Privacy is part of the picture.

HappyPulse analyzes visible conditions in authorized customer-facing recordings. We aim to minimize personal information and give you clear control over your upload.

What we assess

The demo evaluates scene-level circulation, visible queues, group-level activity, and the presentation of customer areas. It does not identify people, track individuals, create biometric profiles, infer sensitive attributes, or assess private emotional states or employee performance.

What you upload

Only upload footage you are authorized to record and analyze. Use recordings of ordinary customer-facing spaces such as dining areas, hotel lobbies, and shops. Do not upload footage from homes, schools, private workplaces, bathrooms, changing rooms, or other private or sensitive settings. Audio is ignored throughout analysis.

What goes to the AI provider

We sample at most 48 frames across up to 16 windows. Frames are resized, compressed, stripped of image metadata, and processed with your exclusion masks and detected-face blurring before they are sent to OpenAI’s Decisions API. The complete recording is not sent to OpenAI. Face detection can miss faces, and blurring does not guarantee anonymity.

OpenAI states that API content is not used for training by default unless the customer opts in. Separate abuse-monitoring retention and other service rules may apply. We do not promise zero third-party retention. Read OpenAI’s API data controls for details.

Private uploads and deletion

Your recording is stored in private local storage or a configured private S3-compatible bucket. An HttpOnly anonymous session cookie protects upload and result access. Uploads expire within 24 hours; a scheduled cleanup process deletes expired footage and clears the associated report, dimensions, and observations. Temporary extracted frames stay in worker memory and are not retained as image files.

Use “Delete upload” in the demo to request early deletion of the recording and report. It also stops active processing at the next checkpoint. Frames already sent to OpenAI remain subject to that provider’s retention rules. Losing your session cookie removes your ability to retrieve the upload. Sample stock footage is publicly available and is handled separately.

Anonymous sessions and limits

We store a hash of the anonymous session token and a keyed hash of the connecting IP to enforce the free-demo quota. We do not retain raw IP addresses in the application database. Reverse-proxy infrastructure may produce its own access logs; configure your deployment’s log retention accordingly. The quota resets by UTC day. Public uploads use an automatic browser check, with short-lived verification bound to your anonymous session and connection. The check runs locally and does not read your recording or send verification data to another provider. If the operator enables optional Cloudflare Turnstile instead, it may process verification information; see Cloudflare’s Privacy Policy.

Contact and early access

If you submit a form, we store your name, email, optional business information, message, and contact consent to respond to your interest. These records are removed after one year. We do not automatically send marketing emails from this demo. Contact us through the contact form to request removal of your early-access details.

Optional website analytics

We use Google Analytics 4 to understand website visits and improve the site. Visitors detected in Europe are shown an analytics choice before Google Analytics loads. Elsewhere, including when country detection is unavailable, analytics is enabled by default unless you have opted out. Google may process page URLs, referral information, browser and device details, and website interaction information, and use analytics cookies. Advertising personalization and Google signals are disabled. We do not send uploaded recordings, sampled frames, analysis content, or contact form field values to Google Analytics.

In Europe, choose “Essential only” to keep analytics off or “Allow analytics” to enable it. Visitors anywhere can change their choice or opt out through “Cookie settings” in the footer. Country detection uses Cloudflare’s country-level connection information when available; we do not request your device’s location or store the trace’s IP information. Your choice is remembered in this browser for up to 180 days; choosing essential cookies disables collection and removes HappyPulse analytics cookies. The anonymous upload session cookie remains necessary for private upload access. Read Google’s Privacy Policy for details about its processing.

Operational records

Non-image usage records track model requests, token counts, cost estimates, processing status, and random job identifiers. They support budgets and troubleshooting. Deletion removes the report and scene observations; usage records contain no video, face images, names, or raw IP addresses.