Data Retention

What Data Is Collected

EchoDepth Events collects only derived, aggregated, non-biometric signal data:

• Zone engagement signals: Confidence, Instability, and Net Confidence scores aggregated per zone per time window
• Confusion signal event logs: Timestamps and zone identifiers when confusion signal thresholds are exceeded
• Dashboard access logs: Standard web application access logs (IP address, timestamp, action) retained for security purposes

What Data Is NOT Collected

• Video recordings or face images — frames are processed and discarded on the edge device
• Individual visitor identifiers — analysis is population-level only
• Biometric data — no face templates, face embeddings, or biometric identifiers are created or stored
• Audio recordings

Retention Periods

• Zone engagement signal data: retained for 24 months from the event date
• Confusion signal event logs: retained for 24 months from the event date
• Dashboard access logs: retained for 12 months
• Post-event report data: retained for 36 months

Data Deletion Requests

To request deletion of your event data before the standard retention period, contact events@cavefish.co.uk with your event reference. Deletion is completed within 30 days.

GDPR Basis for Processing

EchoDepth Events processes zone engagement signal data under Legitimate Interests (Article 6(1)(f) GDPR). Because the data is aggregated, derived and non-biometric, and because no individual can be identified from it, the processing does not engage Article 9 and carries no consent requirement at Standard tier. What is retained is limited by design rather than by policy: only derived, aggregated, non-biometric signal data leaves the edge unit at the venue, since raw video frames are discarded immediately after Action Unit values are read and are never transmitted or stored. Zone engagement signal data is retained for 24 months from the event date and then deleted, a window chosen so that year-on-year comparison between the same events remains possible. To request deletion of your event data before the standard retention period, contact events@cavefish.co.uk with the event name and date.