Acceptable use policy

Last updated: October 2026

Offsight AI runs real production. A record in it can release a module, close an inspection, or become the evidence a third-party inspector relies on. That is why this policy exists and why it is enforced.

You are responsible for the use of your tenant by everyone you give access to, including contractors and third-party inspectors — even where you did not authorize the particular use. Everything done in the Service under your account, including every configuration of Vision AI made by any of your users, is done on your behalf and binds you.

This Acceptable Use Policy is part of the Terms of Service and is incorporated into them, so a breach of this policy is a breach of the Terms of Service. In this policy, “you” means the Customer, as the Terms of Service define it. The Customer must make sure that everyone it gives access to follows this policy; the risk, defense and indemnity obligations in section 6 are the Customer’s. Capitalized terms that this policy uses without defining — including “Vision AI,” “Visual Data,” “Vision AI Results,” “Output,” “Customer Data,” “Personal Data,” “Customer Models,” “Base Models,” “Site,” “Authorized Administrator,” “Work-Area Activity Detection,” “Tools & Equipment Tracking,” “Individual Monitoring” (also called “People Tracking”), “Individual Monitoring Data,” “Monitored Individual,” “Monitoring Laws,” “Required Authorizations,” “Facial Recognition,” “Biometric Data,” “Biometric Release Requirements,” “Consequential Employment Decision,” “Model Improvement,” “Model Improvement Safeguards,” “Covered Claims,” “Losses,” “Offsight Indemnitees,” “Suspension Events” and “Material Change” — have the meanings given in the Terms of Service. Nothing in this policy limits your obligations under the Terms of Service.

1. General restrictions

You may not, and may not permit anyone else to:

• use the Service for any unlawful purpose, or in breach of any applicable law, regulation, export control or third-party right;
• upload or transmit malware, or anything designed to disrupt, disable or impair the Service or any system connected to it;
• probe, scan or test the vulnerability of the Service, or breach or circumvent any security or authentication measure, without Offsight’s prior written permission;
• access another tenant’s data, or attempt to identify another customer from anything the Service returns;
• reverse engineer, decompile or disassemble the Service, or attempt to discover its source code, structure or algorithms, except where applicable law expressly permits it;
• resell, sublicense, rent, lease or otherwise make the Service available to a third party, or use it for the benefit of a third party outside your own operations;
• scrape, crawl or bulk-extract data from the Service other than through the documented APIs and export functions;
• use the Service, or anything it produces, to build, train, evaluate or benchmark a competing product or model;
• attempt to extract, reconstruct or infer from any model the Service uses, including a Base Model, the data used to train it; or
• remove or alter any proprietary notice, label or attribution.

These restrictions govern how the platform is used. They do not limit where you place cameras or what you use Vision AI to detect, track, count, locate or monitor; section 7 covers those decisions, and the first restriction above — no unlawful use — is the only rule that applies to them.

2. Accounts and credentials

• Keep credentials confidential. One account, one person.
• Do not share a login to record a sign-off. A quality or inspection record must be attributable to the person who actually performed the work.
• Enable two-factor authentication where your organization requires it.
• Deactivate accounts promptly when someone leaves. Your administrators control per-module and per-user-group permissions; keep them current.
• Offsight sends notices under the Terms of Service, including notices of updates to this policy, to the email addresses of your Authorized Administrators on file in the Service. Keep at least one Authorized Administrator, and that person’s email address, current.
• Camera upload credentials issued for Vision AI are for sending images from the cameras you connect to the Service to your own tenant. Do not use them for anything else.
• Tell us immediately at support@offsight.com if you believe an account, an API key or a camera upload credential has been compromised.

3. What you upload

• Only upload content you have the right to upload, and the right to let Offsight use as the Terms of Service describe, including for Model Improvement — drawings, models, photographs, specifications, documents and Visual Data included.
• Submit Personal Data of third parties only where you have a lawful basis to submit it. Meeting that requirement is your responsibility, including for the people who appear in Visual Data (see section 8).
• Images your cameras send to Vision AI are uploads too. Your cameras upload still images, not video and without audio. You decide where cameras go, what they capture and what Vision AI tracks, and sections 5 to 10 explain what you are responsible for.
• Do not put sensitive categories of data — health records, payment card numbers, government identifiers and similar — into the platform’s records or free-text fields unless we have agreed in writing that it is configured to handle them. This does not limit Visual Data or what you use Vision AI to track; where Biometric Data is involved, section 6 and the Biometric Release Requirements describe your legal duties.
• Do not put credentials, API keys or passwords into free-text fields, support messages or AI requests. We never need one to help you.

