Privacy Policy

Effective Date: January 1, 2026

Entity: Retailligence, Inc. (“Retailligence”)

1. Overview

Retailligence provides investigative workflow infrastructure for retail operators.

This Privacy Policy describes how Retailligence processes data within its infrastructure platform.

Retailligence operates as a service provider and infrastructure processor. Retail customers remain the operator of record and data controller for all investigative activity conducted using the system.

2. Categories of Data Processed

Retailligence processes investigative workflow data, which may include:

• Entrance activity metadata
• Associated image or video clips
• Reviewer classifications
• Case documentation records
• Audit logs
• User access credentials
• Configuration settings

Retailligence does not process consumer data for advertising, behavioral profiling, marketing analytics, or resale.

3. Role of the Parties

Retail customers determine:

• What data is collected
• How long data is retained
• When case preparation occurs
• Whether escalation is initiated
• Whether materials are shared externally

Retailligence processes data solely to provide infrastructure services under contract. Retailligence does not determine investigative outcomes, enforcement actions, or identity conclusions.

4. Data Ownership

All investigative workflow data remains the property of the retail customer. Retailligence acquires no ownership rights in customer data. Retailligence may process data only as necessary to provide contracted infrastructure services.

5. Access Controls

Access to investigative workflow data is restricted to authorized personnel designated by the retail customer. The system supports:

• Role-based access controls
• Hierarchical permissions
• Web and mobile authentication
• Administrative audit logging

Retail customers are responsible for managing user access within their organization.

6. Data Retention

Retention settings are configurable by the retail customer. Customers determine:

• Retention duration
• Archival structure
• Case preparation thresholds

Retailligence processes data in accordance with customer-defined retention settings.

7. Security Safeguards

Retailligence implements commercially reasonable administrative, technical, and physical safeguards, including:

• Encryption in transit
• Encryption at rest
• Secure cloud infrastructure environments
• Access logging and monitoring
• Authentication controls

No system can guarantee absolute security. Customers acknowledge that risk cannot be eliminated entirely.

8. Data Sharing

Retailligence does not sell investigative data. Retailligence does not use investigative workflow data for consumer advertising, profiling, or unrelated commercial purposes. Any sharing of investigative materials occurs solely at the direction of the retail customer.

9. Legal Compliance

Retail customers are responsible for ensuring compliance with applicable laws and regulations, including biometric, privacy, and surveillance regulations where applicable. Retailligence provides infrastructure services only and does not provide legal advice.

10. Confidentiality

Retailligence treats customer investigative data as confidential information and will not disclose it except:

• As required by law
• As necessary to provide contracted services
• With customer authorization

11. Subprocessors

Retailligence may use cloud and infrastructure providers to deliver services. All subprocessors are contractually required to maintain appropriate confidentiality and security obligations.

12. Changes to This Policy

Retailligence may update this Privacy Policy periodically. Updated versions will be posted with a revised effective date.

13. Contact

privacy@retailligence.com