Draft, before launch
Privacy notice
Two parts: the videos and certificates Watchtower keeps for sellers, and the details you give us when you contact sales.
Certification videos and certificates
Who is responsible
The seller (the refurbisher) decides which of its phones are certified, by whom and when, including certifications a buyer records with the Watchtower app, and is responsible for that data: in data protection terms, the controller. Watchtower stores and processes it on the seller’s behalf. If you bought a phone and want to ask about a video of it, contact the seller; you can also write to us and we will pass it on.
What a video can contain
- The phone being sold and whatever its screen shows while recording, such as its IMEI if the person recording shows it.
- Anything else in view, such as a parcel or a carrier label with a name, address and phone number.
- Hands, and sometimes faces, of whoever records it: the seller’s staff, or a buyer the seller named, and their surroundings.
- Sound.
A buyer’s email address
When a seller asks a buyer to record a certification, the seller gives Watchtower the buyer’s email address; the buyer does not give it to us. We use it for three things only: to send the buyer one email saying which company named them and which certification it is, to let the buyer sign in to the Watchtower app with that email and a one-time code, and to show that buyer the certifications sellers named them on. The seller, as controller, decides to name the buyer; Watchtower processes the address on the seller’s behalf, and sends that email from acceso@watch-tower.dev. No account is created until the buyer signs in. The seller can resend that email a few times or correct the address; we never send marketing to it, never put it on a certificate, its page or the product’s record, and never tell the seller whether the address already has an account. It is kept while the certification is kept, with the certification, and an account the buyer created by signing in is kept until the buyer asks us to delete it. The buyer has the rights described under Your rights.
Private by default
The seller’s signed-in team sees all its certifications in its dashboard. Each certification has its own page and link, protected by its own password, which Watchtower generates and the seller shares; a buyer who gets them sees only that certification. A buyer the seller named records in the Watchtower app, signed in with the email the seller gave, and only until the deadline the seller chose. Both see the videos as recorded, with the screenshots the seller chose from their own videos. When the certification’s page link expires, a year after it was certified, only the seller’s team sees it. Certifications are private by default: what a buyer records, including any personal details in view, is visible only to the seller’s team and to that buyer, and is never made public.
What the seller makes public
The seller can put a certification the seller recorded in public mode. It is then shown as recorded, with nothing removed and no password, to anyone with its link, so the seller is responsible for what appears in it, such as an IMEI on screen, the sound or anything else in view. If the seller takes it out of public mode, it asks for its password again.
How long we keep it
Certificates, their original videos, and the screenshots taken from them are kept with no set end date. Originals of a recording that is rejected, and so never becomes a certificate, are deleted seven days after it is rejected. A denied certification is not a rejected recording: it is kept, marked as denied, with no set end date. Certificates do not expire, and each always shows the date it was certified: the older a certificate, the less it says about the phone today. If the seller takes a certificate out of public mode, nothing about it stays public. How a request to erase personal data affects a certificate is still being defined in this draft; you can make one as described under Your rights.
Sales contact form
What we collect
- Your work email address.
- Your business type, the number of phones you ship per month, and your country, if you give them.
- The date and time you submitted the form.
We do not use analytics or advertising cookies on this website. The fonts are loaded from Google Fonts, which receives your IP address when the page loads.
Why, and where
To reply to your request and to understand which kinds of business are interested. We do not sell your details or share them for marketing. They are kept in a database run by our hosting provider, which processes it on our behalf.
How long we keep it
Until you ask us to delete it, or until we no longer need it to reply to your request, whichever comes first.
Your rights
Email hello@watchtower.example to ask for a copy of your details, or to have them corrected or deleted. For the sales contact form, write from the address you used. For a certification video, include the product ID; we will pass the request to the seller responsible. If you are not satisfied with the answer, you can complain to the data protection authority where you live.
Draft, not yet reviewed by a lawyer. Last updated 28 September 2026.