Sitinel / Privacy by Design

Private
by Design.

Parking surveillance is a legal minefield: biometric-privacy suits, ALPR class actions, and wiretap exposure from a hot microphone. Sitinel is built to keep you on the safe side of all three. If this page doesn't answer your question, email privacy@sitinel.ai and we'll answer it directly.

No facial recognition. No biometrics.

Sitinel detects events, not identities. We do not run facial recognition and do not create or store biometric templates. That is a deliberate design choice, and it is what keeps a deployment clear of biometric-privacy statutes like Illinois BIPA and Texas CUBI, which carry per-violation damages.

Audio is off by default

A live microphone can turn lawful video into a wiretap violation in the dozen or so all-party-consent states. Sitinel ships with audio disabled by default, so a compliance mistake is not one setting away.

License plates and the posted-policy kit

Where license-plate reading is enabled, several states require a conspicuously posted ALPR privacy policy, and operators have already been named in class actions for not having one. Every install ships with a signage and posted-policy kit so the notice requirement is handled on day one.

Your data stays yours

Retention with automatic purge

Retention follows your state's rules and your carrier's requirement, with automatic purge when the window closes. Sealed incident clips replicate to durable off-site storage so your evidence survives a stolen or failed recorder, and that copy is yours, never sold or pooled. The full continuous record stays on-site unless you enable the cloud retention tier.

Evidence chain is separate

The cryptographic evidence chain, per-frame hashes signed at capture, hourly signed Merkle roots, and an append-only log, is operated independently of any model-improvement data. A clip verified against the log has an intact chain of custody you can hand to an insurer or a court.

Improving the models

Footage may be used to improve Sitinel's on-device detection under a written agreement, and you can opt out at the base price with no loss of cameras, on-device AI, or evidence chain. Because there is no facial recognition and no biometric capture, nothing biometric is ever part of that data.

Contact

Privacy questions, access requests, deletion requests, or something we haven't thought of, privacy@sitinel.ai. We answer within five business days.

Last updated · July 1, 2026