms. Disconnecting stops future access and pending deliveries; it does not delete copies already received by those services.

We may disclose information where legally required, to protect legal rights or security where lawful, or as part of a business reorganization subject to appropriate confidentiality and data protection safeguards. We do not sell personal information or customer footage, or use customer content to train general-purpose AI models.

Website analytics

We use Vercel Web Analytics for aggregate page views and product actions, such as registration requests, Station download clicks and checkout creation. It does not use analytics cookies. We remove URL query parameters and fragments and group private workspace paths before sending them. We do not attach account identifiers, email addresses, camera names, footage, prompts or API keys to analytics events. Vercel receives technical request information needed to provide analytics. See https://vercel.com/docs/analytics/privacy-policy for its processing practices.

6. Service providers and locations

We use the providers below for the stated purposes. Where they process personal data on our behalf, applicable data processing terms govern that activity; this table also identifies the providers relevant to the DPA subprocessor schedule. Stripe acts independently for its payment-controller activities, and Google sign-in is distinct from Firebase delivery. Providers may also independently process their own service, security or legal-compliance data under their terms. We do not characterize every activity of a provider as having the same GDPR role.

OpenAI and TypeSafe AI are not on this list: you select and contract with your AI provider directly, and Station sends frames using your key, as section 2 explains. Browser push services, such as those run by Apple, Google or Mozilla, depend on your browser or device. Our Android app uses Google Firebase Cloud Messaging, as listed below. Webhook endpoints are chosen by you.

7. International processing

Our web application is hosted on Vercel. The API and database are hosted on DigitalOcean in Frankfurt, Germany; configured backup locations and retention must be considered separately from web hosting. Station installers are stored in Cloudflare R2 in Western Europe, which distributes software rather than camera footage. Resend uses the configured Ireland sending region. These regional choices do not mean that all provider support, routing, security, push or other processing stays in the EU.

Providers and recipients may process information outside your country, including outside the EEA. An EU company or European hosting does not mean every processing activity stays in the EU. Where we arrange an EEA personal-data transfer, we use an applicable adequacy decision, including the EU-U.S. Data Privacy Framework for certified recipients, or appropriate safeguards such as European Commission Standard Contractual Clauses, with additional measures where required. Contact us for the safeguards applicable to your data. You must assess the location and transfer terms of your selected AI provider project and recipients you independently select.

8. Retention and deletion

Desktop Station pending frame windows have a five-minute processing deadline and are cleaned up while Station runs. Mobile Stations use bounded in-memory observation queues and an encrypted result outbox; they do not have an identical desktop frame-spool lifecycle. Incident snapshots normally expire after seven days, or earlier at storage limits. Android and iOS limit their local snapshot stores to 200 items. Desktop snapshots are local JPEG files protected by device access controls; mobile snapshots are encrypted in local storage. Cleanup requires the app or Station to execute. Provider copies, exports and independent backups have their own retention.

Detailed BYOK assessments and completed notification or webhook delivery records are generally pruned after 30 days by cleanup jobs. Desktop diagnostic entries expire 30 days after the last report, or when their Station no longer exists. Incidents, Messages and configuration are separate workspace records retained until removed or account deletion is completed. Saved provider keys remain until removed or deletion; removing them here does not revoke the key with its provider. Push registrations are removed on relevant sign-out, revocation, deletion or disable actions; copies in third-party infrastructure follow those providers’ terms.

Request account deletion in Settings → Security → Delete account or through https://www.agentinosaurus.com/en/delete-account, including by email if you cannot sign in. This removes account and workspace data, saved keys and integrations and cancels recurring subscriptions. Automated cleanup normally takes a few minutes, but temporary failures are retried; we email on completion. Identity verification is required. We retain legally required financial and contract records, and necessary security/legal-claim records for their applicable periods. Accounting records are generally retained for five years under applicable Polish accounting rules, subject to other legal duties or holds. Backup copies expire through the backup lifecycle and are not erased instantly. Contact us for the retention applicable to your records. Offline device files and copies held independently by recipients or AI providers require separate deletion; do not assume that uninstalling the app deletes your account.

9. Security and access

Sensitive server-side content and saved AI provider keys are encrypted at rest; passwords are hashed. Operational fields such as identifiers, timestamps, status and counters may remain readable so the service can operate. This is not end-to-end encryption: our authorized systems can decrypt the information needed to provide the service. No security control eliminates every risk.

Paired Stations receive usable provider credentials for authorized processing. Desktop pending frame storage is protected; desktop snapshot JPEGs rely on device access controls and are not individually encrypted by Station. Android and iOS encrypt retained snapshots and sensitive local state using platform-backed key protection. Use secure device accounts and full-disk encryption where available. No platform protects data from every compromised device or privileged administrator; remove local app data on devices you stop using.

Please report security vulnerabilities to support@agentinosaurus.com. Our security.txt file at /.well-known/security.txt gives the current contact. Do not access other people’s data, disrupt the service or publish details before we have had a reasonable chance to fix the issue.

10. Your rights

Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction and portability; object to processing based on legitimate interests; and withdraw consent where processing relies on it. Send a request to support@agentinosaurus.com. We may ask for proportionate information to verify identity and normally respond within one month, with any legally permitted extension explained to you.

You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or the competent authority where you live, work or consider an infringement occurred. Where we act as processor, we assist the camera operator in responding rather than independently deciding its monitoring purposes.

11. Children, decisions and updates

Accounts are for adults. Cameras can nevertheless capture children or vulnerable people; the operator must determine whether and how that monitoring is lawful. AI observations assist human review; the service is not intended to make solely automated decisions producing legal or similarly significant effects about individuals.

Our Cookies & local storage notice describes browser storage. We publish dated updates to this policy and give appropriate notice of material changes. A policy update does not itself authorize a new incompatible use of personal data.