Offsight uses Customer Data — including Visual Data that shows people, their faces and their activity — to train and improve its AI models, including the Base Models it uses to provide the Service to all of its customers. That use is Model Improvement, and it covers Individual Monitoring Data as well. It is set out in the Terms of Service sections entitled “Customer data” and “Model Improvement,” together with the Model Improvement Safeguards that Offsight observes when it performs Model Improvement. Offsight also processes Customer Data, including Visual Data, to provide the Service to you. Model Improvement does not depend on any setting, and there is no opt-out other than any that applicable law requires. Offsight does not sell Customer Data. The notices you give the people who may appear in Visual Data must cover this use (see section 8).

4. Using the AI features

The Offsight AI assistant can read the records in your tenant and, where permitted, take actions in the system. Those actions carry the same weight as work done by hand, which is why the following are prohibited.

Do not falsify a record

Do not use AI features to create, alter, complete or backdate a quality, inspection, compliance, labor or sign-off record so that it misrepresents what was actually built, checked, observed or worked. An AI-assisted record is still a record, and the person on whose behalf it was created is still accountable for it.

Do not escalate permission

Do not attempt to make the assistant act outside the permissions of the requesting user, reach another tenant, or perform an action a user could not perform directly. Prompt-based attempts to do so are treated the same as a direct attempt to breach access controls.

Do not attack the model layer

Do not attempt to extract system prompts, tool definitions, model weights, training data or other underlying implementation of the AI features; to bypass their safety or permission controls; or to inject instructions through uploaded documents, file names or record content intended to make the assistant act against the user’s intent.

Do not treat output as a professional determination

AI output is decision support. It is not an engineering opinion, a code-compliance determination, an inspection result, or a certification. You are responsible for having it reviewed by a qualified person before you rely on it — and always before a sign-off, a release to ship, a submission to an inspector or building official, a purchase commitment, or any decision affecting the health or safety of a person. The full requirement is in the Terms of Service. Apart from decisions affecting health or safety, this rule does not cover decisions about individuals. Whether and how you review Output before such a decision is your decision, as section 9 explains.

Do not generate abusive volume

Do not automate AI requests at a volume that degrades the Service for other customers, or route requests through the Service on behalf of parties who are not licensed users. AI credit consumption is metered per account; deliberately exhausting another party’s allowance is a breach of this policy.

5. Vision AI and the people cameras see

A camera captures whatever is in its view, so the images Vision AI processes can show the people who work at or visit your Sites — their faces and their activity included. This section describes what Vision AI does. Section 6 sets out the responsibility you take on when you track people, and section 7 explains that the decisions about what to monitor, and the legal duties that come with them, are yours alone.

What Vision AI does

Vision AI analyzes still images from cameras you install at your Sites. Your cameras upload still images, not video and without audio. Vision AI detects, recognizes, locates, tracks, counts and reports on what you configure it to monitor: the machines, tools, equipment, materials, work areas and operations you choose, and people whenever you configure it to detect, track, count, locate or monitor them.

• Work-Area Activity Detection reports whether a work area, station or machine is active, idle or occupied, for the area as a whole. Where you configure it to, it also detects whether people are present or working in the area. It does not itself identify any person or follow a person as the same individual across images, cameras or time. Configuring it to detect whether people are present or working is Individual Monitoring.
• Tools & Equipment Tracking recognizes the tools and items of equipment you register, and where they are seen across your work areas. Its re-identification model is applied to images of the object, not to people. If you link a tool or item of equipment to a named individual — for example by assigning or checking it out to a worker — its location history may become Personal Data about that individual, and using it to follow that individual is Individual Monitoring.
• Individual Monitoring, also called People Tracking, means any of the following, whether or not any individual is named, and by whatever means, including face, body, gait, clothing, appearance, badge, tag or assignment:
  • (a) configuring or using Vision AI, a Customer Model or any other feature of the Service to detect, track, count, locate or monitor people, including detecting whether people are present or working in an area;
  • (b) any feature or use of the Service that recognizes a person as the same individual across images, cameras, areas or time; identifies or re-identifies an individual; or attributes presence, location, movement, activity, behavior, attendance or performance to a specific individual; or
  • (c) any use of Visual Data or Output, alone or combined with other information such as schedules, work assignments, or badge or timekeeping records, to evaluate a specific individual or to attribute activity to one.

That definition repeats, word for word, the one in the Terms of Service section entitled “Individual Monitoring”; if they differ, the Terms of Service control.

People tracking is available whenever you configure it

Individual Monitoring is available whenever you configure or use the Service in any of these ways. It does not need to be enabled, approved or attested to, and Offsight does not review or approve it. You accept responsibility for it, as section 6 describes, by using it and by accepting the Terms of Service or an Order Form.

Offsight’s Vision AI does not currently offer Facial Recognition. That is a description of the product, not a restriction on you. If you run Facial Recognition or any other biometric process on Visual Data or Output, inside or outside the Service, that use is Individual Monitoring at your sole risk, and meeting the Biometric Release Requirements wherever the law requires them is your responsibility.

Vision AI is not a safety system

Vision AI Results are probabilistic: a detection can be missed, wrong or late. Vision AI is not designed, tested or offered as a machine guard, safety interlock, emergency stop, alarm or any other control on which the health or safety of a person depends. If you rely on it as one, you do so at your sole risk.

6. INDIVIDUAL MONITORING — YOUR SOLE RESPONSIBILITY AND RISK

INDIVIDUAL MONITORING IS AVAILABLE WHENEVER YOU CONFIGURE VISION AI TO DETECT, TRACK, COUNT, LOCATE OR MONITOR PEOPLE, OR USE VISUAL DATA OR OUTPUT TO EVALUATE OR ATTRIBUTE ACTIVITY TO A SPECIFIC INDIVIDUAL. NO SEPARATE SETTING, APPROVAL OR ATTESTATION IS REQUIRED. BY USING INDIVIDUAL MONITORING YOU ACCEPT, FOR YOURSELF AND YOUR COMPANY, FULL RESPONSIBILITY FOR THAT USE, AND YOU ACKNOWLEDGE AND AGREE THAT:

• (1) YOU ALONE DECIDE WHETHER, WHERE, WHEN AND HOW TO MONITOR ANY INDIVIDUAL, AND, AS BETWEEN YOU AND OFFSIGHT, YOU ARE THE EMPLOYER, CONTROLLER, “BUSINESS” AND “DEPLOYER” FOR THAT MONITORING;
• (2) YOU USE INDIVIDUAL MONITORING AT YOUR SOLE LEGAL RISK, AND YOU ARE SOLELY RESPONSIBLE FOR COMPLYING WITH ALL MONITORING LAWS OF EVERY COUNTRY, STATE, PROVINCE AND LOCAL JURISDICTION WHERE YOU OPERATE A CAMERA OR WHERE A MONITORED INDIVIDUAL IS LOCATED;
• (3) YOU WILL OBTAIN AND MAINTAIN EVERY REQUIRED AUTHORIZATION. THAT MEANS GIVING EVERY NOTICE, POSTING EVERY SIGN, OBTAINING EVERY CONSENT AND RELEASE (INCLUDING WRITTEN BIOMETRIC RELEASES WHERE THE LAW REQUIRES THEM), COMPLETING EVERY ASSESSMENT, AND MEETING EVERY OBLIGATION TO NOTIFY, CONSULT OR BARGAIN WITH A UNION OR OTHER EMPLOYEE REPRESENTATIVE. YOU WILL ALSO HANDLE EVERY REQUEST FROM A MONITORED INDIVIDUAL;
• (4) OFFSIGHT HAS NO RELATIONSHIP WITH MONITORED INDIVIDUALS, CANNOT GIVE NOTICE OR OBTAIN CONSENT ON YOUR BEHALF, DOES NOT PROVIDE LEGAL ADVICE, AND MAKES NO REPRESENTATION THAT ANY USE OF VISION AI OR INDIVIDUAL MONITORING IS LAWFUL IN ANY JURISDICTION;
• (5) OFFSIGHT HAS NO RESPONSIBILITY, AND NO LIABILITY TO YOU, FOR YOUR INDIVIDUAL MONITORING OR FOR ANY DECISION YOU MAKE ABOUT ANY INDIVIDUAL; AND
• (6) YOU WILL DEFEND, INDEMNIFY AND HOLD HARMLESS THE OFFSIGHT INDEMNITEES AGAINST EVERY COVERED CLAIM AND ALL LOSSES, AS SET OUT IN THE TERMS OF SERVICE SECTION ENTITLED “CUSTOMER INDEMNITY.” THAT OBLIGATION HAS NO CAP AND SURVIVES TERMINATION.

