Privacy
This public page sets no cookie unless you choose a colour theme yourself: then one cookie stores only that choice, so the page remembers it for a year. The language is part of the address, not a cookie. It loads nothing from a third party and runs no script. The fonts and the stylesheet come from this same server. Nothing about your visit is sent anywhere or used to profile you. The web server keeps ordinary access logs (IP address, time, path) for operating and securing the service. Those logs rotate by size, not by date — a small fixed amount is kept and the oldest is discarded first. They are not analysed and not used to profile anyone.
If you write to us at hello@techrevati.com, we keep your message and address for as long as the enquiry is open and accounting law requires, and for nothing else.
The product is a different matter, and a stricter one
Prova installed at a customer's site processes personal data on that customer's instruction: they are the controller, we are the processor, and it is governed by a written agreement, not by this page. What the product itself does is designed to keep that processing as small as it can be:
- in an incident snapshot, persons are anonymised on the camera — coarsely pixelated by default (the silhouette policy) — before the image exists anywhere else, and a site may run with no image at all;
- pictures for drawing zones are a different thing: switched off by default and used only to draw a camera’s zones, they show the whole scene and are not anonymised; they are kept only in memory, never written to disk, and deleted after at most 24 hours;
- a record carries a class (person or vehicle), an ephemeral track id, geometry and time. Never a name, a face template, a biometric, or an attribute such as colour or clothing;
- no video is uploaded, stored or streamed;
- evidence images are deleted on a stated retention schedule (72 hours by default; each customer sets its own period, and one confirmed incident can be held for one case with a named owner and an end date, never longer than a year); the incident, its hash and the fact of the deletion remain;
- every sign-in, every opening of an evidence picture, every export and every administrative action is written to an audit log; the customer sees who opened pictures and when TechRevati staff entered its account;
- the registry runs on a server in Frankfurt (Hostinger); the provider's weekly whole-server backups are kept in Lithuania.
Account invitation e-mail. When Prova staff create a customer account, the first administrator invitation may be delivered by Lettermint (Netherlands; e-mail processed in the EU). That path carries the recipient's address and the message with its one-time link — never video or evidence images. Lettermint keeps a sent message for at most 28 days. Without it, we send the invitation as a one-time link by other means.
Sign-up confirmation e-mail. When a company accepts the Prova agreement through a sign-up invitation, the person who accepted gets a confirmation through Lettermint: the two confirmations they gave, with their name and function and the company's name and registration number, and the two accepted texts (the agreement and the data processing agreement) — with the Standard Contractual Clauses the data processing agreement incorporates and, where it is completed for the acceptance, their Annex I. TechRevati keeps the acceptance record itself for the term of the agreement and five years after it ends, as evidence of the contract; for that record TechRevati is the controller.
E-mails about TechRevati’s representative in Serbia. When a company accepts, or TechRevati or the company ends, an appointment as TechRevati’s representative in Serbia, the person who accepted and TechRevati receive the record through Lettermint: the person’s name, function and account e-mail, the IP address of the acceptance and the final appointment document. The representative’s contact address is told when the controllers or sites its record covers change, and the administrators of a customer with sites in Serbia are told when the representative competent for them changes. TechRevati keeps the appointment evidence while the appointment lasts and five years after it ends; for it TechRevati is the controller.
Analytics on cameras where people work can fall under employee-monitoring law, even though Prova does not identify, score or evaluate anyone; it needs a DPIA and, in most jurisdictions, consultation of worker representatives. We will say so in the first meeting rather than the last.
Controller for this website: TechRevati d.o.o. — hello@techrevati.com.
Data protection officer: not designated.
Privacy & Compliance Lead (TechRevati d.o.o.): hello@techrevati.com