Controller: LJ protection s.r.o., Company ID 28496248, Tupolevova 741, 199 00 Prague 9, Czech Republic — [email protected].
Two roles: for your account data (e-mail, name, billing, push token) we are the controller; for your camera recordings you are the controller and we act as your processor under Art. 28 GDPR.
Recordings are encrypted with AES-256-GCM (per-clip keys), retained 7/30/90 days per your plan, then deleted automatically; detection metadata 90 days, alert-rule events 400 days.
Account data retention: billing documents 10 years (tax law), consent records 4 years after account closure, security audit trail 2 years, crash reports 90 days.
Sub-processors: Hetzner Online GmbH (hosting, Germany/EU), Google Ireland (FCM push, Gmail API; EU-U.S. DPF), Comgate (payments, CZ). No third-party analytics or advertising.
Account deletion permanently removes content data and anonymizes the account; invoices are kept as required by law.
Rights under Art. 15–21 GDPR: contact [email protected] (answer within 30 days); complaints: Czech DPA (uoou.gov.cz).