AS BETWEEN CUSTOMER AND OFFSIGHT, CUSTOMER — NOT OFFSIGHT — BEARS THE LEGAL RISK OF EVERY CLAIM, LAWSUIT, CLASS OR REPRESENTATIVE ACTION, ARBITRATION, REGULATORY INVESTIGATION OR OTHER PROCEEDING ARISING OUT OF CUSTOMER’S INDIVIDUAL MONITORING OR ANY OTHER USE OF VISION AI INVOLVING INDIVIDUALS; THE PLACEMENT, FIELD OF VIEW, AUDIO SETTINGS OR OPERATION OF ITS CAMERAS; ITS NOTICES, SIGNS, CONSENTS AND OTHER REQUIRED AUTHORIZATIONS; ANY DECISION IT MAKES ABOUT AN INDIVIDUAL; AND OFFSIGHT’S USE OF CUSTOMER DATA FOR MODEL IMPROVEMENT. CUSTOMER WILL DEFEND, INDEMNIFY AND HOLD HARMLESS THE OFFSIGHT INDEMNITEES — OFFSIGHT, ITS AFFILIATES, AND THEIR RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS AND AGENTS — AGAINST EVERY COVERED CLAIM AND ALL LOSSES, INCLUDING DAMAGES, SETTLEMENTS, JUDGMENTS, ATTORNEYS’ FEES AND, TO THE EXTENT APPLICABLE LAW PERMITS INDEMNIFICATION FOR THEM, FINES AND PENALTIES, EVEN IF THE COVERED CLAIM ALLEGES, OR THE LOSS IS CAUSED IN PART BY, THE ACTIVE OR PASSIVE NEGLIGENCE, STRICT LIABILITY OR STATUTORY VIOLATION OF AN OFFSIGHT INDEMNITEE, EXACTLY AS SET OUT IN THE TERMS OF SERVICE SECTION ENTITLED “CUSTOMER INDEMNITY,” INCLUDING THE LIMITED EXCEPTIONS STATED THERE. THAT OBLIGATION IS UNLIMITED, IS NOT SUBJECT TO ANY CAP, LIMITATION OR EXCLUSION OF LIABILITY, AND SURVIVES TERMINATION. OFFSIGHT HAS NO RESPONSIBILITY, AND NO LIABILITY TO CUSTOMER, FOR CUSTOMER’S INDIVIDUAL MONITORING, ANY OTHER USE OF VISION AI INVOLVING INDIVIDUALS, CUSTOMER’S PLACEMENT OR CONFIGURATION OF CAMERAS, ANY DECISION CUSTOMER MAKES ABOUT AN INDIVIDUAL, OR CUSTOMER’S FAILURE TO COMPLY WITH MONITORING LAWS OR TO OBTAIN THE REQUIRED AUTHORIZATIONS, AS SET OUT IN THE TERMS OF SERVICE SECTION ENTITLED “NO LIABILITY TO YOU FOR MONITORING DECISIONS.” IF THIS SECTION DIFFERS FROM THOSE SECTIONS, THOSE SECTIONS CONTROL.

RIGHTS THAT CANNOT BE WAIVED

NOTHING IN THIS POLICY OR THE TERMS OF SERVICE EXCLUDES OR LIMITS ANY LIABILITY, OR WAIVES ANY RIGHT, THAT CANNOT BE EXCLUDED, LIMITED OR WAIVED UNDER APPLICABLE LAW, INCLUDING CALIFORNIA CIVIL CODE SECTION 1668. EACH PROVISION OF THIS POLICY OR THE TERMS OF SERVICE THAT ALLOCATES RISK OR LIABILITY APPLIES TO THE FULLEST EXTENT THE LAW ALLOWS. THIS POLICY AND THE TERMS OF SERVICE DO NOT WAIVE ANY RIGHT OF A MONITORED INDIVIDUAL OR OTHER THIRD PARTY THAT CANNOT BE WAIVED BY CONTRACT.

This section reproduces the acknowledgments in the section entitled “Individual Monitoring” in the Terms of Service; if they differ, the Terms of Service control.

7. No Offsight restrictions on what you monitor

Offsight imposes no restrictions of its own on where you place cameras, what they capture, or what you use Vision AI to detect, track, count, locate or monitor, including people. You alone make those decisions. You alone are responsible for making sure that each of them is lawful in every country, state, province and locality where you operate a camera or where a Monitored Individual is located. The only rule the Terms of Service and this policy set for those decisions is that you may not use the Service in violation of law (see section 1), and complying with the law is your responsibility, not Offsight’s.

Laws that may apply to you include, for example:

• laws that ban cameras in restrooms, locker rooms, changing areas and lactation spaces, such as California Labor Code section 435, New York Labor Law section 203-c and Connecticut General Statutes section 31-48b;
• laws that require every party’s consent to record a conversation, such as California Penal Code section 632, if any camera or device you connect records audio;
• biometric privacy laws, such as the Illinois Biometric Information Privacy Act, Texas Business and Commerce Code section 503.001 and Washington’s biometric identifier law;
• workplace electronic-monitoring notice laws, such as Connecticut General Statutes section 31-48d, New York Civil Rights Law section 52-c and Delaware Code title 19, section 705;
• Section 7 of the National Labor Relations Act;
• state laws on artificial intelligence and automated decisions in employment, such as Colorado’s artificial intelligence act, the Illinois Human Rights Act’s rules on artificial intelligence, California’s regulations on automated decision-making technology, and New York City Local Law 144.

These are examples of laws you are responsible for. They are not rules Offsight sets, and the list is not complete. Section 10 gives more examples.

Offsight does not review, approve or police what you choose to track, and it does not suspend or restrict Vision AI, Individual Monitoring or any camera because of what you choose to monitor, except when an order of a court, regulator or other government authority, or a law that requires Offsight itself to act, compels it to (see section 14).

8. Notice, signage, consent and labor relations

Vision AI is workplace monitoring even when it watches only machines, because people walk through the frame. The Monitoring Laws that apply to you may require notices, signs, consents and other steps before a camera sends images to Vision AI, and more before you use Individual Monitoring. Obtaining every Required Authorization is your responsibility, not Offsight’s. Where Monitoring Laws require it, that means you will:

• give every notice and make every posting that Monitoring Laws require where the camera is located and where the people in its view work or live — to employees, applicants, contractors, temporary and staffing-agency workers, workers of other employers at the Site, visitors and anyone else who may appear in its view. For example:
  • Connecticut: prior written notice of the types and specific locations of monitoring, a posting at each monitored location, and a plain-language statement for new hires (Conn. Gen. Stat. §31-48d, as amended by Public Act 26-73, from October 1, 2026);
  • Maine: notice before surveillance begins, disclosure to applicants at interview, and annual notice (26 M.R.S. §620-A) — its exclusion for safety and security cameras may not cover activity analytics;
  • California: a notice at or before collection to employees, contractors and visitors, which signage can deliver for cameras (Cal. Code Regs. tit. 11, §7012); and
  • New York: a written notice that employees acknowledge is recommended (N.Y. Civ. Rights Law §52-c);
• post the signs that Monitoring Laws require at each monitored area. Clear signage stating that cameras are in use and that their images are analyzed by automated (AI) systems is often required, and Offsight recommends it at every Site even where no law requires it;
• obtain every consent and release that the law requires, including written biometric releases that meet the Biometric Release Requirements;
• where a Site is owned or controlled by someone else, obtain any permission you need from its owner, and give any notice owed to the other employers whose workers may appear and to those workers;
• meet any duty to notify, consult or bargain with a union, works council or other employee representative before you deploy cameras, Vision AI or Individual Monitoring; and
• give any notice of AI use that applies to decisions about workers — for example under the Illinois Human Rights Act (775 ILCS 5/2-102(L)), Colorado’s automated-decision law (C.R.S. §6-1-1704), the California automated-decisionmaking regulations (Cal. Code Regs. tit. 11, §7220) and New York City Local Law 144.

You will keep records of every notice, posting, consent, release and assessment, and give Offsight copies on request where it reasonably needs them to respond to a claim, an individual or a regulator.

Your representation. You represent and warrant, when you accept the Terms of Service and for as long as any camera sends images to Vision AI, that you have obtained, and will maintain, every Required Authorization. That includes every notice and consent needed for Offsight to use Customer Data, including Visual Data that shows Monitored Individuals, for Model Improvement as the Terms of Service describe. You also represent that your notices to workers and others who may appear in Visual Data tell them that images are processed by Offsight as your vendor and are used by Offsight to train and improve its AI models.

Claims arising from a failure to give, obtain or keep a Required Authorization, and claims arising from Offsight’s use of Customer Data for Model Improvement, are Covered Claims within your defense and indemnity obligations (see section 6).

Offsight may provide template notices or signs. They are a convenience: Offsight does not warrant that any template is complete, current or sufficient for your Sites, and you remain responsible for what you give and post.

9. Decisions about people

Offsight AI holds labor and productivity data, and Vision AI can show whether a work area is active and, if you configure it to, where people are and what they are doing. Output is probabilistic — a detection can be missed, wrong or late — and a camera watching a machine or a work area is not a measure of an individual’s performance.

Offsight does not design, market or offer Vision AI or the AI assistant for making Consequential Employment Decisions. If you use Output in a Consequential Employment Decision or any other decision about an individual, you do so as the deployer and at your sole risk, and claims arising from it are Covered Claims (see section 6).

Offsight recommends that, before any decision about an individual, a trained person with the authority to change the outcome independently review the underlying evidence. Many laws go further, and knowing and meeting them is your responsibility. For example:

• some laws bar relying solely on an automated system for discipline or termination — for example California’s SB 947, from July 1, 2027;
• notice, explanation, appeal, correction and access rights may apply to the people affected, before or after the decision — for example under the California automated-decisionmaking regulations (Cal. Code Regs. tit. 11, §§7221–7222) and Colorado’s automated-decision law (C.R.S. §6-1-1705); and
• records may have to be kept — for example, four years under the California Civil Rights Council’s automated-decision systems regulations, and three years under Colorado’s automated-decision law — and workers’ requests for their data answered under warehouse-quota and similar laws. Offsight deletes raw camera frames and detection overlays from your tenant on the schedule in the Terms of Service, so use the Service’s export functions and APIs to keep what you are required to keep.

10. Monitoring laws you are responsible for

This section is information, not legal advice, and it is not complete. It gives more examples of laws you are responsible for — laws in force or enacted as of October 2026 that often apply when cameras are used at work. They are not rules Offsight sets. Laws change, and the laws of the place where each camera is located — and where the people in view work and live — are the ones that apply. You are responsible for knowing and following them; ask your own counsel.

Outside the United States, other laws apply — data-protection, works-council and employee-consultation laws among them — and they are your responsibility in the same way. No agreement between you and Offsight waives any right these laws give your workers, visitors or anyone else, and Offsight does not meet any of these obligations for you.

Everywhere in the United States

• Federal labor law (the National Labor Relations Act): in a unionized workplace, cameras are generally a subject you must bargain over, and you may not surveil, or create the impression of surveilling, union or other protected concerted activity.
• The federal Wiretap Act: recording conversations without consent is a crime. Your cameras upload still images, not video and without audio; if any device you connect records audio, this law applies to it.
• The PUMP for Nursing Mothers Act: lactation spaces must be shielded from view and free from intrusion.
• The Occupational Safety and Health Act: no retaliation against people who report injuries, illnesses or safety concerns.
• Federal anti-discrimination laws, including Title VII, the Americans with Disabilities Act and the Age Discrimination in Employment Act, apply to decisions made with the help of automated tools.
• The Fair Credit Reporting Act can apply if reports about individual workers are furnished or used to determine eligibility for employment.
• Every state’s voyeurism and invasion-of-privacy laws, and the privacy claims that many states recognize by statute or common law.

Notice and posting before monitoring

• Connecticut: written notice listing the types and specific locations of monitoring, a posting at each location, and a statement for new hires (Conn. Gen. Stat. §31-48d, from October 1, 2026).
• Maine: notice before surveillance, at interview and every year (26 M.R.S. §620-A).
• California: a notice at collection for employees, contractors and visitors under the California Consumer Privacy Act, and in some cases a risk assessment.
• New York: notice for electronic monitoring (Civ. Rights Law §52-c); whether it covers cameras is unsettled, so an acknowledged written notice is recommended.
• Delaware: notice for email, phone and internet monitoring (19 Del. C. §705).

