Antare Privacy Policy

Version 1.0 · Effective date: 18 June 2026 · Last updated: 18 June 2026

Antare acts in two distinct roles depending on the data being processed.

Antare is a data processor for footage and related data generated by Antare Devices in customer deployments ("Customer Footage"). This footage may include Article 9 special category and Article 10 data. The customer is the controller and determines purposes, retention, and use. This processing is fully described in the Data Processing Agreements between Antare and our customers. If we receive questions, objections, or requests to exercise rights concerning this processing, we will forward the matter on to the controller, and provide any help as appropriate. Antare may also assist controllers preparing necessary DPAs.

Antare is a data controller for personal data we collect in our own operations — including data about customer administrators, website visitors, marketing leads, and individuals who contact us directly. Part 1 describes this processing.

Part 2 sets out provisions that apply regardless of role, including international transfers, security, data subject rights, and complaints.

Data Protection Officer: dpo@antare.com

Antare acts as a data controller for personal data we collect in our own operations — including data about customer administrators, website visitors, marketing leads, applicants, and individuals who contact us directly.

Antare does not collect or process special category personal data (Article 9 GDPR) of customers, website visitors, or other controller-scope data subjects in the ordinary course of its business.

We use this data to deliver, support, and bill for the Service; authenticate and manage user accounts; communicate with customers about service operation, security, and contractual matters; maintain and improve our website, marketing surfaces, and operational systems; send marketing communications to individuals who have opted in, with an unsubscribe option in every communication; conduct product analytics at controller-scope (excluding any Customer Footage); comply with legal, tax, and regulatory obligations; conduct employee recruitment; and establish, exercise, or defend legal claims.

Antare does not sell controller-scope personal data and does not share it with third parties for their own marketing purposes.

Antare does not make automated decisions producing legal effects, or similarly significant effects, on customers in its capacity as controller.

AI-generated outputs delivered to customers — such as transcriptions, classifications, and summaries — are informational. The customer is responsible for any consequential decision made on the basis of those outputs.

Aggregated and anonymised data may be retained indefinitely.

Antare engages third-party processors for the operation of day-to-day business activities across the following categories:

Antare operates from two entities — Antare Technology Limited (UK) and Antare Technology Inc. (United States). Personal data processed under this policy may be transferred between these entities and to sub-processors located in the United Kingdom, European Economic Area, United States, or other jurisdictions where our hosting and infrastructure providers operate.

Where customers elect a specific hosting region (UK, EU, or US) for Customer Footage and associated data, Antare applies that election and data remains within the elected region for the duration of the customer’s instructions.

Where personal data of UK or EEA data subjects is transferred to a jurisdiction without an adequacy decision, Antare relies on appropriate safeguards under Chapter V of the UK and EU GDPR, including the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, and the EU-US, UK Extension, and Swiss-US Data Privacy Frameworks where Antare or its sub-processors are certified.

Transfer Impact Assessments are conducted in line with Schrems II and equivalent UK ICO guidance, and are available to controllers under NDA.

Antare does not knowingly collect personal data from children under the age of 18 in its capacity as data controller.

Where Antare Devices incidentally capture minors as footage subjects, the controller is responsible for the lawful basis for that processing and for any additional protections required under applicable law, including parental consent where applicable.

You have the following rights in relation to your personal data:

To exercise any of these rights as a data subject, contact Antare’s Data Protection Officer at dpo@antare.com. For footage subject requests, contact the relevant controller — Antare will forward such requests to them where appropriate.

Antare will verify the identity of the requestor before fulfilling a request. We will respond within one month of receipt, extended by a further two months for complex or numerous requests with prior notice.

You also have the right to lodge a complaint with a supervisory authority — see Section 2.6.

If you are a resident of California or another US state that grants comparable privacy rights — including Virginia, Colorado, Connecticut, Utah, and other states with similar laws — you have the following rights with respect to controller-scope personal information:

Antare does not sell or share personal information for cross-context behavioural advertising. We do not discriminate against individuals for exercising these rights.

To exercise these rights, contact dpo@antare.com. You may use an authorised agent — please provide written authorisation when submitting through an agent. For information specific to Customer Footage, contact the controller.

Antare maintains technical and organisational security measures appropriate to the risk of the processing, including:

Antare is in the final stages of independent security certification. ISO 27001 Stage 1 audit is complete; SOC 2 Type I report is imminent. ISO 27001 Stage 2 audit and SOC 2 Type II report are targeted for Q3 2026, ahead of general availability.

Where a personal data breach occurs in Antare’s systems, Antare will notify affected controllers without undue delay, and in any event within 72 hours of becoming aware of the breach, in accordance with the Data Processing Agreement. Where Antare is the controller and notification is required by law, Antare will notify supervisory authorities within 72 hours and data subjects directly without undue delay where required.

If you have a concern about how Antare processes your personal data, contact the Data Protection Officer at dpo@antare.com in the first instance.

You also have the right to lodge a complaint with a supervisory authority:

Antare uses cookies and similar technologies on our website and admin console. For full information, including the categories of cookies we use and how to manage your preferences, see our Cookie Policy at antare.com — Cookie Settings.

Antare may update this Privacy Policy from time to time. The current version and effective date are shown at the top of the policy.

Material changes will be notified to customers in advance through their account or by direct communication. Previous versions are available on request.