Privacy Policy
August 7, 2026
1. Who we are
Obzerve (“Obzerve“, “we“, “us“, “our“) provides AI-powered video analytics and computer vision software for security, safety and operational intelligence.
| Legal entity | OBZERVE INTELLIGENCE PRIVATE LIMITED |
| Company identification number | U62011GJ2026PTC180090 |
| Registered office | eSec One, Quadra 108, Off Rajpath Rangoli Road, Ambli, Ahmedabad 380015, Gujarat, India |
| Privacy contact | [email protected] |
| Grievance / Data Protection Officer | +91 9898171728 |
This Privacy Policy explains how we handle personal data when you visit obzerve.ai, contact us, apply for a role with us, or engage with us as a customer, partner or supplier.
2. Two very different roles — please read this first
Obzerve handles personal data in two distinct capacities, and different rules apply to each.
(a) As a controller — our own business data. When you use our website, submit an enquiry, apply for a job, or deal with us commercially, we decide why and how your data is processed. This Privacy Policy governs that activity.
(b) As a processor — data inside our customers’ deployments. Our software runs on video feeds owned and operated by our customers. Where our products process images of people, facial templates, licence plates or other personal data on a customer’s site, the customer is the controller and Obzerve acts as a processor (or, in some deployments, has no access to the data at all because processing happens entirely on the customer’s edge hardware or on-premise servers).
In those deployments:
- The customer decides what is recorded, who is enrolled, how long data is kept, and on what legal basis.
- The customer is responsible for signage, employee notices, works council consultation, consent where required, data protection impact assessments, and responding to individuals’ rights requests.
- Obzerve processes such data only on the customer’s documented instructions, under a written Data Processing Agreement.
If you believe your image or biometric data was captured by an Obzerve-powered system, please contact the organisation operating those cameras — they hold the records and control access. If you cannot identify them, write to [email protected] and we will help route your request to the responsible customer where we are able to.
Our standard Data Processing Agreement and current list of sub-processors are available at [obzerve.ai/legal] or on request.
3. What personal data we collect
3.1 Data you give us
| Category | Examples | Where from |
|---|---|---|
| Contact and enquiry data | Name, business email, phone number, company, job title, message content | Contact form, demo request, popup form, email, phone |
| Career data | CV/résumé, education and employment history, portfolio links, references, right-to-work information | Careers page, email applications |
| Commercial data | Billing contact, purchase order details, tax registration numbers, correspondence | Customer and supplier onboarding |
| Event and marketing data | Badge scans, webinar registrations, marketing preferences | Trade shows, campaigns, opt-in forms |
3.2 Data collected automatically
| Category | Examples |
|---|---|
| Technical data | IP address (truncated where feasible), browser type and version, operating system, device type, screen size, language |
| Usage data | Pages viewed, referring URL, time on page, clicks, downloads, scroll depth |
| Cookie and identifier data | Cookie IDs, session identifiers, analytics identifiers — see Section 8 |
| Security logs | Access logs, firewall and CDN records, error logs, records of blocked or abusive requests |
3.3 Data from third parties
Business contact information from LinkedIn, publicly available company sources, referral partners, resellers and lead-generation providers, where lawful.
3.4 What we do not collect on this website
We do not run facial recognition, biometric capture, or any video analytics on visitors to obzerve.ai. We do not knowingly collect special category data (health, biometrics, race or ethnic origin, religion, political opinions, trade union membership, sex life or sexual orientation) through this website, and we ask that you do not include such information in enquiry forms.
4. Why we use your data, and our legal basis
Under the GDPR, UK GDPR and equivalent laws, we rely on the following bases.
