Privacy Policy
Effective
This policy explains how Occurra, Inc. ("Occurra", "we", "us") handles personal data in the Occurra video management service (the "Service") and on this website, occurra.com. The Service is offered to businesses and other organizations (our "Customers") and is used by the people those organizations invite (their "Users").
Two roles
For the Customer's data, we act on the Customer's behalf. Camera configuration, events detected in video, images, search data, cases and everything else a Customer's sites produce ("Customer Data") belong to the Customer. We process it only to provide the Service under the Customer's instructions and our Terms of Service. The Customer decides which cameras to connect, who may use them and what is kept, and is responsible for notifying and, where the law requires it, obtaining consent from the people its cameras record. If you appear in footage from a site that uses Occurra, please contact the organization operating that site.
For account and website data, we decide. We are responsible for the data we collect to sign Users in, secure the Service, and answer messages sent to us.
In the language of data protection laws, we are the Customer's processor or service provider for Customer Data, and the controller or business for account and website data.
What we collect
When you sign in
The Service uses "Sign in with Google". Google shares your email address, whether Google has verified it, your name and your profile picture with us. We request no other Google data. We do not receive your Google password and we cannot access your Gmail, Drive, contacts or any other Google service.
We store your email address, name and profile picture URL together with your organization memberships, role, the sites and hours your administrator grants you, and your preferences in the Service.
While you use the Service
- Security and audit records. Sign-ins, with your IP address and browser type; changes you make to servers, cameras, members, rules, settings, bookmarks and cases; and, as reported by the Customer's recorders, when you view or export footage. Customers' administrators can see these records.
- Messages to the AI assistant, and its replies.
- Telegram link, if your organization enables Telegram alerts and you connect your account: your Telegram chat identifier.
Data from the Customer's cameras
Video recordings stay on the Customer's own recorder. When you watch a camera remotely, its video travels through our servers to your browser but is not stored by us, except clips a User attaches to a case or that an alert sends to Telegram. To make footage searchable and to run the Customer's rules, the Service stores in the cloud:
- event records describing what was detected (for example a person or a vehicle), with the camera, the time, the location in the frame and descriptive attributes such as color;
- small still images ("best shots") of detected people and objects;
- numerical descriptions of those images and of event text, used for search, including appearance descriptors that let the Service find other sightings of a similar-looking person or vehicle;
- identities a Customer chooses to name ("enrolled identities"): the name it gives, sample images and their appearance descriptors;
- bookmarks, cases and the files attached to them;
- camera and recorder settings, including the credentials needed to reach the cameras.
On this website
occurra.com sets no cookies and runs no analytics. The contact form opens a message in your own email program; if you send it, we receive what you wrote and your email address. Our servers and hosting providers keep standard request logs, such as IP addresses, for a short time.
How we use it
- to sign you in and enforce the access your organization grants you;
- to provide the Service's features, including search, rules, alerts and the AI assistant;
- to keep the Service secure, investigate misuse and keep the audit trail Customers rely on;
- to operate, maintain and troubleshoot the Service; our staff look at Customer Data only when needed for support or to investigate a problem;
- to support Customers and answer your messages;
- to meet legal obligations.
We do not sell personal data, share it for advertising, or use it to build advertising profiles. We do not use Customer Data or your Google account data to train AI models.
Who we share it with
We share data only with the service providers we need to run the Service:
- Google Cloud hosts the Service and its databases, in the United States. Google also provides sign-in, and Firebase Hosting serves this website.
- AI model providers. When you use the AI assistant, your messages and the information it needs to answer, including camera images and event data, are sent to an AI model through OpenRouter, which passes each request to the provider of the model in use (for example Google, OpenAI, Anthropic or another provider OpenRouter offers, including providers based outside the United States). We send this data only to produce the assistant's answer to you; providers handle it under their terms with OpenRouter. Privacy blurring applies to video shown in the Service; images sent to the assistant are not blurred.
- Telegram, only if your organization enables Telegram alerts and you link your account: alert text, and for permitted Users, images and short video clips of the event, are delivered to your Telegram chat. Messages you send to the Occurra bot reach the AI assistant.
Data about a Customer's members and rules is also sent to that Customer's own recorders, so they can enforce access on site. We may disclose data when the law requires it, to protect the rights, safety or property of Users, Customers or the public, or as part of a merger or acquisition, in which case this policy continues to apply to it.
Google user data
Occurra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use your name, email address and picture only to sign you in, show who you are in the Service and attribute your actions in the audit trail. Your name and email address reach an AI model provider only when a User of your organization asks the assistant about its members, rules or audit trail, for example who changed a rule. We transfer them only to the providers above, and only to provide those features. We do not use them for advertising, sell them, or use them to develop or train AI or machine-learning models.
How long we keep it
- event records, best shots and their search data: up to 90 days;
- hourly activity summaries derived from events: until the Customer asks us to delete them;
- audit records: 90 days;
- AI assistant conversations: deleted after 30 minutes without activity, or when you clear them;
- pending Telegram alerts: up to 24 hours;
- account data, enrolled identities, bookmarks, cases and attachments: until the Customer deletes them, or asks us to delete them after it stops using the Service.
Customers' administrators can delete events and other Customer Data at any time. When a Customer stops using the Service, it may ask us to delete its Customer Data; we will do so within 30 days unless the law requires us to keep it.
Cookies and browser storage
The Service uses only what it needs to work: a session cookie that keeps you signed in for up to 24 hours, a cookie that tells the page a session exists, a cookie remembering where to return after sign-in, and Google's own sign-in security cookie. Your browser also stores your chosen organization, panel layout and similar preferences on your device, and keeps your current AI conversation and recently shown images in the tab's temporary storage, which the browser clears when you close the tab. We use no analytics, advertising or tracking cookies.
Security
Connections are encrypted, access is checked against the role and sites your organization grants you, storage holding attachments is private, and recorders reach the cloud without opening ports on the Customer's network. No system is perfectly secure; if we learn of a breach affecting your data we will notify the affected Customers and, where the law requires it, you.
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to complain to a data protection authority. Where the data is Customer Data, please contact your organization's administrator; we will help them answer you. For your account data or anything else, write to legal@occurra.com. We will answer within 30 days and will not treat you differently for asking.
You can also revoke Occurra's access to your Google account at any time from your Google account settings. Revoking access signs you out but does not delete your account data: ask your organization's administrator to remove you, or write to us and we will delete your account data within 30 days.
International transfers
We are based in the United States and the Service runs there. Some providers, such as AI model providers and Telegram, may process data in other countries. If you are in a country whose law restricts such transfers, write to us and we will tell you which safeguards apply.
Children
The Service is for organizations and is not directed to children. We do not knowingly allow anyone under 18 to use it. Customers' cameras may record people of any age; that footage is Customer Data, and the Customer is responsible for it as described above.
Changes to this policy
We will post any change here with a new effective date. If a change materially affects how we use personal data, we will tell Customers before it takes effect, by email to their administrators or by a notice in the Service.
Contact
Occurra, Inc.
3328 Reta St, Glendale, CA 91214, USA
legal@occurra.com