Privacy Policy

INJAZCAM is a professional remote security monitoring service operated by Adalat Information Technology. We provide 24/7 live monitoring of CCTV and IP camera systems for businesses, commercial properties, and residential clients.

This Privacy Policy explains how we collect, use, store, and protect personal data and security footage obtained through our platform and services. By using any INJAZCAM service, website, or application, you agree to the practices described in this policy.

Our registered contact for data protection matters is reachable through the contact details listed at the end of this policy.

We collect different categories of data depending on how you interact with INJAZCAM:

Account and Contact Data: When you register on our platform, we collect your name, email address, phone number, company name, billing address, and payment information (processed securely via our payment processors — we do not store raw card data).

Camera and Site Data: When you connect cameras to our platform, we collect device identifiers, IP addresses, camera model and configuration, installation location (address), and stream access credentials.

Video Footage: We receive and process live and recorded video streams from your camera systems for the purpose of remote monitoring, incident detection, and alert generation.

Usage and Technical Data: We log access events, system interactions, platform feature usage, API calls, browser/device identifiers, and session information to maintain service security and quality.

Communications: Emails, support tickets, chat messages, and phone call logs related to your account or incidents are retained for service quality and compliance purposes.

INJAZCAM processes your data strictly for the purposes of delivering and improving our security monitoring service:

Live Monitoring & Incident Response: Our trained monitoring analysts view live camera feeds to detect incidents (intrusion, fire, vandalism, unauthorized access) and trigger alerts or dispatch emergency services on your behalf. Alert Delivery: We use your contact details (phone, email, push notifications) to deliver security alerts and incident reports. Account Management: We use your data to maintain your account, process subscriptions, issue invoices, and provide customer support. Service Improvement: Aggregated and anonymized usage data helps us improve platform reliability, detection accuracy, and response protocols. Legal Compliance: We may retain or disclose data when required by applicable law, court order, or regulatory authority.

We do NOT sell, rent, or trade your personal data or footage to any third party for advertising or marketing purposes.

Video footage is the most sensitive data we handle. Our practices are designed to protect it:

Retention: Footage processed by our monitoring platform is retained for a period defined by your subscription plan (typically 7–30 days). Upon expiry, footage is securely deleted from our systems unless required for an active incident investigation.

Access Controls: Access to footage is restricted to authorized monitoring staff assigned to your account. All access events are logged with timestamps and analyst identifiers. Internal access is audited quarterly.

Encryption in Transit: All video streams transmitted between your cameras and our monitoring platform use TLS 1.2+ encryption. Streams are never transmitted unencrypted over public networks.

Encryption at Rest: Archived footage and incident recordings stored on our servers are encrypted at rest using AES-256.

Your Footage is Yours: You retain full ownership of all footage originating from your cameras. We process it on your behalf as a data processor and do not use it for any purpose other than delivering the monitoring service you have subscribed to.

We implement security measures commensurate with the sensitive nature of our services:

Infrastructure Security: Our platform is hosted on secure, ISO-certified cloud infrastructure with regular vulnerability assessments and penetration testing. Access Management: All platform access requires multi-factor authentication. Principle of least privilege is enforced for all internal roles. Monitoring of Our Own Systems: Our internal systems are subject to the same 24/7 monitoring discipline we apply to our clients, including intrusion detection, log analysis, and anomaly alerting. Incident Response: We maintain a documented incident response plan. In the event of a data breach affecting your information, we will notify you within 72 hours of discovery as required by applicable law. Employee Training: All INJAZCAM staff with access to client data undergo background screening, data handling training, and annual security awareness refreshers.

No system is completely immune to attack. We encourage clients to report any suspected security concerns immediately to our security team.

Our website and platform use cookies and similar technologies for the following purposes:

Essential Cookies: Required for authentication session management, CSRF protection, and core platform functionality. These cannot be disabled.

Analytics Cookies: We use anonymized analytics (such as Google Analytics) to understand how visitors use our public website. No personal identifiers are included in analytics reports.

Preference Cookies: Store your language, region, and display preferences across sessions.

You can manage non-essential cookies through your browser settings or our cookie preference center (available in the website footer). Declining analytics cookies does not affect your ability to use the service.

We share your data only in the following limited circumstances:

Service Providers: We engage trusted third-party service providers (cloud hosting, payment processing, email delivery, SMS gateways) under strict data processing agreements. These providers process data only on our instructions and cannot use it for their own purposes.

Emergency Services: When our monitoring analysts determine that emergency response is required (police, fire brigade, ambulance), we will share the minimum necessary incident information (location, nature of incident, contact name) with emergency services.

Legal Requirements: We comply with legally binding requests from law enforcement or regulatory authorities. Where permitted, we will notify you before disclosing your data.

Business Transfers: In the event of a merger, acquisition, or sale of our business, client data may be transferred to the acquiring entity under equivalent privacy protections.

We never share data for advertising, profiling, or direct marketing by third parties.

INJAZCAM operates primarily within the Kingdom of Saudi Arabia. Some service providers may process data in other jurisdictions. Where data is transferred internationally, we ensure equivalent protections are in place through:

Data processing agreements incorporating standard contractual clauses Transfers only to jurisdictions with adequate data protection frameworks Technical controls (encryption, access logging) applied regardless of location

If you have questions about international data transfers affecting your account, contact our data protection contact.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you. Correction: Ask us to correct inaccurate or incomplete data. Deletion: Request deletion of your data, subject to legal retention obligations. Restriction: Ask us to restrict processing while a dispute is resolved. Portability: Receive your data in a structured, machine-readable format. Objection: Object to processing based on legitimate interests. Withdrawal of Consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us using the details below. We will respond within 30 days. We may need to verify your identity before processing requests.

We retain different categories of data for different periods based on operational necessity and legal obligations:

Account Data: Retained for the duration of your subscription plus 3 years after termination (for legal and audit purposes). Video Footage: Retained per your plan (7–30 days from capture), then securely deleted unless subject to an incident hold. Incident Reports: Retained for 7 years following incident closure. Financial Records: Retained for the period required by applicable tax and accounting law (typically 7–10 years). Communications: Support and correspondence records retained for 3 years.

When data is no longer needed, it is securely deleted or anonymized using industry-standard data destruction procedures.

We may update this Privacy Policy to reflect changes in our services, legal requirements, or data practices. Material changes will be communicated via email to registered account holders at least 14 days before they take effect.

The "Last Updated" date at the top of this policy indicates when it was last revised. Continued use of our services after the effective date of any changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, please contact us: