Legal
Data Use Policy
OcuTrap collects capture images, location, device telemetry, and user actions to operate the platform and improve animal recognition. We do not sell user data. This policy explains exactly what we collect, why, how long we keep it, and how to request access or deletion.
What data does OcuTrap collect?
- Capture images: Photos taken by your OcuTrap devices when a trap triggers.
- Location data: GPS coordinates of trap deployments, attached to captures and device status events.
- Device telemetry: Battery level, cellular signal, firmware version, sensor performance metrics, system logs.
- User actions: Actions taken in the OcuTrap app: image labels confirmed or corrected, trap states changed, notifications acknowledged.
- Account data: Name, email, organization, billing information for paid accounts.
How is the data used?
- Operating the platform: Delivering captures to your account, sending notifications, providing the dashboard and reporting.
- Reliability and image quality: Capture images help us improve the photo pipeline, exposure handling, and field reliability of the camera (see Capture Photo).
- Reliability and debugging: Telemetry and logs diagnose field issues, plan firmware updates, and improve uptime.
- Billing and support: Account data is used to fulfill orders, run subscriptions, and respond to support requests.
- We do not sell user data. We do not share identifiable images or location data with third parties for advertising or marketing.
How long is the data kept?
- Capture images and metadata: Retained as long as the account is active. May be retained after closure in de-identified form for model training unless deletion is requested.
- Location data: Retained for the duration of the service agreement and up to 2 years after account closure.
- Device telemetry and logs: Retained for 1 year for operational and debugging purposes.
- Account and billing records: Retained for 7 years or as required by law.
- Employee and contractor records: Retained for 6 years after termination or as required by regulation.
Who can access the data?
- You: The account owner has full access to their captures, devices, and account data via the OcuTrap app.
- Authorized OcuTrap personnel: Engineers and support staff with role-based access for operating the platform, providing support, and improving the model.
- Service providers: Cloud hosting, payment processing, and email delivery vendors bound by data-processing agreements. They cannot use the data for any other purpose.
- Law enforcement: Only when legally required (subpoena, court order, or other binding legal process).
- We do not share identifiable images with third parties without your consent except as required by law.
How do I request access or deletion of my data?
- Email privacy@ocutrap.com with your account email and the request (access, correction, or deletion).
- We respond within 30 days, as required by GDPR and CCPA.
- Deletion removes images, location data, and account records from active systems. Backups are purged on their normal rotation schedule.
- You can also opt out of having your images used for model training without deleting your account. See Animal Recognition.
GDPR and CCPA rights
- Right to access: Request a copy of the personal data we hold about you.
- Right to correction: Request that we fix inaccurate data.
- Right to deletion: Request that we delete your personal data, subject to legal retention requirements.
- Right to portability: Request your data in a machine-readable format.
- Right to opt out of sale: Not applicable; OcuTrap does not sell user data.
- Submit any request to privacy@ocutrap.com.
Data security
All OcuTrap data is stored on encrypted servers. We use SSL/TLS for data in transit and AES-256 for data at rest. Access to storage systems is restricted to authorized personnel via role-based access controls. Suspected breaches must be reported immediately to privacy@ocutrap.com.
Changes to this policy
OcuTrap may update this policy. Significant changes will be communicated via email and a notice on this page. Continued use of the platform after notification constitutes acceptance of the updated policy.
Contact
For privacy and data questions: privacy@ocutrap.com. See also our Privacy Policy.