We care about your privacy and how we explain it

Alcatraz collects information in two ways

When you visit our website, follow us on social media, or engage with our sales team.
When you use our product, The Rock. Your experience, your path. Just choose what fits.

Your experience, your path. Just choose what fits.

Website +

Learn how we handle contact info, cookies, and analytics tools for visitors to our website and social media.

What we collect

If you fill out a form or contact us:

Name, email, company name, job title
Any messages you send

If you browse our site:

IP address and browser/device type
Pages viewed, buttons clicked
Cookies (only with your consent)

We do not collect sensitive or biometric data on our website.

When & how we collect it

Data is collected only after you’ve given written consent through your System Owner.

A liveness check confirms you’re a real person
A facial image is temporarily captured to create a Facial Signature
The image is deleted immediately
The encrypted Facial Signature is stored locally (or in the cloud if enabled)

During authentication, the Facial Signature is stored for less than 1 second.

Why we collect it

We use this data for one thing only: to determine if you’re allowed in the building.

To match you with your stored Facial Signature
To unlock doors you’re authorized to access
To support access logs if configured by your System Owner

We never sell or share your biometric data. We don’t use it for advertising, tracking, or profiling — ever.

Who helps us process this

We use a few trusted vendors, such as:

CRM tools (to manage inquiries)
Analytics providers (like Google Analytics)
Form and chat platforms

These providers only use your data to help us provide services — not for their own purposes.

SMS Opt-In Data

We do not share mobile contact information collected through SMS opt-in forms with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data may be shared only with subcontractors that support our messaging operations (for example, our SMS delivery provider).

All other categories of data sharing described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing purposes.

Your rights

You may have the right to:

Ask for a copy of your data
Request correction or deletion
Opt out of communications or tracking

Email privacy@alcatraz.ai, and we'll help you based on your local privacy laws.

Website + privacy policy

The Rock

Explore how The Rock processes face data, badge scans, and how we protect your physical access data.

What we collect

We collect only what’s needed to control access securely:

A Facial Signature — a non-reversible, encrypted mathematical pattern based on your face
A badge number — provided by your System Owner (like your employer)
(Optional) consent records — if your System Owner uses Alcatraz’s cloud consent module
(Optional) access log data — if configured by the System Owner

We do not collect:

Your name
Photos or facial images  (they’re deleted immediately)
Your email, phone number, or ID

When & how we collect it

Data is collected only after you’ve given written consent through your System Owner.

A liveness check confirms you’re a real person
A facial image is temporarily captured to create a Facial Signature
The image is deleted immediately
The encrypted Facial Signature is stored locally (or in the cloud if enabled)

During authentication, the Facial Signature is stored for less than 1 second.

Why we collect it

We use this data for one thing only: to determine if you’re allowed in the building.

To match you with your stored Facial Signature
To unlock doors you’re authorized to access
To support access logs if configured by your System Owner

We never sell or share your biometric data. We don’t use it for advertising, tracking, or profiling — ever.

How we process your data

System Owners control enrollment, storage, deletion, and access.
Alcatraz only processes encrypted data in the cloud (if deployed), and only at the System Owner’s request.

In on-prem deployments, Alcatraz never sees or stores your data. And no matter the setup — we will never sell it.

Your rights

You may have the right to:

Ask for a copy of your data
Request correction or deletion
Opt out of communications or tracking

Contact your System Owner (e.g. employer or security admin) to exercise these rights. Alcatraz provides the tools but does not manage data requests directly.

Rock privacy policy

Ready to Rock?

Book a jam session with one of our experts to learn how we can elevate your access control experience.

Let's talk