Privacy Policy

Mangouste AI Inc. ("Mangouste AI", "we", "us") provides a video security platform for businesses (B2B). The Mangouste Central web and mobile application lets authorized users of our customers view their sites' cameras, review recordings, run searches and, where those features are enabled, receive alerts.

 

This policy describes what personal information we process, why we process it, who we may communicate it to, how long we keep it and what your rights are. It is published in accordance with the Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) and, where it applies, the Personal Information Protection and Electronic Documents Act (PIPEDA, Canada).

 

It applies to you if you use the application as an authorized user of a Mangouste AI customer, or if your organization uses our services. The application is not intended for the general public at this time.

 

Some features are included in the application but only become available once we enable them for your organization. The information actually processed therefore depends on the features enabled for your account. If new features become available in the service and substantially change the information processed or the purposes of processing, this policy is updated accordingly.

 

2. Definitions

 

In this policy:

• "Mangouste AI" means Mangouste AI Inc., a duly incorporated business corporation with a place of business at 204 Rue du Saint-Sacrement, Suite 300, Montreal (Quebec) H2Y 1W8; in that name, "AI" stands for "artificial intelligence" and « analyse intelligente » ("smart analysis");

• "application" means the Mangouste Central web and mobile application of Mangouste AI;

• "customer" means the organization that has entered into an agreement with Mangouste AI for the use of the service for one or more of its sites;

• "AI" means the automated software analysis techniques used by the service;

• "site" means a physical location of the customer covered by the service, where cameras or other equipment are installed;

• "process" means an operation performed on information or data, such as collecting, using, consulting, communicating, retaining or destroying it;

• "authorized user" means an individual who has been granted individual access to the application, in line with their role within the customer's organization;

• "video" means any visual content from a site's cameras, including live streams, recordings, clips and snapshots (images), as well as the associated metadata.

 

3. Who Is Responsible for the Protection of Personal Information?

 

For any question about the protection of your personal information, you can contact our Privacy Officer:

 

Privacy Officer

Mangouste AI Inc.

Email: [email protected]

Mailing address: 300-204 Rue du Saint-Sacrement, Montreal (Quebec) H2Y 1W84.

 

4. What Personal Information Do We Process?

 

The information we process depends on the features enabled for your organization. It falls into the following categories:

• customer information: business name, address, phone number, website, and the first and last names of its representatives;

• user account information: first and last name, email address, phone number, user identifier, role, customer organization, authorized sites and access profile;

• login and session information: login dates, IP address, user agent and authentication events;

• technical device information: installation identifier, technical environment (for example the operating system and application versions), interface language, time zone and regional settings;

• notification-related information, if notifications are enabled for your account: notification token, preferences, permission status and notification pauses;

• usage data needed to operate and secure the service: access to live viewing, playback, searches, events and authorized exports, as well as system diagnostic elements;

• product usage measurements, only if you have consented in the application (see section 5);

• customer camera content: the videos from the customer's sites and their metadata, such as the camera concerned, the time and the events detected;

• communications: support requests and other messages you send us.
  
  Not everything that is processed is retained: some information merely passes through our systems, and section 11 sets out what we retain and the applicable retention periods.
  
  The videos and images viewed in the application are content from your organization's site: we process them on the customer's behalf (see section 6), and they are distinct from the account and session data we process to operate the application.
   

5. What Do We Use Your Information For?

 

We process the information needed to:

• authenticate you and control access to the service;

• display the cameras, recordings, events and alerts your role allows you to view;protect accounts, our customers' environments and our infrastructure;

• provide support, diagnostics, maintenance and improvements to the service;

• apply the roles, permissions, sites and profiles configured for each customer;

• keep security, audit and operational logs;

• communicate with you or your organization about the service.

​

Product usage measurements (optional). If you consent in the application, we also collect product usage measurements — for example the features viewed, the actions taken, errors and interactions with the main features — to understand how the service is used, identify issues and prioritize improvements. This consent is optional: it is not required to use the application, and you may withdraw it at any time by writing to [email protected] (see section 13).

These measurements are collected directly by us; they may be linked to your account for diagnostic and security purposes, and exclude audio and videos as well as the text of your searches. They are not communicated to third parties for their own purposes, including advertising; where needed, we may use tools from service providers acting on our behalf to analyze them (see section 9). Where a screenshot containing a camera image is useful to diagnose a problem, it is either provided voluntarily by the user or collected after a separate confirmation shown in the application; such screenshots are used only to diagnose and fix the problem.

 

Data sent to support. When you contact our support, the information and content you send us (for example descriptions, screenshots, logs or relevant excerpts) are used for diagnostics, service delivery and the improvement of the services provided. Please do not include information that is not necessary, such as credit card numbers or passwords. You may request the deletion of a support file six months after it is closed; we will comply, except in cases of fraud or where a legal obligation requires us to keep it.

