Legal

Privacy Policy

Effective date: November 2, 2026Last updated: November 2, 2026

This policy explains what information CamVue handles, why, who sees it, and what choices you have. We do not sell personal information, we do not use customer footage to train AI models, and we use only essential cookies.

Who we are and what this covers

This policy explains how SiteVue AI, Inc., a Delaware corporation (“SiteVue,” “we,” “us”), handles personal information in CamVue, our service for long-term storage of security camera footage, and on camvue.net. Our mailing address is 318 Seaboard Ln, Suite 110, Franklin, TN 37067.

CamVue is a business service. Our customers are organizations, and it is not for personal or household use. We handle two kinds of information, and our role differs for each:

Footage and related content that customers upload. The customer decides what to record and upload. For hosting, compression, verification, storage, retrieval, and deletion of this information, we act on the customer’s instructions, as its service provider or processor, under our Processing Terms. We do not use it for our own purposes, we do not sell or share it, and we do not use it to train AI models. If a person appears in a customer’s footage and has a question, the customer is the right place to start.
Account and website information about the people who use CamVue and visit our site. For this, we decide how it is used.

Information we collect

Information you give us

Account information: name, work email address, organization name, workspace address, role, and invitations you send.
Passkey data: the public key and credential identifiers for each passkey. The fingerprint or face template a device uses to unlock a passkey never leaves the device, and we never receive it.
Workspace FTP logins: the username we assign to each login and the password it uses. We keep what we need to check the password when a camera or recorder signs in. A password is shown to the customer once when it is created or rotated. These are access credentials and we treat them as sensitive.
Billing information: billing contact, plan, camera counts, and payment status. Card details go to our payment processor. We do not store card numbers.
Messages: what you write to us when you contact support.

Footage and related content

Recordings you upload, which may show people (including their faces and bodies), vehicles, license plates, and places, and may contain voices and other audio.
Source metadata in the files, which can include capture time, GPS location, and device details.
Information we create: compressed H.265 archives, poster images (still frames taken from recordings, which can show faces), checksums, duration, resolution, verification results, and the status of each recording.
Labels you add, such as camera and site names and retention settings.

CamVue does not run facial recognition or speaker identification. We do not create or store faceprints, face embeddings, voiceprints, gait templates, or other biometric identifiers or templates from footage.

Information collected automatically

Server logs and security records: IP address, browser and device type, pages and actions, FTP sign-in attempts, and timestamps.
Essential cookies, described below.

How we use information

To provide CamVue: to receive, process, compress, verify, store, and return footage, and to run workspaces and sign-in.
To send verification, invitation, account recovery, billing, and other service emails. Account recovery sends a one-time link to the person’s verified email address that lets them add a new passkey.
To secure the service, prevent fraud and abuse, and enforce our Acceptable Use Policy.
To support customers, fix problems, and measure how the service performs.
To comply with the law and respond to valid legal requests.
To develop and improve the service using account, billing, and log information, and information about how the service performs. We do not use footage for this.

Artificial intelligence

We may use AI to compress your footage and to provide additional features. We don’t use your footage to train AI models.

CamVue does not use customer footage, audio, poster images, or metadata, including location, to train AI models, and we do not allow our service providers to. If we ever wanted to, it would be a separate setting that a workspace owner would have to turn on, and it would not apply to footage already uploaded unless the owner agreed. CamVue does not run facial recognition and does not create faceprints, voiceprints, or other biometric identifiers or templates from footage, and we do not use footage to infer characteristics about a person.

How we share information

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not sell or rent recordings to data brokers. “Sell” and “share” in this policy have the meanings in the California Consumer Privacy Act. We share information only as follows:

