Legal

Data-processing agreement

Enterprise buyers ask for this. Draft — lawyer review required before launch. The signed order form prevails over this page.

1 · Roles

The customer is the data fiduciary for footage from its premises; Hypotenuse Analytics India Pvt. Ltd. processes it solely as processor, only to deliver detection, alerts, search and analytics.

2 · Scope & minimisation

Processing is limited to configured cameras, zones and analytics. Behaviour and counts by default; identities only under separately agreed modules with documented basis.

3 · Retention & deletion

Plan-window retention (trial 10 days; Starter 15; Professional 30; Enterprise as ordered), then deletion. Exported incident clips follow the customer's case-hold policy through the audit-logged workflow.

4 · Security & sub-processors

Encryption in transit and at rest, role-based access with audit logs. Cloud region [MOCK — confirm]. Sub-processor list (hosting, SMS/calling) is disclosed in the order form before signature.

5 · Audit & breach

Customers receive access and audit logs for their estate on request. Breach notification with readable logs and remediation support, per DPDP timelines.

6 · Edge deployments

On edge-box sites, video never leaves the premises; logs stay on the box. The same purpose limits and access rules apply.