ProofRec Technology SAS operates the ProofRec service (hereinafter "ProofRec", "we", "us", or "our").
When you register an account, ProofRec acts as the Data Controller for your account and billing information. When processing packing station video recordings, barcode scans, and customer order records on behalf of our business clients, ProofRec acts as a Data Processor under GDPR Article 28.
We process data only to provide, maintain, and secure our order proofing infrastructure:
- Account & Billing Details: Name, email, company name, VAT number, and payment transaction tokens;
- Video Proof & Recordings: Packing station video streams, audio (if enabled), barcode scans, tracking numbers, and order timestamps;
- Device & Telemetry Data: Browser version, desktop recorder version, IP address, and system diagnostic logs for stability monitoring.
We process personal data under the following lawful bases pursuant to GDPR Article 6:
- Contractual Necessity: To provide the recording service, host evidence, and fulfill our contractual commitments to you;
- Legitimate Interests: To prevent fraudulent claims, secure our infrastructure, and improve product reliability;
- Legal Obligations: To comply with financial accounting and tax reporting obligations.
All video recordings and order proofs are encrypted both in transit (using TLS 1.3) and at rest (using AES-256 standard encryption).
Access to your workspace recordings is strictly isolated using tenant-level authentication and role-based access control (RBAC). Our staff cannot view private order recordings unless explicitly authorized by you for support diagnostics.
Recordings and packing proof videos are retained according to your workspace storage policy (e.g. 30, 90, or 180 days). Once the retention threshold is reached, video assets and associated cache files are automatically and permanently purged from cloud storage.
Depending on your location, you have statutory rights regarding your personal information:
- The right to access and receive a copy of your personal data;
- The right to rectify inaccurate or incomplete information;
- The right to request data erasure ("Right to be Forgotten");
- The right to data portability in a structured, machine-readable format.
To exercise any of these rights, contact our Data Protection Officer at [email protected].
We partner with reputable cloud infrastructure providers adhering to ISO 27001 and SOC 2 Type II compliance standards for video storage, edge delivery, and secure authentication.