 

What we do not do. We do not sell your personal information.

 

6. How Do We Handle the Videos From Your Cameras?

 

Depending on the permissions associated with your user account, you can view the videos related to your organization's sites: live streams, recordings, clips, snapshots, events and metadata (for example the date and time of the event).

Access to this content is limited to the customer's authorized users and, where necessary to provide, support, secure, maintain or improve the service, to our authorized personnel.

In accordance with the Private Security Act (CQLR, c. S-3.5), we hold a valid agency licence issued by the Bureau de la sécurité privée (BSP), and the members of our personnel who can view recordings all hold a valid BSP agent licence.

Videos are recorded and retained on the equipment installed at the customer's site, according to that site's configuration (see section 11). Where technically possible, they are analyzed directly on that equipment. Some videos and images may however be sent to our cloud services for further analysis, to improve the accuracy of the service, including the relevance of alerts. This content is kept for as long as the analysis requires; some representative excerpts — for example events that are hard to detect — may be kept longer to evaluate and improve the accuracy of the service, so that an important event is not missed (see section 11).

We do not use real customer videos for model training, marketing or public demonstrations without the customer's explicit and documented authorization. Accuracy evaluation, for its part, includes verifying the results produced, measuring false positives and false negatives and adjusting the service's parameters; it does not include model training.

The customer remains responsible for the compliance of the video surveillance carried out on its premises, including the notices and consents applicable to the collection of images from the individuals concerned. Mangouste AI remains responsible for the obligations that apply to it with respect to the processing it carries out and the security of its services.

7. How Are Accounts Managed and Deleted?

Accounts are created by Mangouste AI as part of its relationship with the customer organization; the application does not offer self-service account creation. Access to the application is individual, personal and revocable; account sharing is not permitted. You must use only the access authorized by your organization, and your organization — or we — may request the suspension or modification of access, for example when an employee leaves or changes role.

To request the deletion, deactivation or anonymization of your account, see the steps at https://www.mangouste.ai/account-deletion: write to [email protected] from the email address associated with your account, or contact your organization. We first take reasonable measures to confirm the identity of the requester and the legitimacy of the request — for example by asking for additional information or by confirming the request with your organization. Once the request is validated, we act on it as quickly as we can, and no later than the time limit prescribed by law: access is deactivated and account data is deleted or anonymized. Some information may be kept longer where the law requires or permits it — including the security logs and backups described in section 11, as well as accounting and billing records — and is then deleted when its retention period expires. Because accounts are created and managed with the customer organization, some requests may need to be coordinated with it.

 

8. What Communications Can You Receive?

​

We may send you service-related communications: support messages, security notices, account notices or operational alerts.We may also send you a newsletter about our new services and offers. You can unsubscribe at any time using the link included in each email.The application does not collect any push notification token until notifications are enabled for your account. If they are, the application may send notifications related to the account, security or the events configured for the customer, and may process a notification token, your preferences, the permission status and technical device metadata.Where agreed with a customer, certain alerts may also be sent through external messaging services chosen by that customer. These messages may include the time, the site, the camera and a preview of the event.
 

9. Who Do We Communicate Personal Information To?

We do not sell your personal information. We communicate it to providers who help us deliver the service, to the extent necessary for their functions:our authentication and account and session management providers;our cloud hosting providers, for the application services and our internal work environments;the provider of your device's app store, for the distribution of the application and device-related services;web hosting providers, for our public website;providers of technical tools acting on our behalf, for example for diagnostics or analysis;messaging services configured at the customer's request, when external alerts are enabled for that customer.We select providers that offer protection of personal information at least equivalent to what this policy provides, and that may use it only for the services they provide to us.In addition, the manufacturer of your device and the provider of its operating system may process and retain certain data under their own privacy policies, independently of us — for example during device backups or notification delivery. Those operations are not under our control.We may also communicate personal information where the law requires it.As part of a business transaction, such as a sale, merger, financing or transfer of assets of the business, we may communicate personal information to the other party, to the extent necessary to complete the transaction and with the protections provided by law, including an agreement that limits its use to that purpose and imposes confidentiality obligations on the other party. For clarity, such a communication is not a sale of your personal information within the meaning of this policy, including section 5.

 

10. Where Is Your Information Stored?

​

Video recording equipment is installed on the customer's premises: video is recorded there and, where possible, processed locally. Content may be sent to our cloud services during an authorized viewing in the application, a support operation requested by the customer or a user, or the further analysis described in section 6.Your information is stored primarily in Canada, and we favour processing in Canada for the videos and other content from your cameras.For the further analysis of certain situations — to limit false positives and avoid missing an important event — some content may however be processed outside Canada. Where personal information must be communicated outside the province or the country, we handle those communications in accordance with applicable laws.Customers may request that their video data be processed entirely in Canada; they accept that, in return, some features may be less accurate or unavailable.As an option, customers can subscribe to continuous online video recording, as a primary system or as a backup; those recordings are then stored in Canada.