Service providers and subprocessors that process information for us under written contract. They fall into these categories: cloud infrastructure and storage in the United States, email delivery, and payment processing. They may use the information only to provide services to us, and may not use it for their own purposes or to train models. We give a list of subprocessors on request.
Your organization. Workspace owners and admins can see the people in their workspace, along with their activity and the footage.
Professional advisors such as lawyers, accountants, and insurers, under a duty of confidentiality.
Legal requests. We do not disclose the contents of footage, audio, poster images, or location unless we have the customer’s documented instruction, or legal process that we have determined is sufficient for content under the Stored Communications Act. We do not treat a subpoena, by itself, as sufficient for content. We may disclose non-content account information, such as the subscriber’s name, billing contact, plan, and payment records, where that Act allows it. Unless the law, a court, or a true emergency prevents us, we tell the affected customer before we disclose its content. We preserve records when a request that 18 U.S.C. § 2703(f) requires us to honor reaches us. We may disclose information in an emergency involving danger of death or serious physical injury, limited to what that emergency needs.
Safety and rights. We may disclose information to protect the security of our service or the rights, property, or safety of others. If we have actual knowledge of apparent child sexual abuse material, we will report it to the National Center for Missing & Exploited Children and preserve it as the law requires.
Business changes. If we merge with or are acquired by another company, or sell assets, information may be transferred. We will give notice as the law requires.

We do not disclose footage to a person just because they appear in it. We pass the request to the customer, unless the customer instructs us otherwise or the law requires us to disclose it.

Who at SiteVue can see footage

Customer footage is the customer’s confidential information. We access it only to provide and secure the service, to comply with the law, or with the customer’s permission. We do not browse footage. Access is limited to people at SiteVue who need it for those purposes, and they are bound by confidentiality. Our administrative console can manage workspaces and people but does not show recordings.

Cookies

We use only essential cookies, such as the cookie that keeps you signed in. We do not use advertising cookies, and we do not use third-party analytics trackers. Because we use only essential cookies, we do not show a cookie banner. If you block these cookies, you will not be able to sign in.

Where information is stored

We store footage in the United States, on encrypted storage kept in more than one data center. That is live replication, not a backup. We do not keep a separate backup of footage, and we cannot restore footage after it is deleted. CamVue is intended for use by businesses in the United States.

How long we keep information

Footage, archives, poster images, and file metadata we extracted from the recording: for the retention period of the workspace’s plan (until the customer deletes it on the keep-until-deleted plan, or 12 or 24 months, rolling), with each recording kept for 30, 90, 365, or 730 days, or until deleted, as the customer sets and the plan allows, or sooner if the customer deletes it. The clock starts when we accept the file. We do not keep a separate backup from which deleted footage can be restored. Deleted footage is unrecoverable. We may keep billing, security, and legal-hold records that do not include the recording itself, as described below.
Originals: we delete the original file after the archive passes our check. Archives are lossy and are not forensic copies. We cannot restore an original.
After a subscription ends: the customer has 30 days to download its footage. Then we delete it, as described in the Terms.
Holds and legal duties: a confirmed customer hold, a court order, a request under 18 U.S.C. § 2703(f), and a duty to preserve material we report under 18 U.S.C. § 2258A override ordinary deletion.
Account and billing information: while the account is active, and afterward for up to 7 years for tax, security, and dispute purposes.
Workspace FTP logins: until the customer revokes them or the workspace is deleted.
Logs: up to 12 months, unless needed longer for a specific security incident or legal matter.

Security

We protect information with access controls and with the encryption described here.

We encrypt footage at rest. We encrypt browser uploads and sign-in in transit, and uploads over FTPS and SFTP are encrypted in transit. Plain FTP is not: it sends the login and the video unencrypted. We offer it only because most cameras support nothing else.
People sign in with passkeys, not passwords. Camera uploads use a separate workspace FTP login, which is a password. We prefer that customers use FTPS or SFTP. On plain FTP the login and the video can be intercepted.
Our encryption at rest uses keys that we manage.

No method of storage or transmission is completely secure, and we cannot promise absolute security. If we confirm unauthorized access to customer footage or to account or FTP logins, we notify the workspace owner without undue delay and within 72 hours of confirming it, unless law enforcement asks us to delay. For footage, the customer is responsible for notifying the people shown and regulators who must hear from the business that decided to record. We notify regulators ourselves for account information we hold as the business.

Your privacy rights

Depending on where you live, you may have the right to ask us to:

tell you what personal information we have about you, and give you a copy;
correct personal information that is wrong;
delete your personal information;
opt out of the sale or sharing of personal information (we do not sell or share it as described above);
limit the use of sensitive personal information (we use it only to provide the service); and
not be treated unfairly for using these rights.

These rights come from laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and similar laws in other states. In California, the earlier exemptions for business contact information and for employee and business-to-business information ended on January 1, 2023, so we treat that information like any other personal information. Other states’ laws differ.