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Respond to enquiries and demo requests | Contact, enquiry | Steps at your request prior to a contract — Art. 6(1)(b); or legitimate interests — Art. 6(1)(f) |
| Provide and administer our products and services | Contact, commercial | Contract — Art. 6(1)(b) |
| Send B2B marketing about our products | Contact, usage | Consent — Art. 6(1)(a) where required; otherwise legitimate interests — Art. 6(1)(f) |
| Measure and improve website performance | Technical, usage, cookies | Consent for non-essential cookies — Art. 6(1)(a) and ePrivacy; legitimate interests for aggregate analysis |
| Recruitment | Career data | Steps prior to contract — Art. 6(1)(b); consent for talent-pool retention |
| Secure our systems and prevent fraud or abuse | Technical, security logs | Legitimate interests — Art. 6(1)(f); legal obligation — Art. 6(1)(c) |
| Meet accounting, tax and regulatory obligations | Commercial | Legal obligation — Art. 6(1)(c) |
| Establish, exercise or defend legal claims | Any relevant | Legitimate interests — Art. 6(1)(f); Art. 9(2)(f) for special category data |
| Export control and sanctions screening of counterparties | Commercial, contact | Legal obligation — Art. 6(1)(c); legitimate interests — Art. 6(1)(f) |
Where we rely on legitimate interests, we have carried out a balancing assessment and concluded that our interest in operating, securing and growing a business-to-business software company does not override your rights and freedoms. You can request a summary of that assessment at [email protected].
We do not carry out automated decision-making producing legal or similarly significant effects on website visitors, and we do not profile you for that purpose.
5. Who we share data with
We do not sell personal data. We do not share personal data for cross-context behavioural advertising. We disclose personal data to:
| Recipient category | Purpose | Examples |
|---|---|---|
| Hosting and infrastructure | Running the website and our systems | [Hosting provider], Cloudflare (CDN, security) |
| Analytics | Understanding site usage | [Google Analytics / alternative] |
| Communications and CRM | Managing enquiries and follow-up | [CRM name], [email provider] |
| Recruitment tools | Processing applications | [ATS name, if used] |
| Professional advisers | Legal, accounting, audit | Law firms, auditors |
| Channel partners and resellers | Fulfilling an enquiry you directed to them, or where you were introduced by them | Named at the point of introduction |
| Authorities | Where legally compelled | Courts, regulators, law enforcement |
| Corporate transactions | Due diligence in a merger, acquisition or financing | Acquirers and their advisers, under confidentiality |
A current list of sub-processors used in service delivery is maintained at [obzerve.ai/legal/sub-processors] and customers may subscribe to change notifications.
6. International transfers
Obzerve is established in India. If you are in the EEA, UK or Switzerland, your personal data will be transferred to and processed in India and potentially in other countries where our service providers operate.
India has not received an adequacy decision from the European Commission. We therefore rely on:
- Standard Contractual Clauses adopted by the European Commission (Decision 2021/914), and the UK International Data Transfer Addendum where relevant;
- a transfer impact assessment documenting the risks of the destination country and the supplementary measures we apply; and
- supplementary technical and organisational measures, including encryption in transit and at rest, access control, data minimisation, and a policy of challenging unlawful government access requests.
A copy of the relevant transfer mechanism is available on request at [email protected].
7. How long we keep data
| Data | Retention |
|---|---|
| Website enquiries that do not become opportunities | [24] months from last contact |
| Customer and supplier records | Duration of the relationship plus [8] years for tax and limitation purposes |
| Unsuccessful job applications | [12] months, or longer with your consent for the talent pool |
| Marketing contacts | Until you unsubscribe, plus a suppression record kept indefinitely to honour your opt-out |
| Server and security logs | [12] months |
| Cookie data | As stated in the cookie table, Section 8 |
We delete or anonymise data at the end of these periods unless a longer period is required by law or needed for an active legal claim.
