Legal & information

This Privacy Policy describes how DrishtiOne AI ("DrishtiOne", "we", "us" or "our") collects, uses, shares and protects personal data when you visit our website, request a demo, create an account or use our edge video-intelligence platform (the "Services").

Information we collect

• Account and organisation details, including name, work email, telephone or WhatsApp number, job role, organisation, site and user details.
• Enquiry, demo and support information, including messages, ticket history and communications with our team.
• Billing and transaction information. Payment card or banking credentials are entered into the payment provider's secure checkout and are not stored by DrishtiOne.
• Device and service information, such as gateway and camera identifiers, configuration, operational health, event timestamps, IP address, browser type and diagnostic logs.
• Incident information selected by the customer for synchronisation, which may include an event image, short video clip, camera, site, date, time and incident classification.
• Website usage and session information collected through essential cookies and similar technologies.

How we use information

• Provide, secure, maintain and improve the Services.
• Create and administer accounts, sites, cameras, gateways, subscriptions, invoices and support tickets.
• Deliver incident, billing, service and security notifications through enabled channels.
• Respond to enquiries, arrange demonstrations and provide customer support.
• Prevent fraud, investigate misuse, protect our systems and comply with applicable legal obligations.
• Send product or commercial communications where permitted; you may opt out of marketing messages at any time.

Sharing and retention

We disclose information only to authorised personnel, the customer organisation that controls the relevant account, and service providers needed for hosting, email, payments, support and security. We may also disclose information when required by law, to protect legal rights, or as part of a merger, financing or sale subject to appropriate safeguards. We do not sell personal data.

Information is retained for as long as necessary to provide the Services, meet contractual and legal requirements, resolve disputes and enforce agreements. Incident media follows the customer's configured retention period. Backups and statutory billing records may remain for a limited additional period.

Your choices and rights

Subject to applicable law, you may request access, correction, updating or deletion of your personal data, withdraw consent where processing relies on consent, or raise a grievance. Some records may be retained where legally required. Account users should first contact their organisation owner for data controlled by that organisation.

By accessing or using the Services, you agree to these Terms. If you use the Services for an organisation, you confirm that you are authorised to accept these Terms on its behalf. If you do not agree, do not use the Services.

Accounts and authorised use

• Provide accurate registration and billing information and keep it current.
• Keep credentials confidential, use appropriate access controls and promptly report suspected unauthorised access.
• Use the Services only for lawful security, safety and operational purposes and in accordance with applicable CCTV, employment, privacy and surveillance requirements.
• Give appropriate notices and obtain any permissions or consents required for cameras, recordings, alerts and persons who may appear in footage.
• Do not reverse engineer, disrupt, probe, overload, resell without permission, introduce malicious code, or use the Services to violate another person's rights.

Customer content and AI results

You retain ownership of content submitted through your account. You grant us the limited rights required to host, transmit and process that content to provide and support the Services. AI detections are decision-support signals and may contain false positives, missed events or classification errors. They do not replace trained personnel, emergency services or professional judgement. Customers must independently review alerts and maintain appropriate safety procedures.

Availability and intellectual property

We may update, maintain or temporarily suspend parts of the Services. Internet, camera, local network, power and third-party service failures may affect availability. DrishtiOne and its licensors retain all rights in the platform, software, models, documentation, branding and related technology, excluding customer content.

Warranties and liability

To the maximum extent permitted by law, the Services are provided on an "as available" basis. We do not guarantee that every incident will be detected or prevented. Neither party is liable for indirect, incidental, special or consequential loss to the extent such exclusion is permitted. Any liability cap or service commitment stated in a separately signed agreement will take precedence over this paragraph.

Suspension, termination and governing law

We may suspend access for non-payment, material breach, unlawful use or a credible security risk, with notice where reasonably possible. Provisions intended to survive termination will remain effective. These Terms are governed by the laws of India, and courts in Delhi will have jurisdiction, unless a signed customer agreement states otherwise.

Charges and billing

• Hardware or edge-device charges are one-time charges unless the order states otherwise.
• Recurring camera and optional service charges are billed monthly or yearly according to the selected billing cycle and purchased quantities.
• Applicable GST and other taxes are added to displayed prices. The final payable amount is shown before payment and on the invoice.
• Seven-day storage retention, email alerts and WhatsApp alerts are included where shown. Extended retention and phone-call alerts may incur additional recurring charges.
• Increasing cameras, gateways, retention or other services may create a prorated or immediate charge. Reductions normally apply from the next billing period unless stated otherwise at confirmation.

Renewal and failed payments

A recurring service renews for the selected billing period until cancelled. We may issue renewal reminders and unpaid invoices to the organisation owner. If a payment fails, we may retry it, notify the organisation owner and provide an option to pay the outstanding invoice. Continued non-payment may result in limited or suspended cloud services without affecting amounts already due.

Changes and cancellation

Organisation owners can request service changes or cancellation through the billing area or by contacting support. The confirmation screen will show the effective date and any charge or credit before a change is submitted. Cancellation stops future renewal and does not automatically refund the current billing period, hardware, installation, usage already delivered or taxes, except where required by law or expressly agreed in writing.

Refunds

Approved refunds are returned to the original payment method and may take the payment provider or bank's standard processing time. Payment-provider fees, completed installation work, activated licences and delivered hardware may be non-refundable where permitted by law. Nothing in this policy limits mandatory consumer rights that apply to you.

For customer-controlled camera, user and incident information, the customer determines why and how the information is processed, and DrishtiOne processes it to provide the Services under the customer's instructions. For account administration, billing, website enquiries, security and our own business operations, DrishtiOne determines the relevant processing purposes.

Edge-first architecture

Continuous video is designed to remain on the customer's local edge environment. The platform may transmit selected event metadata, thumbnails or clips to the cloud when configured by an authorised customer user. The customer controls connected cameras, detection settings, recipients and available retention choices.

Security and subprocessors

• We use proportionate technical and organisational safeguards, including access controls, authentication, transport encryption, logging, backups and environment separation.
• Access is limited to personnel and service providers who require it for their duties and are subject to confidentiality obligations.
• We may use subprocessors for infrastructure, database hosting, communications, payments and support. They may process only the information needed to deliver their services.
• No system is completely secure. Customers remain responsible for camera credentials, local networks, edge-device security, role assignments and endpoint access.

Security incidents and deletion

We will investigate confirmed personal-data incidents and notify affected customers as required by applicable law and contractual commitments. On termination, customer data will be returned or deleted in accordance with the agreement, configured retention, backup cycles and legal obligations. Customers should export required records before access ends.

Cookies are small files stored by a browser. We use essential cookies and local browser storage to operate the website and authenticated dashboard, remember login preferences where you request this, maintain security and preserve session state.

Cookie categories

• Strictly necessary: authentication, security, load balancing, form protection and core website operation.
• Preference: choices such as remembered login preference, language or interface settings.
• Analytics: aggregated information used to understand performance and improve the website, where enabled and legally permitted.
• Third-party: payment checkout or embedded services may set their own cookies when you use those features and are governed by their policies.

Managing cookies

You can remove or block cookies through your browser settings. Blocking strictly necessary storage may prevent login, checkout or other website features from working correctly. If we introduce non-essential cookies requiring consent, we will provide an appropriate choice before activating them.