Privacy policy

Last updated: September 27, 2026. This policy covers this website, the Offsight AI console at ai.offsight.com, the Offsight AI apps for iOS and Android, and the Offsight APIs. Published for information; it is not legal advice.

Protecting your information is a priority for Offsight Inc. (“Offsight,” “we”). This policy explains what we collect, why, who we share it with, and what you can ask us to do about it. By using the Offsight AI website or services, you consent to the practices described here.

1. Two different roles

Read this first, because everything else depends on it.

• When you visit our website or contact us, Offsight is the controller. We decide what to collect from a demo request or a support message and what to do with it. This policy is the full description.
• When a customer runs their factory on Offsight AI, Offsight is a processor. The customer decides what goes into their tenant — production records, photos, camera images, drawings, timesheets, inspections — and we process it on their instructions under our Data Processing Addendum. If you are an employee, contractor or visitor of an Offsight customer and you want to see, correct or delete records held about you in that customer’s tenant — including images from that customer’s cameras — contact that customer. We will help them respond; we will not act on their data without them.

2. Information we collect

Information you give us

• First and last name
• Email address
• Phone number
• Employer, job title and role
• What you write in a demo request, sales enquiry or support message
• Account details when a tenant is created for you: username, password (stored only in hashed form), role and permission assignments, and two-factor enrolment details
• Billing contact details. Card details are collected and stored by our payment processor, not by Offsight

Information you put into the platform

This is Customer Data, and it belongs to the customer. It typically includes production and quality records, checklists and sign-offs, photographs taken on the floor, drawings, models and sheets, materials, inventory and purchase-order records, labor records and timesheets, delivery and shipping records, and messages exchanged with the Offsight AI assistant.

Information collected through Vision AI

Vision AI is the part of the Service that analyzes images from cameras a customer installs at its sites, to recognize machine states and work-area activity. What it handles is Visual Data, together with the details and results that go with it, and like everything else in a tenant all of it is Customer Data:

• Camera frames — still images, not video, uploaded by the customer’s cameras at the interval the customer sets on each camera, together with reduced-size copies made to display them
• Detection overlays — annotated images Vision AI generates to show the evidence for a detection
• Training captures — frames the customer selects to train a model, and any photos or video previously uploaded for that purpose
• Markups, annotations and notes — the regions a customer’s users draw on training captures, and the notes they write about a capture or about an area a camera watches
• Frame details and results — which camera sent an image and when, and the states Vision AI detected, with their confidence and time

A camera captures whatever is in its view, so camera frames can include people who work at or visit a customer’s site. Vision AI does not currently offer facial recognition or biometric identification, and customers may not use it for either; the customer decides where its cameras point and is responsible for telling the people in view, as the Acceptable Use Policy requires.

Information collected automatically

• IP address, browser type and version, device type and operating system
• Access times, pages viewed, referring URLs and, in-product, screens visited
• Application and error telemetry used to keep the Service working and to diagnose faults
• API usage metering — request counts and volumes against each API key, used to enforce limits and to bill accurately
• AI credit consumption, recorded per request so an account can see where it went

Our sites and apps use cookies and similar technologies that are necessary to operate them — keeping you signed in, remembering a session, and understanding aggregate usage so we can fix what is broken. We do not sell your information, and we do not rent or lease customer lists.

3. How AI processing works

This is the section most vendor reviews are actually looking for, so it is specific.

What gets sent. When someone uses an AI feature, the content of that request and the records, documents or images relevant to answering it are sent over an encrypted connection to a third-party model provider, which processes them and returns a response. What is sent is scoped to the request. A question about one work order does not ship the whole database.

Who processes it. Model inference is performed by third-party model providers engaged as our sub-processors, under commercial API terms and under written data-protection obligations. Providers and model versions change as the technology changes. See section 7 of the DPA for how sub-processors are engaged and how customers get the identified list.

No foundation-model training. Offsight does not use Customer Data to train, fine-tune or develop general-purpose AI models, and inference requests are made under commercial API terms under which customer content is not used to train the provider’s models.

Vision AI and Customer Models. Vision AI detection, and the training of the models it uses, run on computing infrastructure Offsight operates in its cloud hosting environment, not at a third-party model provider. Each customer’s detection models — its Customer Models — start from a shared, publicly available open-source base model that contains no Offsight customer’s data, are trained only on that customer’s own Visual Data, and are used only for that customer. One customer’s Visual Data is not used to train a model for another. The notes attached to training captures and to camera areas are not used to train detection models.

Vision AI’s optional second opinion. A customer can turn on the account setting “Improve Vision AI capability and accuracy,” which is off unless it is turned on. While it is on, when a detection’s confidence falls just short of the threshold for that state, Vision AI may send up to eight camera frames, the state being checked, and the related notes attached to training captures and to the area the camera watches over an encrypted connection to a third-party model provider for a second opinion. The request is made with the provider’s response-storage option turned off, and the verdict is recorded beside the detection without overwriting it. While the setting is off, Vision AI itself does not send Visual Data to a model provider. Visual Data that a user shares with, or asks, the AI assistant about — for example, the notes on a training capture, or an image attached to a chat — is sent as described under “What gets sent” above, whether or not the setting is on.

Permissions still apply. An AI request executes in the context of the user who made it. It is scoped to that user’s tenant and bounded by their per-module and per-user-group permissions. It cannot reach another tenant, and it cannot see a module the user cannot see.

It is logged. AI sessions — the request, the actions taken and the output returned — are stored in the customer’s tenant as part of the record, so an administrator can see what was asked, what the system did, and on whose behalf.

It is reviewed by people. AI output is decision support, not a professional opinion. The Terms of Service set out where human review is required before output is relied on.

4. How we use information

• To operate, maintain, secure and improve the Service and this website
• To provide Vision AI to the customer whose cameras sent the images — including training that customer’s own Customer Models — and for no other customer
• To provide the services you have requested, including a demo or support
• To create and administer accounts, permissions and authentication
• To bill accurately, including metered API and AI credit usage
• To send transactional messages: alerts, notifications, confirmations, and service announcements
• To tell you about other Offsight products and services. You can opt out of marketing email at any time using the link in the message or by writing to us
• To comply with legal obligations and to enforce our agreements

We may also generate aggregated, anonymized data that cannot be linked back to you or to any individual, and use it to improve and test our products.

5. Sharing information

Offsight does not sell, rent or lease its customer lists to third parties.

We share information in four situations:

• Sub-processors. We use sub-processors to perform part of the Service for us — hosting, model inference, design-file processing, transactional email, billing and edge delivery. Each is engaged under a written contract, is bound to use the information only to provide its service to Offsight, and is bound to confidentiality. Customers and their assessors can obtain the identified list under the DPA — see section 7 of the DPA. Vision AI adds no new category: Visual Data is stored and processed on infrastructure provided by our cloud hosting and storage sub-processors, and reaches a model-inference sub-processor only if a customer turns on the optional second-opinion review. The cameras themselves are hardware a customer buys from a third party; their manufacturers are not Offsight sub-processors.
• Integrations you connect. If you connect Offsight AI to another system — an ERP, an accounting package or a design-file platform, for example — data moves between the two at your instruction and under that provider’s terms.
• Legal process. We may disclose information if required by law, or in the good-faith belief that it is necessary to comply with legal process, to protect and defend our rights or property, or to act in exigent circumstances to protect someone’s personal safety.
• Business transfer. If Offsight is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

6. Security

Offsight secures information against unauthorized access, use, alteration and disclosure. The controls in place include:

• Encryption in transit (TLS) and encryption at rest
• Two-factor authentication
• Per-module and per-user-group permissions, administered by your own admins
• Tenant isolation, so one customer’s data is separated from another’s
• Audited access, including logging of administrative and support access
• API keys with rotation, live usage metering and enforceable limits
• For Vision AI: cameras upload over encrypted FTPS, with unencrypted FTP and older TLS versions refused; camera credentials can only upload — they cannot read back, list or delete anything; each uploaded camera image is written to a storage path the server generates under the customer’s tenant; Visual Data is encrypted at rest; Vision AI images are kept private rather than given public links, and training captures are opened through short-lived signed links; and model training runs with credentials limited to that customer’s Visual Data
• Managed cloud infrastructure in the United States: containerized services, a managed relational database with a read replica, a caching tier, and per-tenant data separation

No transmission over the internet or any wireless network can be guaranteed to be completely secure. While we work to protect your information, you acknowledge that there are security and privacy limitations inherent to the internet that are beyond our control. We will answer a written security questionnaire about the architecture, subject to confidentiality — ask us on the contact page.

7. Retention

• Customer Data is retained for as long as the customer’s account is active, and then in accordance with the customer’s agreement. On termination, data can be exported and is then deleted on request. Data may be irretrievably deleted if an account is ninety (90) days or more delinquent.
• AI session records — requests, actions and output — are retained in the customer’s tenant on the same basis as other Customer Data, because they are part of the audit trail.
• Visual Data — raw camera frames, and the reduced-size copies made to display them, are deleted automatically thirty (30) days after they are stored. Detection overlay images are deleted automatically three hundred sixty-five (365) days after they are stored. Training captures, their markups, annotations and notes, and Customer Models are retained while the customer’s account is active and are deleted in accordance with the customer’s agreement, at termination or on request. Removing a training capture in the product does not by itself immediately erase the stored image. Vision AI results are retained like other Customer Data.
• Website and marketing information — a demo request, an enquiry — is retained for as long as needed to respond and to maintain a record of the relationship, and is deleted on request.
• Logs and telemetry are retained for a limited operational period and then rotated out. Logs from Vision AI’s image-upload and detection services are kept for thirty (30) days.
• Billing records are retained for as long as required for tax and accounting purposes.

8. Your rights

Depending on where you live, you may have the right to request access to the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how it is processed, to receive a portable copy, and to withdraw a consent you previously gave. You will not be treated differently for exercising any of these rights.

To make a request about data Offsight holds as controller — for example a demo request or a marketing contact record — write to support@offsight.com. We may need to verify your identity before acting.

To make a request about records held inside a customer’s tenant — including images from that customer’s cameras — contact that customer. They are the controller of that data, and we will support them in responding. Because Vision AI does not identify the people in an image, images are found by camera and time rather than by name, and raw camera frames older than thirty days will already have been deleted.

9. International transfers

Offsight is based in the United States and the Service, including Vision AI and the storage of Visual Data, is operated on infrastructure in the United States. If you access the Service from outside the United States, your information is transferred to and processed there. Where personal data is transferred out of a jurisdiction that restricts such transfers, we rely on the safeguards set out in our Data Processing Addendum.

10. Children under thirteen

Offsight does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under thirteen, you must ask a parent or guardian for permission before using this website.

11. Email communications

From time to time we may contact you by email with announcements, alerts, confirmations, surveys and other general communication. Transactional messages about your account and the Service are part of the Service. Marketing email always carries an unsubscribe link.

12. Changes to this policy

Offsight may change this policy from time to time. We will notify you of significant changes to the way we treat personal information by sending a notice to the primary email address on your account, by placing a notice on this site, or by updating this page. Continued use of the site or the Service after a change constitutes acknowledgement of the modified policy and agreement to be bound by it.

13. Contact

Questions about this policy: support@offsight.com. Contract questions: sales@offsight.com.

Offsight Inc.
650 California St
San Francisco, California 94108

Try Offsight AI