8. Cookies and similar technologies
We use cookies and similar technologies. Non-essential cookies are set only after you consent through our cookie banner. You can change or withdraw your choices at any time via the “Cookie settings” link in the footer.
| Category | Purpose | Consent needed | Typical lifespan |
|---|---|---|---|
| Strictly necessary | Security, load balancing, form submission, remembering your cookie choice | No | Session to 12 months |
| Analytics / performance | Aggregate visitor statistics, page performance | Yes | [Up to 13 months] |
| Functional | Embedded video, chat widget, language preference | Yes | [Up to 12 months] |
| Marketing / advertising | Campaign measurement, remarketing | Yes | [Up to 13 months] |
A complete, itemised cookie table with provider names and expiry is maintained at [obzerve.ai/legal/cookies]. Rejecting non-essential cookies will not restrict access to any part of this website. See also our Cookie Policy.
9. Your rights
Depending on where you live, you may have some or all of the following rights.
If you are in the EEA, UK or Switzerland (GDPR / UK GDPR):Â access; rectification; erasure; restriction of processing; data portability; objection to processing based on legitimate interests; objection to direct marketing at any time; withdrawal of consent at any time without affecting prior processing; and the right not to be subject to solely automated decisions with legal or similarly significant effects.
If you are in India (Digital Personal Data Protection Act, 2023):Â access to a summary of your data and processing; correction, completion, updating and erasure; grievance redressal through our Grievance Officer; and nomination of another individual to exercise your rights in the event of death or incapacity.
If you are in California (CCPA/CPRA): know, access, delete, correct; opt out of sale or sharing — note that we do not sell or share personal information as those terms are defined; limit use of sensitive personal information; and freedom from discrimination for exercising your rights.
If you are in Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act), Japan (APPI), South Africa (POPIA), Saudi Arabia (PDPL), the UAE, Singapore (PDPA) or elsewhere, you have the rights granted by your local law, and we will honour them.
How to exercise a right: email [email protected] with the subject line “Privacy Rights Request”. We respond within 30 days (extendable by a further 60 days for complex requests, with notice to you). We may need to verify your identity before acting. There is no charge unless a request is manifestly unfounded or excessive. An authorised agent may act for you with written proof of authority.
Complaints:Â you may lodge a complaint with your local supervisory authority. In the EU, this is the data protection authority of your country of residence or workplace. In the UK, the Information Commissioner’s Office (ico.org.uk). In India, the Data Protection Board. We would appreciate the chance to resolve your concern first.
10. Security
We maintain technical and organisational measures appropriate to the risk, including: encryption in transit (TLS 1.2+) and at rest; role-based access control and least-privilege provisioning; multi-factor authentication for administrative access; network segmentation and firewalling; logging and monitoring; secure development practices and dependency scanning; vendor security assessment; background-checked personnel bound by confidentiality; documented incident response with breach notification within statutory deadlines (72 hours to supervisory authorities under GDPR where applicable); and regular backup and restoration testing.
[If accurate, state certifications here — e.g. “Obzerve maintains ISO/IEC 27001:2022 certification, certificate number X, issued by Y.” Do not claim certifications you do not hold.]
No system is perfectly secure. If you discover a vulnerability, please report it to [email protected] under our disclosure policy at [obzerve.ai/legal/security].
11. Children
Our website and products are directed at organisations, not consumers, and are not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact [email protected] and we will delete it. In India, processing of children’s data is subject to the specific restrictions of the DPDP Act, including the prohibition on tracking and targeted advertising directed at children.
12. Third-party links
Our website links to third-party sites, including LinkedIn and partner websites. We are not responsible for their privacy practices. Review their policies before providing personal data.
13. Changes to this policy
We may update this policy to reflect changes in our practices or the law. The “last updated” date above will change, and material changes will be notified by a prominent notice on this website or by email to active contacts at least [30] days before taking effect. Prior versions are available on request.
18. Contact
OBZERVE INTELLIGENCE PRIVATE LIMITED
eSec One, Quadra 108, Off Rajpath Rangoli Road, Ambli, Ahmedabad 380015, Gujarat, India
[email protected] · +91 9898171728
EU representative: [Name and address]