 

11. How Long Do We Keep Your Information?

​

We keep information only as long as needed for the purposes described in this policy, subject to applicable contractual, operational, security and legal requirements. As a general guide:videos, recordings and snapshots: stored on the site's equipment as agreed with the customer, then deleted automatically, with the most recent recordings replacing the oldest;online video recordings, for customers who have subscribed to that option (section 10): kept according to the customer's contract and subscribed options;content sent for cloud analysis (section 6): kept for as long as the analysis requires; some representative excerpts may be kept longer to evaluate and improve the accuracy of the service;results produced by the analysis (metadata and descriptions, with no images or videos): follow the retention of events;events and metadata: with no images or videos, kept for as long as they are useful to the service;service configuration history (for example camera zones and business hours, with the author and date of each change): kept for as long as the service is in force and then, after the service ends, for at most three years — the time needed to respond to any questions or claims;security, audit and operational logs: at most 12 months, except for an incident under analysis or a legal obligation;product usage measurements: at most 12 months; fully aggregated statistics, which do not allow you to be identified, may be kept without a time limit;support files: kept for as long as needed for diagnostics, service and the improvement of the services provided; deletion available on request six months after the file is closed, except in cases of fraud or a legal retention obligation;account data: kept for the duration of the authorized access and then, after the account is closed, for at most three years — the time needed to respond to any questions or claims — before being deleted or anonymized; only the information necessary for those purposes is kept during that period;backups: automatically replaced by more recent ones, after a limited period.Deleting or deactivating an account does not immediately delete backups or security logs; that data is deleted at the end of the retention periods described above. In some cases, faster deletion is possible on request (see section 13).

 

12. How Do We Protect Your Information?

We apply technical and organizational security measures appropriate to the service: authentication, access roles, customer profiles, compartmentalization of each customer's data, security logging, backups, restricted management of administrative access and other information security measures.Although we take reasonable measures to protect your information, no information security measure offers absolute protection. Security is also a team effort: protect your credentials, do not share your account, and promptly report to [email protected] any lost device, suspicious access or person who should no longer have access.

 

13. What Are Your Rights?

​

Subject to the limits provided by law and the role of your customer organization, you may:request access to the personal information we hold about you;request the correction of inaccurate or incomplete information;receive the computerized personal information you provided to us in a structured, commonly used technological format (data portability);withdraw your consent to processing that is based on consent, which may however limit or prevent use of the service, without changing the agreements between Mangouste AI and your organization;ask questions about how your information is processed;exercise any other right provided by applicable laws.These rights apply only to information about you. They do not give access to information about other people or other customers, or to our confidential business or technical information.For much of the information related to cameras and sites, the customer organization determines the purposes of processing and we act as a service provider: some requests will therefore need to be coordinated with your organization.Any deletion request is handled within the limits of our legal retention obligations: some information — for example accounting records, invoices and certain payment-related information — must be kept for several years under applicable laws, including tax laws, before it can be deleted.To exercise a right, write to [email protected]. We may ask for additional information to verify your identity, and we normally respond within 30 days.If, despite our efforts to answer your questions and requests, you are not satisfied, you may send us a complaint and we will do our best to resolve it within a reasonable time.

 

14. How Would We React to an Incident?

​

If we have reasonable grounds to believe that a confidentiality incident involving personal information has occurred, we take reasonable measures to reduce the risk of injury and to prevent an incident of the same nature from recurring, and we record the incident in our register of confidentiality incidents.In the event that an incident were to occur and present a risk of serious injury, we will promptly notify the Commission d'accès à l'information du Québec and any person whose information is concerned, as well as the affected customers.

 

15. What About Cookies and Similar Technologies?

To deliver the service and remain functional, the application keeps certain information on your device. On the web, your browser may do the same to keep your session or active profile.Our public website is hosted on a third-party platform that may use cookies essential to the operation of the site and visitor statistics.

 

16. How Is This Policy Updated?

​

We may update this policy from time to time. The version with the most recent update date is the version in force; it can be viewed at any time at https://www.mangouste.ai/privacy. Material changes are communicated in a reasonable way depending on the service context and applicable requirements.

 

17. How to Reach Us

For any question about this policy or your personal information:Privacy OfficerMangouste AI Inc.Email: [email protected] address: 300-204 Rue du Saint-Sacrement, Montreal (Quebec) H2Y 1W8