Acceptable use policy

Last updated 11 October 2026 Echo Thirteen Capital Ltd t/a KENAEZ

KENAEZ is a powerful surveillance and safety platform. This policy sets out what it may not be used for. It forms part of our terms of service, and applies to everyone who uses the Service through your organisation, including guests.

1. Surveillance must be lawful and proportionate

You must not use KENAEZ to:

monitor places where people have a strong expectation of privacy, such as toilets, changing rooms, bedrooms or treatment rooms, unless you have a clear legal basis, have assessed the necessity and impact, and have told the people affected;
record or monitor people covertly, except where the law expressly permits it and you have followed the procedures it requires;
point cameras at neighbouring homes, gardens or other private property beyond what is necessary for your legitimate purpose;
operate ANPR or CCTV without the signage and privacy information the law requires.

2. No identification of people by their face or body

You must not attempt to add, connect or approximate facial recognition or any other biometric identification using KENAEZ, including by feeding its stills or exports into a third-party face-matching service, or by trying to make the AI compare faces.

3. No tracking people without their knowledge

You must not attach or give a GPS tracker to anyone without their knowledge, or without the consent of someone legally entitled to give it on their behalf, or use trackers, Retrace or any other feature to stalk, harass, intimidate or control anyone.

4. No discrimination

You must not use descriptions, apparent characteristics or search results to target, exclude or treat people less favourably because of a protected characteristic, or to profile people by ethnicity, sex, age or any other protected characteristic.

5. Searches need a reason

Retrace searches must be made for a legitimate purpose, such as responding to an incident, a missing person or a request from the police. Do not search for people out of curiosity. Where your organisation requires a reason, it must be true.

6. Evidence must be shared responsibly

Share exports and links only with people entitled to receive them, and use the redacted profiles for third parties and subject access requests. Do not publish footage of identifiable people, for example on social media, without a lawful basis.

7. Protect the Service and other customers

You must not:

share accounts, sign-in codes, API keys or MCP tokens;
try to access data, sites or organisations you have not been given access to;
probe, scan or test the Service's security without our written permission; report vulnerabilities as described in our trust centre;
interfere with or overload the Service, or work around licence limits, seats or usage caps;
modify, tamper with or circumvent the verification of the edge node software;
use the Service to store or send unlawful material, malware or spam.

8. Remote access

Connect only to computers your organisation is entitled to access, give a truthful reason for each session, and follow your own organisation's change and access procedures.

9. What happens if this policy is broken

We may investigate suspected breaches, remove access to particular features, and suspend or terminate accounts, in line with our terms. We may report unlawful activity to the relevant authorities. To report misuse, email [email protected].