Pumo Cam Terms of Service
1. Parties and acceptance
These terms are an agreement between Pumo AI ("Pumo", "we") and the company using the Pumo Cam service (the "Company" or "Customer").
Acceptance of these terms and of the attached Data Policy by the Company owner is a condition for using the cloud dashboard and binds the Company.
If Pumo changes these terms or the Data Policy, the Company owner is asked to accept the new version before continuing to use the dashboard.
2. The service
Pumo Cam analyses the existing CCTV cameras of the Company's branches on a device inside the branch and produces numbers, alerts and reports: visitor counting, conversion, queues, hygiene and safety, team commitment, kitchen, office and more, depending on the plan.
The branch device sends the numbers, events, configuration and blurred alert snapshots to the cloud so they appear in the dashboard and management reports; the analysis itself keeps running in the branch even when the internet is down.
The service is provided "as is" according to the agreed plan, and Pumo keeps developing and updating it.
3. The Company as data controller
The Company is the controller of the personal data collected in its branches (staff and customers). Pumo processes it on the Company's behalf to deliver the service, and also for the purposes in section 4 and the Data Policy.
The Company must post a clear "cameras in operation" notice at every entrance and in staff areas, and must never place a camera inside a restroom.
The Company must obtain each staff member's written consent before face recognition or named monitoring is turned on for that person, keep those consents and provide them on request, and remove the data of anyone who withdraws consent.
Pumo provides template notice signs and staff consent forms; the Company is responsible for reviewing them with its lawyer and using them.
The Company is responsible for its configuration, its users' accounts and any use of the service through its accounts.
4. Licence to use data to improve Pumo's products
The Company grants Pumo a worldwide, perpetual, non-exclusive, royalty-free licence, sublicensable to Pumo's service providers, to use all data generated through the service to develop, train, test and improve Pumo's products and models across all customers.
This data includes, for example: analytics and numbers, events and alerts, manager corrections and feedback, blurred image / video crops, embeddings of objects and food, configurations, and point-of-sale-linked data.
This licence is an essential part of the service and there is no dashboard setting to turn it off. Any exception must be written into a separate contract signed with Pumo.
The licence survives the end of the subscription for data collected before that date and for any models or products developed with it.
5. What Pumo will never do
Pumo will never sell the Company's raw data to anyone.
Pumo will never show another company data that identifies your company, your branches or your numbers.
Any market comparison shown to a customer is an aggregated percentile across at least 5 companies, without any single company's numbers or name.
Customers' faces are never stored: they are blurred in any photo or clip before it is kept or leaves the branch, and staff face templates stay on the branch device and never go to the cloud.
6. Subscription and payment
Prices, the subscription and the licence period are set in the quote or contract. Late payment may lead to suspension of the Company's cloud account after notice; branch devices keep analysing locally.
7. Termination and data export
Either party may terminate according to the notice period in the contract. Within 30 days of termination the Company may request a copy of its data (reports and numbers) in a readable format.
After termination Pumo deletes the Company's operational data from the cloud within the periods in the Data Policy, subject to section 4 and legal obligations.
8. Limitation of liability
Pumo Cam is a management aid; its numbers and alerts are AI estimates and can be wrong, and every decision about a staff member must be reviewed by a person.
To the extent permitted by law, Pumo is not liable for indirect losses or lost profits, and its total liability for any claim does not exceed what the Company paid Pumo in the 12 months before the claim.
Pumo is not responsible for internet or power outages or for faults of cameras and branch hardware it does not supply.
9. Governing law and disputes
These terms are governed by the laws of the Arab Republic of Egypt, including Personal Data Protection Law No. 151 of 2020 and the applicable Labour Law.
The courts of Cairo have jurisdiction over any dispute arising from them.
Data Policy
1. Data we process
Analysis numbers and events (visitors, queues, hygiene, commitment, kitchen, office…), branch and camera configuration, the Company's user accounts and security log, manager corrections and feedback, blurred alert photos and clips, small blurred crops of people, objects and food, embeddings of food and objects, and linked point-of-sale data.
No audio is recorded. Customers' faces are never stored: the head region of any person crop is pixelated on the branch device and pixelated again in the cloud.
A staff member's face template is created and kept on the branch device only, with that person's written consent, and never goes to the cloud or any third party.
2. Why we process it
To deliver the service: the dashboard, alerts, reports, notifications and support.
To develop and improve Pumo's products for all customers: training and testing models, measuring accuracy, building aggregated market comparisons and developing new features — under the licence in section 4 of the Terms of Service. This applies to every company; there is no opt-in or opt-out.
Crops that could identify a staff member are used only when that person has a recorded written consent; crops unrelated to anyone's identity (objects, food, zones) are used for every company.
3. Who sees what
The Company's users see only their own company's data, according to their role and branches.
Authorised Pumo staff see data to deliver the service, provide support and develop products; every support-mode access is recorded in the Company's log.
Other companies only ever see aggregated percentiles across at least 5 companies — never your company's numbers or name.
Pumo never sells raw data.
4. Security
Encrypted transport (HTTPS / WSS), scrypt password hashes, mandatory two-step verification for owners and admins, 2FA secrets and crops encrypted at rest (AES-256-GCM), and every security event logged.
Branch devices connect with their own per-device credential, and live video is never stored in the cloud.
5. Retention
Detailed events and numbers in the cloud: about 400 days; per-minute numbers: about 800 days; staff notes and their clips: as configured by the Company (default 30 days).
Learning corrections (structured, no images): 400 days; blurred crops: 90 days. Models and aggregates built from them may be kept after that.
After the subscription ends we delete the Company's operational data within 90 days, except what the law requires us to keep.
6. Sub-processors
DigitalOcean — cloud hosting and database (London data centre, United Kingdom).
Anthropic — the «Ask the Brain» feature only: the question and the aggregated numbers sent to the model at the time of the question, no images and no faces.
Browser push services (Google, Apple, Mozilla, Microsoft) — deliver encrypted notifications to the devices that turned them on.
We will inform companies of any new sub-processor by updating this policy.
7. Data location
Video and analysis stay on the branch device in Egypt. Cloud data is stored in DigitalOcean's London data centre, transferred with appropriate safeguards under Personal Data Protection Law No. 151 of 2020.
8. Individuals' rights
Any staff member or customer may ask the Company (the controller) to access, correct or delete their data, and Pumo helps the Company carry out the request. A staff member may withdraw consent to face recognition at any time.
9. Contact
For any data question contact the Pumo team through the support channel in the dashboard.