Privacy policy

1. Who is responsible for your data

Alsense Motorsport SRL, VAT number RO 42664225, is responsible for the personal data described in this policy. Our address is Eufrosina Popescu 61, Bucharest, 031681, Romania. For privacy questions or requests, email office@alsense.eu.

This policy covers our website, customer accounts, purchases, support, newsletter and the connected features of Video One Pro, Video One Paddock and the mobile app. The information we receive depends on the features you use.

2. What we collect and why

Accounts and devices: your email address, authentication information, account settings, device identifiers and device associations. We use these to provide your account, connect your device and control access. This processing is necessary to perform our contract with you.

Orders and subscriptions: your name, contact details, billing and delivery addresses, company and VAT details where supplied, order history, plan, usage and payment status. We use these to fulfil purchases and subscriptions, arrange delivery and provide support. We also retain transaction and invoice records to meet our legal obligations. Card payments are handled by Stripe; we do not store your full card number or security code.

Connected sessions: video and audio sent to our services, recordings stored in the cloud, session times, track information, GPS position and telemetry such as speed, inertial measurements and vehicle CAN data. We process these to provide the streaming, storage, sharing and analysis features you choose. Location and telemetry can identify a driver or reveal their movements.

Diagnostics and security: connection and access logs, IP addresses, browser information, device status, errors and service usage. We use these for our legitimate interests in keeping the service secure, investigating faults, preventing abuse and operating it reliably. We consider the effect on your privacy when relying on these interests.

Messages and support: the contact details, correspondence and files you send us. We use them to answer pre-sale questions, fulfil our support obligations or, for other enquiries, pursue our legitimate interest in responding to you. Please send only the information needed to explain the issue.

Required information is identified when we ask for it. Without the details needed for an account, order or service, we may be unable to provide it. We may also receive information from your team’s account administrator, a device user, or a payment or delivery provider involved in your purchase.

3. Your recordings and other people’s data

You keep ownership of your recordings and telemetry. We process content sent to our services to provide the features you request, rather than using it as our own marketing material. Recording or analysing a file locally does not, by itself, mean that file is stored in our cloud.

An account owner or authorised team member may give other people access. Anyone with a valid viewing link may be able to open it without an account, so share links carefully and revoke access when it is no longer needed. Viewers may make their own copies; revoking a link cannot recover copies already made.

Authorised personnel and service providers may access information where needed for support, security, service operation or legal obligations. Access is limited to the purpose for which it is needed.

If you record drivers, passengers or other identifiable people, you are responsible for giving them appropriate information and having a lawful basis to record and share their data. Where a business customer determines the purpose of processing and we handle content solely on its instructions, that customer is the controller and we act as its processor under the applicable data processing agreement. We remain the controller for our own account administration, billing and security activities.

4. Who receives information

We use Supabase for authentication and database services, Amazon Web Services for streaming, storage, device connectivity and email delivery, and Railway for application hosting. Stripe handles card payments. Mailchimp manages our hosted newsletter signup and mailing list. Each receives the information needed for its role.

Delivery providers receive the details needed to deliver orders. Banks, accounting providers, professional advisers and public authorities may receive information needed for payments, accounts, legal obligations or claims. We do not sell personal data.

Sharing a session or sending it to an external platform also makes information available to the recipients you choose. Their handling of that information is covered by their own policies.

Some providers or their support teams may process information outside the European Economic Area. Where this happens, a valid transfer mechanism is required, such as an applicable adequacy decision or the European Commission’s standard contractual clauses with any necessary additional safeguards. Contact us for information about the safeguards applicable to your data.

5. Newsletter and browser storage

If you subscribe through our Mailchimp form, we use your email address and any optional details you provide to send the updates you requested. The legal basis is your consent. Signup records help us keep evidence of that consent. You can withdraw it at any time using the unsubscribe link or by contacting us; this does not affect processing carried out before withdrawal.

The website uses cookies and local browser storage for functions such as signing in, keeping your cart and remembering service preferences. Blocking this storage may stop those functions working. Newsletter signup takes place on a separate Mailchimp-hosted page, where Mailchimp’s own cookie and privacy information also applies.

With your analytics consent, Google Analytics 4 measures visits to public pages and shopping events. We also keep the first and latest non-direct campaign associated with your browser and can attach this attribution to a checkout and its customer record. We do not send names, email addresses, payment details or private telemetry to Google Analytics. You can reject analytics or withdraw consent through Cookie settings in the footer without affecting purchases or account access. Browser attribution lasts up to 90 days; order-linked attribution is removed within 90 days after checkout. Google Analytics event retention is configured separately as described in our cookie policy and provider settings.

If you explicitly request a basket reminder, we store your email, basket contents and consent record and share the email and product details with Mailchimp to send one reminder after about 24 hours if you have not ordered. This does not subscribe you to the newsletter. You can cancel in your cart, through the saved-basket link or using the email unsubscribe option. We stop reminders after completed checkout, including when payment is pending. Saved baskets expire after 30 days and are removed by our scheduled cleanup, including from Mailchimp. Order records have separate retention requirements.

6. How long we keep information

Account information and device associations are kept while needed to provide your account and services. Closing an account disables access; it does not instantly erase all underlying records. You can request erasure by emailing us, and we will assess and carry out the request in accordance with your rights.

Cloud recordings and associated session data are kept while you use the storage service, unless you delete them earlier. After your paid subscription ends, your cloud library remains available to download for 60 days and is then removed. Keep your own copy of any recording you want to retain.

Our proposed routine retention period for device diagnostic samples and telemetry not attached to a saved session is 30 days. Saved session telemetry follows the cloud-library policy. Information needed to investigate a specific security incident may be retained until that investigation and any related claim are resolved.

Support records are kept to resolve the enquiry and deal with related warranty issues or disputes. Orders, invoices and payment records are retained for the periods required by applicable accounting and tax law. Where records are needed for a legal claim, they are kept until the relevant claim and limitation period have ended.

Newsletter details are kept until you unsubscribe or the mailing list is discontinued. A limited record of your opt-out and consent history may remain to respect your preferences and demonstrate compliance. Deleted information may remain in restricted backups until those backups expire; backup expiry periods must be confirmed before this policy is published.

7. Your rights and how to contact us

Depending on the circumstances, you can ask to access, correct or erase your personal data, restrict its use, or receive a portable copy. You can object to processing based on legitimate interests and can object to direct marketing at any time. Where we rely on consent, you can withdraw it.

Email office@alsense.eu to make a request. We may need proportionate information to verify your identity. We normally respond within one month; if the law allows an extension for a complex request, we will explain this within that first month. Requests are normally free of charge. If we cannot fulfil a request, we will explain why and the available ways to challenge the decision.

You can complain to Romania’s National Supervisory Authority for Personal Data Processing, ANSPDCP, at www.dataprotection.ro, or to the supervisory authority where you live or work. You do not have to contact us first to exercise that right.

8. Changes to this policy

We update this policy when our services or data practices change. The date at the top identifies the version. We will bring significant changes to your attention through an appropriate notice and seek fresh consent where required.