Places where the law bans or limits cameras

• Restrooms, locker rooms and changing rooms: California (Lab. Code §435, and bathrooms under AB 1331 from January 1, 2027), New York (Lab. Law §203-c) and Rhode Island (Gen. Laws §28-6.12-1).
• Employee lounges as well: Connecticut (Gen. Stat. §31-48b, a crime) and West Virginia (Code §21-3-20, which also covers showers and dressing rooms).
• Lactation spaces: federal law (29 U.S.C. §218d), California (Lab. Code §1031) and New York (Lab. Law §206-c).
• “Private place” laws that can reach offices and similar rooms: Georgia (which requires the consent of everyone observed in a private place), Michigan, Hawaii, Delaware, Maine, New Hampshire, South Dakota and Utah.
• Homes, personal vehicles and personal property: Maine (26 M.R.S. §620-A).
• Covert or hidden cameras: notice laws such as Connecticut’s and Maine’s, the private-place laws above and the privacy claims many states recognize can make them unlawful.

If you identify people (biometric laws)

• Illinois: the Biometric Information Privacy Act requires a written release before collection, bars selling or otherwise profiting from biometric data, and lets individuals sue.
• Texas: the Capture or Use of Biometric Identifier Act (Bus. & Com. Code §503.001).
• Washington: RCW 19.375, and the My Health My Data Act (RCW 19.373) for visitors and the public.
• Colorado: C.R.S. §6-1-1314 applies to employers and bars selling, leasing or trading biometric data. Consent to biometric data used to track employees’ location must be voluntary, and cannot be a condition of employment.
• California: biometric information used to identify a person is sensitive personal information, and risk assessments are required.
• New York City: signage at commercial establishments, and no selling or otherwise profiting from biometric data (Admin. Code §§22-1201 to 22-1205).
• Portland, Oregon: no face recognition in places of public accommodation (City Code ch. 34.10).
• Connecticut: facial-recognition signage (Public Act 26-64).

AI and automated decisions about workers

• California: SB 947 (from July 1, 2027), which bars discipline or termination based solely on an automated system; the California Consumer Privacy Act automated-decisionmaking rules (from January 1, 2027); the Civil Rights Council’s automated-decision systems regulations; and AB 1883 (from January 1, 2027), which bars AI emotion inference and the collection of neural data.
• Colorado: SB 26-189 (from January 1, 2027).
• Illinois: Human Rights Act §2-102(L). Notice is required, and AI may not be used with a discriminatory effect or with zip codes as a proxy for protected characteristics.
• New York City: Local Law 144, which requires bias audits and notice for automated hiring and promotion tools.
• New Jersey: disparate-impact rules (N.J.A.C. 13:16).
• Connecticut: Public Act 26-15 (from October 1, 2027).

Off-duty conduct and non-work activities

• Illinois (820 ILCS 40/9), Michigan (MCL 423.508), California (Lab. Code §96(k)), Colorado (C.R.S. §24-34-402.5), New York (Lab. Law §201-d) and North Dakota (N.D.C.C. §14-02.4-03).
• Many states protect lawful off-duty use of lawful products.

Minors

• If minors may appear in view or be monitored, state laws on children’s data, including parental-consent requirements, may apply.

Recording conversations (all-party consent)

• Your cameras upload still images, not video and without audio. If any device you connect to the Service, or any video you upload, carries audio, complying with these laws is your responsibility.
• California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington require the consent of every party.
• Oregon does for in-person conversations, and Nevada and Connecticut for telephone calls. Treat Delaware and Michigan as all-party as well.
• The statutes include Cal. Penal Code §§631–632.7; Conn. Gen. Stat. §§31-48b(d) and 52-570d; 11 Del. C. §1335; Fla. Stat. §934.03; 720 ILCS 5/14-2; Md. Code, Cts. & Jud. Proc. §10-402; Mass. Gen. Laws ch. 272, §99; Mich. Comp. Laws §750.539c; Mont. Code §45-8-213; Nev. Rev. Stat. §200.620; N.H. RSA 570-A; Or. Rev. Stat. §165.540; 18 Pa.C.S. §5703; and RCW 9.73.030.
• A camera microphone is not a party to anyone’s conversation, so recording conversations with one without consent can be a crime anywhere in the United States.

