Privacy & Your Data

BitOculus is built on a simple rule: see everyone, identify no one.

What never leaves the sensor

All computer vision runs on the device itself. The sensor does not record video, does not upload images, and does not create biometric templates that could identify a person. Image upload is disabled at the hardware level.

What your dashboard receives

• Anonymous counts: entries, exits, pass-bys, turnbacks, occupancy.
• Per-visit statistics: dwell times, estimated age bracket, estimated gender, badge (staff) detection, height — none of which can be tied to an identifiable person.
• A device-local daily visit number used for same-day deduplication. It resets every night and is meaningless outside that sensor and day — it is not a persistent identifier.
• Device health: online status, and (if enabled on the sensor) network and firmware details for support purposes.

What this means legally

Anonymous people counting is a fundamentally different category from CCTV or facial recognition — there is no personal information to disclose, secure or hand over, because none is collected. For the full picture, including Australian Privacy Act and GDPR context, see our guide: Are People Counting Cameras Legal? and the Privacy Policy.

How long we keep analytics data

A monthly job removes analytics older than your window. Deleting a device removes its data immediately; deleting your team removes everything. The Audit Log is kept indefinitely and is separate from analytics retention.