Sensor & Camera Policy
The short version
- No facial recognition, no biometrics, no license plate readers, no audio recording.
- Cameras used for counting process images on the kiosk; only anonymous numbers leave it.
- Third-party sensor partners must meet the same rules.
Who we are
These policies are provided by Pivotal Intelligence LLC, a Smart City Media company (“Pivotal Intelligence,” “we,” “us,” or “our”). “Smart City Media” means Smart City Media LLC and its subsidiaries and affiliates other than Pivotal Intelligence. “Affiliates” means Smart City Media and any entity that controls, is controlled by, or is under common control with Pivotal Intelligence.
Pivotal Intelligence operates the Citypost™ digital kiosks, the Citypost mobile app, the Campaign Manager advertising platform, the kiosk sensor network, the Citypost Wi-Fi service, and this website (together, the “Services”).
1. Purpose
Citypost kiosks can host sensors that help cities measure air quality, weather, noise and pedestrian activity, keep equipment safe, and support public-safety services such as emergency call buttons. This policy explains how those sensors work, and the limits we place on them and on third-party sensor partners.
2. Our commitments for every sensor
- No facial recognition, gait recognition, or other biometric identification, by us or by any partner, on any kiosk.
- No license plate reading, and no tracking of individuals across kiosks.
- Edge processing first. Camera and audio inputs used for counting are processed on the kiosk, and only anonymous counts or statistics leave the device.
- No audio recording of conversations. Noise sensors measure sound levels only.
- Disclosure. Each kiosk with an active camera or sensor displays a notice describing it and linking to this policy. For the full list of sensors on a kiosk, contact privacy@pivotal-intelligence.com with the kiosk ID.
- Municipal control. We activate sensors only as permitted by our agreement with the relevant Municipal Partner and by local law, including local surveillance-technology ordinances.
- Same security baseline. Any sensor connected to our network must meet our encryption and quantum-readiness requirements.
3. Sensor tiers
| Tier | What it is | Who controls the data | Our requirements |
|---|---|---|---|
| Tier 1 Integrated | Sensors built into the kiosk and run by our software, such as environmental sensors, tamper and equipment-health sensors, and cameras used for anonymous counting or security. | Pivotal Intelligence, under this policy and our Privacy Notice. | Edge processing; only anonymous or aggregated outputs leave the kiosk; operational logs exclude personal information; security-camera footage is kept only for the period in our retention schedule. |
| Tier 2 Hybrid | Partner sensors that exchange data with our platform through an API, with processing split between the kiosk and the partner's cloud. | Shared. The partner operates the sensor under a written agreement with us. | Partners must meet or exceed the commitments in Section 2, provide only de-identified or aggregated data to us, disclose their data practices, keep their own data within agreed retention limits, and give us audit rights. |
| Tier 3 Independent | Services that only use the kiosk's physical space, power or network backhaul, and run their own end-to-end path, such as a 911 call box connected to a voice service provider. | The third-party provider, under its own policies and any applicable public-safety rules. | We do not access or keep the data. Partners must attest that their service does not conflict with Section 2 and must encrypt their traffic across our backhaul. |
4. AI and analytics
Where we use computer vision or other AI models to produce anonymous counts, those models run on the kiosk, are evaluated for accuracy before deployment, and are not used to identify, profile, or make decisions about individuals. We document each model's purpose and inputs, and share this documentation with Municipal Partners on request.
5. Questions
To ask which sensors are active on a specific kiosk, or to raise a concern, contact privacy@pivotal-intelligence.com and include the kiosk ID shown on the screen.