Privacy Policy

Scaff Vision ("ScaffVision", "we", "us", or "our") operates the ScaffVision Site platform. We are committed to protecting the privacy and security of the data we process on behalf of our construction clients, as well as the personal data of users accessing our dashboard. This Privacy Policy describes how we collect, process, store, and share information through our SaaS safety intelligence platform.

1. Information We Collect

We process two categories of data: Account/User Information and Site Operational Data.

  • Account & Profile Information: When you register for a pilot, request a demo, or contact us, we collect details including your name, corporate email address, mobile phone number, company name, job role, and number of active sites.
  • CCTV Video Streams: We connect remotely to customer-provided IP camera feeds via RTSP. This includes live site footage of active construction zones, scaffolding assemblies, and material yards.
  • Drone Video Footage: Video files uploaded by customers to our cloud dashboard for batch inventory counts and structural checks.
  • Event Snapshots & Metadata: When the AI flags a safety violation (e.g., no helmet, unclipped harness) or a scaffolding structural risk, we capture and store a snapshot photo of the trigger frame, along with metadata (timestamp, camera ID, zone reference, detection confidence score).
  • Mobile App & Checklist Data: When inspectors or supervisors submit digital checklists or log near-misses, we capture GPS coordinates (to verify physical presence), timestamp, supervisor identity, and checkpoint photos.

2. How We Process and Use Video Feeds

We handle live video streams with strict privacy guardrails designed to respect site worker rights while ensuring continuous safety checks:

  • No Continuous Video Storage: Our AI safety agent processes video streams in real time (either at the edge or on secure cloud nodes) to identify safety violations and count inventory. We do not save, record, or store continuous video streams. Once a frame is processed and analyzed, it is immediately discarded.
  • Evidence Snapshots: Only the specific frames containing flagged safety violations, structural risks, or checklist attachment photos are permanently saved in our database to provide audit-ready evidence.
  • AI Model Training: Anonymized event snapshots may be used to train and calibrate our computer vision models to improve detection accuracy. Faces are blurred or obscured when training on historical logs.

3. Purpose of Processing

We process your data to fulfill our SaaS safety intelligence services, specifically:

  • Running continuous PPE compliance checks and structural safety flags.
  • Compiling automated, audit-ready compliance PDF reports (IS 3696, ISO 45001, BOCW Act).
  • Routing instant notifications (violations and inventory alerts) to configured recipients via WhatsApp and SMS.
  • Providing site managers with daily, comparative inventory counts.

4. Data Retention Policies

Data is stored in secure data centers located in India (to comply with local data sovereignty laws) and is retained based on your selected plan:

  • Basic Plan: Flagged event photos, checklists, and incident logs are retained for 30 days, after which they are permanently deleted from our servers.
  • Pro Plan: Retained for 90 days.
  • Enterprise Plan: Retained for 12 months (or custom retention duration per project agreements).
  • Account Profiles: Personal contact information of active site managers and dashboard administrators is retained as long as the subscription remains active.

5. Sharing of Information

We do not sell, rent, or trade your data to third parties. We share information only with authorized service providers under strict data-sharing agreements:

  • WhatsApp & SMS Gateways: Real-time alerts are routed through the WhatsApp Business API and SMS providers to send alerts to site supervisors.
  • Cloud Providers: Our servers, databases, and AI pipelines are hosted on secure Indian cloud infrastructure (such as AWS and GCP).
  • Project Management Syncs: On Pro and Enterprise plans, data can be synced to your third-party project management accounts (e.g., Procore, Microsoft Teams) at your direction.
  • Legal Compliance: We may disclose data if required to do so by Indian law or in response to valid requests by statutory health and safety regulators.

6. Data Security

We implement industry-grade technical and organizational measures to safeguard your safety logs:

  • All video connections and data exchanges are secured using Transport Layer Security (TLS 1.3).
  • Stored snapshots, checklists, and metadata are encrypted at rest using AES-256.
  • Access to the dashboard is protected by role-based access control (RBAC), requiring secure API tokens or unique credentials for every team member.

7. Your Rights and Controls

Under applicable Indian data protection laws, customer administrators have the right to: (a) access and export their compliance logs and snapshots; (b) request correction of account details; (c) request deletion of historical records before the plan retention window expires; and (d) withdraw RTSP camera credentials to pause monitoring at any time.

8. Contact & Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Privacy Team or Grievance Officer at:

Scaff Vision
Aurangabad, Maharashtra - 431001, India
Email: privacy@scaffvision.com