How to make a request

Email privacy@camvue.net. We may need to verify your identity, for example by asking you to confirm your work email address. You may use an authorized agent, and we may ask for proof of the agent’s authority. We will respond within the time the law requires, normally 45 days. If we deny a request, you may appeal by replying to our response. If your state allows, you may then contact your state attorney general. We do not sell or share personal information, so a Global Privacy Control signal has nothing to opt out of. We would still treat it as a request to opt out if we ever did either.

If you appear in a customer’s footage

We process footage for our customers. If you appear in footage and want to see or delete it, please contact the business that recorded you. If you send the request to us, we will pass it to the customer or ask you to contact the customer, as the law permits. We will not give you the footage unless the customer instructs us to or the law requires us to.

California disclosures

In the past 12 months we collected the categories of personal information below, for the business purposes described in “How we use information.” We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of people under 16. We use sensitive personal information only to provide the service the customer asked for, so we do not offer a “Limit the Use of My Sensitive Personal Information” link. We do not use footage or other personal information to infer characteristics about a person.

Category	Examples in CamVue	Sources	Disclosed to	How long we keep it	Sensitive
Identifiers	Name, work email, workspace address, IP address, passkey credential ID, FTP username	The person, their employer, their browser, cameras	Email delivery; cloud infrastructure; the customer’s admins; advisors and authorities as above	Account life, then up to 7 years for tax, security, and disputes	No
Commercial information	Plan, camera count, invoices, payment status	The customer; the payment processor	Payment processing; cloud infrastructure; advisors	Up to 7 years	No. We do not store card numbers.
Internet activity	Server logs, workspace actions, FTP sign-in attempts	Automatically, from the browser and FTP sessions	Cloud infrastructure	Up to 12 months	No
Audio, visual, and electronic information	Recordings, audio if present, poster images, archives	Customer uploads from cameras, recorders, and browsers	Cloud infrastructure; the customer’s authorized users; authorities when the law requires	The retention plan (12 or 24 months), or sooner if the customer deletes it. No restorable backup.	Footage can show faces and contain voices. We do not extract face or voice templates from it, and we treat it as potentially sensitive.
Geolocation	GPS and similar tags in files	The camera or recorder, through the customer’s upload	Cloud infrastructure; the customer’s authorized users	Same as the recording; deleted with it	Yes. Precise geolocation is sensitive personal information.
Professional information	Role in the workspace, employer name	The person; the customer	The customer’s admins; email delivery for invitations	Account life	No
Credentials	Passkey public keys; workspace FTP passwords	The user; the customer	Cloud infrastructure, as needed to sign in	Until revoked or the account ends	Yes, for FTP passwords and other logins that grant access

We use GPS location only to show the customer where its own camera was, and only because the file arrived with it. We do not feed it to models and we delete it with the recording. We do not draw inferences about people from personal information.

The categories of recipients are: cloud infrastructure and storage in the United States; email delivery; payment processing; professional advisors under a duty of confidentiality; law enforcement and government where the law requires; a successor in a merger or asset sale; and the customer’s own workspace admins. We do not disclose footage to any AI model provider. If a customer’s footage includes personal information about people who appear in it, we do not collect it from them directly. The customer must give those people any notice the law requires.

Children

CamVue is for businesses and is not directed to children. You must be at least 18 to use it. We do not knowingly collect personal information from children through our account or website. Customers’ footage may show children, and customers are responsible for lawful recording. We do not use footage, including footage of children, to train AI models. If you believe a child has given us personal information, contact us at privacy@camvue.net and we will delete it.

Changes to this policy

We may update this policy. We will post the new version here with a new “Last updated” date. For material changes, we will also email the workspace owner or post a notice in the workspace before the change takes effect. A change that newly allows training on footage, biometric processing, a new category of recipients, or any other materially different use of footage already uploaded does not apply to that footage unless the workspace owner affirmatively accepts it. Continuing to use CamVue is not acceptance of that kind of change. If this policy and the Terms differ about how we use Customer Content, the narrower use controls.

Contact us

Questions or requests about privacy: privacy@camvue.net. Legal questions: legal@camvue.net. Mail: SiteVue AI, Inc., 318 Seaboard Ln, Suite 110, Franklin, TN 37067.