Warehouse productivity quotas

• California, New York, Washington, Minnesota, Oregon, Connecticut (2026) and Rhode Island regulate productivity quotas in warehouses and similar workplaces, including quotas that deny or discourage meal, rest or bathroom breaks.

Consumer privacy laws

• California’s law covers employees, contractors and visitors.
• Other state laws cover visitors and members of the public, though not workers: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia.
• Also enacted, taking effect in 2027–2028: Alabama, Louisiana, Oklahoma and Vermont.

11. APIs and automated access

• Use the documented APIs, respect published rate limits, and do not attempt to evade them by rotating identities.
• An API key belongs to the account that issued it. Do not share it across organizations, embed it in a client application, or commit it to a public repository.
• Rotate keys when a person with access leaves, and when a key may have been exposed. Key rotation and live usage metering are built into the platform; use them.
• Do not use automated access to replicate the Service, to bulk-mirror data for a third party, or to sustain load testing without prior written permission.

12. Integrations

When you connect Offsight AI to another system — an accounting or ERP platform, a design-file service, or anything through the API framework — you are responsible for the credentials used, for the scope of access granted, and for compliance with that provider’s terms. Where the AI assistant helps you configure an integration, review the resulting configuration before it moves live data.

13. Reporting a problem

Report abuse, a suspected vulnerability or a compromised account to support@offsight.com. Please include enough detail to reproduce the issue, and do not include credentials. We ask that you do not publicly disclose a vulnerability before we have had a reasonable opportunity to fix it.

Anyone — including a worker or a visitor at a customer’s Site — may contact support@offsight.com about a camera connected to Offsight. The customer that operates the camera decides where it is placed and what it captures, and is responsible for doing so lawfully, so Offsight may pass the substance of the report to that customer where it can identify it. Offsight acts on a camera itself only on a Suspension Event, such as an order of a court or regulator (see section 14).

14. Enforcement and suspension

A breach of this policy is a breach of the Terms of Service, and Offsight may exercise the rights the Terms of Service give it for a breach, including its termination rights.

Offsight may suspend or restrict the Service, or any part of it — an account, an API key, an AI feature, Vision AI or a camera — only on a Suspension Event, as the Terms of Service define it:

• (a) your account is more than sixty (60) days past due;
• (b) a threat to the security or integrity of the Service, of Offsight, or of other customers’ data — for example compromised credentials, malware, or attack traffic from your account, or use that causes, or is reasonably likely to cause, damage to or material degradation of the Service that interferes with Offsight’s ability to serve other customers; or
• (c) an order of a court, regulator or other government authority with jurisdiction, or a law that requires Offsight itself to act, compels Offsight to suspend or restrict the Service or any part of it.

Offsight does not suspend or restrict Vision AI, Individual Monitoring or any camera because of what you choose to monitor, except under item (c) of that definition. Offsight will give notice of a suspension unless the law or the order prevents it, or unless the security threat requires immediate action, and will lift the suspension once the Suspension Event ends.

A suspension or restriction on a Suspension Event is excluded from the availability target, to the extent of the suspended item, as the exclusions in the Service Level Agreement state. Offsight is not obliged to monitor your use of the Service, your cameras or your compliance with Monitoring Laws, and its choice to act, or not to act, under this section does not make it responsible for that use or that compliance.

15. Changes to this policy

Offsight may update this policy as the product, the technology and the law change. Updates are made under the Terms of Service section entitled “Changes to these Terms.” Offsight will give notice of a Material Change at least thirty (30) days before it takes effect, by email to your Authorized Administrators and/or by notice in the Service or on Offsight’s website. A Material Change takes effect at the end of that notice period, and your continued use of the Service after it takes effect is your acceptance of it. Other updates take effect when Offsight posts them or gives notice of them. If you do not agree to an update, your remedy is the one that section provides. If an Order Form or other agreement signed by both you and Offsight conflicts with an update, the signed agreement controls for its term. The date at the top of this page shows when this policy was last updated.

16. Contact

Questions about this policy: support@offsight.com. Contract questions: sales@offsight.com.

Offsight Inc.
650 California St
San Francisco, California 94108

Sign Up For Free