What Data Is Collected
EchoDepth Events collects only derived, aggregated, non-biometric signal data:
- Zone engagement signals: Confidence, Instability, and Net Confidence scores aggregated per zone per time window
- Confusion signal event logs: Timestamps and zone identifiers when confusion signal thresholds are exceeded
- Dashboard access logs: Standard web application access logs (IP address, timestamp, action) retained for security purposes
What Data Is NOT Collected
- Video recordings or face images — frames are processed and discarded on the edge device
- Individual visitor identifiers — analysis is population-level only
- Biometric data — no face templates, face embeddings, or biometric identifiers are created or stored
- Audio recordings
Retention Periods
- Zone engagement signal data: retained for 24 months from the event date
- Confusion signal event logs: retained for 24 months from the event date
- Dashboard access logs: retained for 12 months
- Post-event report data: retained for 36 months
Data Deletion Requests
To request deletion of your event data before the standard retention period, contact events@cavefish.co.uk with your event reference. Deletion is completed within 30 days.
GDPR Basis for Processing
EchoDepth Events processes zone engagement signal data under Legitimate Interests (Article 6(1)(f) GDPR). Because no biometric data (Special Category data under Article 9) is collected, the standard Article 9 consent requirement does not apply. A Legitimate Interests Assessment is available on request.