Privacy Notice

This notice explains what personal information GuardianAI handles, why it is needed, where it can be processed, and the choices available to you.

Effective: 10 August 2026Version: 10 August 2026

Who is responsible

GuardianAI is a brand and service operated by Shadowsecure Technology (Pty) Ltd, registration number 2022/846807/07, South Africa. In this notice, “GuardianAI”, “we”, “us” and “our” refer to that company.

Privacy requests can be sent to info@guardianai.co.za or support@guardianai.co.za.

1. Scope

This notice applies to the GuardianAI website and portal, partner applications, customer and site onboarding, installation and commissioning, CCTV event-image detection, alerts, billing, payments and support. It also covers information supplied by a security-company partner about a site or its authorised users.

2. Information we handle

Depending on how you use GuardianAI, this can include:

  • Account and identity details, such as name, company or trading name, email, phone number, region, role and account-verification status. Passwords are stored as one-way hashes rather than readable passwords.
  • Partner-application details, including business type, services offered, PSiRA number or website, intended use, declarations, signature details, review status and correspondence about the application.
  • Customer, site and commissioning details, including billing and site addresses, camera or recorder information, installation preferences, nominated contacts, Telegram group identifiers and operational configuration.
  • Billing and transaction records, such as invoices, statements, payment status, payment references and information needed to reconcile payments. Card or payment transactions initiated through Payfast are also subject to Payfast's privacy terms.
  • Support communications, Telegram support messages, attachments, operational logs and audit records.
  • CCTV event still images sent by a configured camera or recorder, detection results, and positive-detection images delivered as alerts.
  • Website and security data, such as IP address, browser or device information, pages and actions, referral and campaign information, cookie identifiers, login events and abuse-prevention signals.

3. How CCTV event images are handled

GuardianAI receives individual event still images from compatible CCTV equipment and analyses them for people. Routine event files are normally discarded after processing. A positive-detection image is forwarded to the site's nominated private Telegram group and can be held temporarily for operational delivery, support or fault investigation. Exceptional processing or debug queues can also retain an image temporarily when needed to diagnose a problem.

GuardianAI does not provide a continuous CCTV recording archive. Once an alert is sent, copies held by Telegram, group members or a partner are controlled by those recipients and are not removed merely because GuardianAI's operational copy is deleted.

CCTV equipment can use FTP to deliver event images. Depending on the equipment and site configuration, that connection may not be encrypted. GuardianAI performs commissioning and limits the feed to the event-image configuration needed for the service.

4. Why we use personal information

We use information where it is necessary to:

  • create, secure and administer accounts;
  • verify and review partner applications;
  • assess compatibility, commission sites, process event images and deliver alerts;
  • provide billing, payment reconciliation, statements and service notices;
  • respond to support requests and investigate faults or misuse;
  • measure website and campaign performance and improve the service;
  • protect GuardianAI, customers and partners against fraud, abuse and unauthorised access; and
  • meet accounting, legal, regulatory and dispute-resolution obligations.

These uses are based on performing or preparing to perform a service agreement, legitimate business and security interests, compliance with legal duties, and consent where consent is required. Partner approval is reviewed by a person. The detection system can automatically decide whether to send an alert, but the recipient must assess the image and decide what response is appropriate.

5. Who can receive information

We do not use personal information as a product for sale. We disclose information only as needed for the purposes in this notice, including to:

  • the relevant GuardianAI account holder, partner, site owner and nominated alert or support recipients;
  • Telegram for alert and support-message delivery;
  • Payfast for supported payments and SMTP2GO for service-email delivery;
  • hosting, backup and technical service providers used to run GuardianAI;
  • Google Analytics, Google Ads, Microsoft Clarity and Meta Pixel when the applicable measurement service is configured on the website; and
  • regulators, courts, advisers or law-enforcement bodies where disclosure is lawfully required.

Each external provider processes information under its own terms as well as any arrangements it has with us. A partner or site owner that adds people to an alert group is responsible for choosing authorised recipients and managing their continued access.

6. Processing outside South Africa

GuardianAI uses detection and hosting infrastructure in South Africa and France, and backup storage in the AWS eu-north-1 region. Telegram, Payfast, SMTP2GO, Google, Microsoft, Meta and other service providers can also process information in other countries. Where personal information crosses borders, we take reasonable steps to use providers and safeguards appropriate to the information and the service, as required by applicable South African law.

7. Cookies, browser storage and measurement

GuardianAI uses cookies and browser storage for authentication, account continuity, security preferences and partner-application attribution. When configured, Google Analytics and Google Ads measure visits and conversions, Microsoft Clarity helps us understand page use, and Meta Pixel measures advertising activity. Those providers may set or read their own identifiers.

Use “Analytics choices” in the site footer to turn these marketing measurements off or on for this browser. You can also limit cookies through browser settings and use the advertising or privacy controls offered by those providers. Blocking essential authentication storage can stop the portal from working correctly.

8. Retention

We keep information only for as long as it is reasonably needed for the purpose collected, service operation, security, accounting, legal obligations or a dispute. Different records have different operational and legal needs, so there is no single retention period for all GuardianAI information. Routine and positive CCTV event images are handled as described in section 3; GuardianAI is not a continuous image archive. Records held by a third-party recipient remain subject to that recipient's retention practices.

9. Security

We use access controls, one-way password hashing, authentication controls, audit and operational logging, abuse controls and backups to reduce risk. Access is limited to what is needed to operate and support the service. No online system or transmission method is risk-free, and not every camera protocol supports encrypted delivery. Please protect your account credentials and report suspected unauthorised access promptly.

10. CCTV and partner responsibilities

A customer, partner or site owner must have lawful authority to operate the cameras, send event images to GuardianAI and nominate alert recipients. They are responsible for notices, permissions and access management required at the site, and for using alerts only for a legitimate security purpose. GuardianAI processes the event images to provide the requested detection and alert service; it does not decide whether a person is a threat.

11. Your privacy rights

Subject to applicable law, you can ask whether we hold your personal information, request access or correction, ask for deletion where there is no lawful reason to keep it, or object to certain processing. We may need to verify your identity and may retain records where the law or a live dispute requires it.

Send a request to info@guardianai.co.za or support@guardianai.co.za. You may also contact or lodge a complaint with the Information Regulator (South Africa).

12. Updates and contact

We may update this notice when the service, providers or legal requirements change. The effective date and version at the top identify the current notice. Material changes will be communicated through the website, portal or account contact where appropriate. For service rules, read the Terms of Service.