Privacy Policy

1. Information We Collect and How We Use It

videoArchiver collects and processes your information solely to provide secure backup and archival solutions for your Ring camera clips. This includes:

• Account Information: Your email address is used for authentication, managing your subscription, and critical service notifications.
• Authorization Credentials: Secure OAuth tokens are used to authenticate requests to the Ring and cloud storage APIs on your behalf to perform the backup transfers. Tokens are encrypted with AES-256-GCM before storage.
• Device Mappings: Camera names and device identifiers are processed to determine which camera feeds you wish to back up.
• Event Logs: Basic event details (such as timestamps, activity types, and event identifiers) are saved to show you a backup history log in your dashboard.
• Video Streams: When an event triggers, we stream the video clip directly from Ring to your chosen cloud storage provider in-memory. We do not store, copy, or retain your video files on our servers.

2. AI Governance and Automated Models

We do not use customer data, video recordings, metadata, or user info to train any AI or automated decision-making models (including classical machine learning, heuristic learning, Generative AI, or LLMs). No data is shared with third-party AI training platforms.

3. Data Retention

We only keep your information for as long as necessary to provide the service:

• Video Recordings: We never save or store video files. They are streamed directly in-memory to your storage and are deleted from our temporary system memory immediately after the transfer completes.
• Credentials and Settings: Retained as long as your account integration is active. They are permanently deleted immediately upon unlinking the service or deleting your account.
• Account Logs and Metadata: Retained for the duration of your active subscription, or until you request deletion. Event log data is automatically purged after 90 days for free accounts and 365 days for paid accounts.

4. Sub-processors and Data Sharing

We do not sell, trade, or rent your personal data or video files. We use the following trusted service providers to operate the Service:

• Supabase (AWS US-East) — Database hosting for account data, device configurations, encrypted tokens, and event log metadata. Privacy Policy
• Cloudflare (Global Edge Network) — Serverless compute (Workers), queue infrastructure, and web application hosting (Pages). Privacy Policy
• Sentry (Functional Software, Inc.) — Error monitoring and observability. Privacy Policy
• Resend (Resend, Inc.) — Transactional email delivery for account notifications. Privacy Policy

Additionally, video streams are transferred directly to your own configured cloud storage provider (Google Drive, and in the future Dropbox and Amazon S3).

5. Cookies and Analytics

The Service uses Sentry for error monitoring and Cloudflare for web analytics. These services may set first-party cookies to track browser sessions and page performance for diagnostic purposes. No advertising cookies, tracking pixels, or third-party behavioral tracking services are used. You may configure your browser to reject cookies, though this may affect error reporting functionality.

6. Your Privacy Rights

Depending on your location, you may have rights under applicable data protection laws:

• Right of Access (GDPR Art. 15): You may request a copy of the personal data we hold about you.
• Right to Erasure (GDPR Art. 17): You may request deletion of your account and associated personal data.
• Right to Data Portability (GDPR Art. 20): You may request your data in a machine-readable format.
• CCPA Rights (California): You have the right to know what personal information is collected, to request deletion, and to opt-out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by applicable law. We may need to verify your identity before processing your request.

7. Opt-Out Mechanisms

You can opt out of video archiving and credential storage at any time by unlinking your Ring account or deleting your cloud storage connections from the dashboard settings. Once unlinked, all associated credentials are permanently deleted and further automated archiving stops. To stop receiving transactional emails, you may delete your account. Critical service emails (security notices, terms changes) cannot be opted out of while your account is active.

8. Human Review and Access

No human employees, developers, or operators at videoArchiver have access to or review your Ring video recordings. All video streaming and processing is entirely automated. Access to account metadata for support purposes is logged and audited.

9. User Control and Settings

You retain full control over which camera devices are linked to the archiving service. You can toggle active cameras, configure destination folders, and review a history of all successfully archived events through your portal.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address associated with your account and noted on this page. The date of the last update is shown at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Data Protection Contact

For privacy-related inquiries or to exercise your data rights, contact us at [email protected]. For all other inquiries, contact [email protected].