Ctrlapptech

Data Processing

Sites that subscribe to the service decide why visitor and entry data is collected at their gates. We process that data on their behalf. These terms describe how, and form part of the Terms of Service for every subscribing site.

01Roles

The subscribing site is the data fiduciary for gate data. We act as its data processor and process gate data only on the site's documented instructions, which are the settings, rules and retention periods configured in the dashboard.

02Categories of data

  • Visitor identity: name, mobile number, photo, ID details where required.
  • Visit details: host, flat or department, purpose, vehicle, pass type, times and gate.
  • Decisions: approvals, denials, guard notes and AI Gate Assistant suggestions.
  • Workforce data: contractor workers, induction status, permits and attendance.
  • Device events: turnstile, barrier and door openings linked to passes.

03Purpose limitation

Gate data is processed only to run the site's gates and produce its reports. It is not used for advertising, sold, combined with other sites' data, or used to train AI models outside the site's own account.

04Sub-processors

We use sub-processors for cloud hosting, SMS and WhatsApp message delivery, email delivery and push notifications. Each is bound by written terms at least as protective as these. Admins on the Campus Gate plan can request the current list and are notified before a new sub-processor is added.

05Security measures

  • Encryption in transit (TLS) and at rest.
  • Role-based access within each site.
  • Staff access limited to support and security work, with logging.
  • Encrypted local storage on guard tablets during offline operation.
  • Regular backups with the same retention rules as live data.

06Retention and deletion

Records are deleted automatically when the site's retention period ends. On termination, all gate data is deleted after the retention period or within 30 days of a written request from the site admin, whichever is earlier, after allowing time for export.

07Data principal requests

When a visitor, resident or worker asks the site to access, correct or erase their data, we provide tools in the dashboard and, if needed, direct help so the site can respond within the time the law requires.

08Breach notification

If we become aware of a personal data breach affecting a site's data, we notify the site admin without undue delay with the information the site needs to meet its own reporting obligations.

09Location

Gate data is hosted in India by default. Campus Gate customers can request specific data residency arrangements.

Questions about this page can be sent through Connect Support on line 105, Data and privacy.