Privacy Policy
Last updated: 9 July 2026 — operated by Erbacci LLC (Wyoming, USA)
This policy is kept consistent with the Ring Privacy & Legal questionnaire and DumpWatch's actual behavior. If we change behavior, we update both.
1. Summary
- We connect to your Ring account via Ring's official Partner OAuth — we never see your Ring password.
- We analyze motion events and still snapshots from the cameras you designate, only to detect illegal dumping at a bin/dumpster area.
- Data minimization: for normal activity (someone simply using the bin with nothing dumped) we store only a detection label and timestamp — no image is kept. Snapshots are stored only as part of a confirmed illegal-dumping incident.
- Evidence (before/during/after snapshots, optional short clip reference) is kept for 90 days, then auto-deleted. You can export an evidence packet anytime; the exported copy is yours.
- We do not record audio, do not view live video, and do not run facial recognition or any biometric identification (no face, gait, or body-based identification of individuals).
- We never auto-share evidence with any agency, never correlate data across customers, and never sell your data.
2. Who this is for
DumpWatch is a business tool for property owners and managers, distributed in the United States only. It is not directed to children and is not intended for anyone under 13.
3. What we collect
| Category | Data | Source |
|---|
| Identifier | Ring account ID (opaque) | Ring OAuth |
| Contact | Email address — used to send you passwordless sign-in codes and alert/notification emails about your sites | Your Ring account / you |
| Authentication | Ring OAuth access & refresh tokens, to call the Ring API on your behalf | Ring OAuth |
| Device / site | Camera IDs and the site names you set; device online/offline status, capabilities, and privacy-zone configuration | Ring API + you |
| Incident data | Motion timestamps and motion subtype (person/vehicle); before/during/after snapshots; an optional short MP4 clip reference; detected object labels | Ring + our AI analysis |
4. How we use it
- Dumping detection: snapshots are analyzed by AI vision — primarily Anthropic Claude (Haiku) running inside Amazon Bedrock, with Amazon Rekognition as a fallback — to identify bulky objects, people, and vehicles. Frames are downscaled before analysis. We identify objects and scenes, not individuals.
- Privacy zones: we read the privacy-zone configuration you set on your Ring device and mask (black out) those regions in every frame before any AI analysis, so masked areas are never processed or stored.
- AI training: your images and data are never used to train or fine-tune any AI model. Under the AWS Bedrock and Amazon Rekognition terms, content sent for analysis is not used to train base models.
- Data minimization: analysis frames are discarded immediately after classification; images are persisted only as part of a confirmed-incident evidence packet, never for normal activity.
- Evidence: a confirmed incident produces a timestamped, integrity-hashed evidence packet you can review and export.
- Analytics: per-site incident counts and repeat-location summaries, computed only from your own sites — no cross-customer analysis.
- Email we send: we use your email address only for transactional, account-related messages — never marketing. These are: passwordless sign-in codes; alert/notification emails about confirmed incidents on your sites; and service notices about your account and subscription (free-trial-ending reminders, a "trial ended — monitoring paused" notice, a subscription-activated confirmation, and a prompt to reconnect if the Ring connection is lost). You can turn off non-critical service emails in your dashboard settings. We never send marketing or promotional email, and never use your Ring data for advertising or marketing.
5. Sharing with authorities
We never share your footage or evidence with police or any agency automatically. You decide whether to export an evidence packet and to whom. We do not run license-plate recognition, and there is no shared cross-customer database of people or vehicles.
6. Third parties / sub-processors
We use the following sub-processors, operating within our own Erbacci-managed AWS account (EU region) or under their standard terms:
- Amazon Web Services — Lambda, S3, DynamoDB, Amazon Rekognition, and Amazon Bedrock — for compute, encrypted storage, and AI analysis.
- Resend (resend.com) — our email delivery provider, which receives your email address and the message content to send sign-in codes and alert/notification emails. Amazon SES is configured only as an inactive fallback and is not currently used to send email.
- Anthropic, accessed only through Amazon Bedrock, which receives a downscaled snapshot for classification and does not store it or use it for training.
- Expo push service, which receives a push token and alert text (no images) to deliver mobile notifications.
We use no data brokers and no advertising networks.
7. Retention
| Data | Retention |
|---|
| Confirmed-incident snapshots / clip references / evidence | 90 days, then auto-deleted |
| Normal-activity log (label + timestamp, no image) | 90 days, then auto-deleted |
| Account + site config + tokens | Until you delete (then removed) — we keep no separate backups beyond the 90-day expiry above |
8. Your rights & deletion
You can delete all your data instantly from the DumpWatch dashboard (self-service deletion action), and we confirm the deletion to you. Disabling DumpWatch or removing a camera in the Ring app purges that account's or device's sites, incidents, and stored evidence within 24 hours. You can also email info@erbacciltd.com (honored within 7 days). Any remaining evidence auto-expires after 90 days. We keep an internal audit record of deletion requests for compliance. UK/EU GDPR and US (CCPA/CPRA) rights — access, erasure, portability — are supported.
9. Security
- TLS 1.2+ in transit; S3 with AES-256 encryption and public access fully blocked; DynamoDB encrypted; least-privilege access controls; signed-webhook verification. Erbacci staff do not view your images — analysis is automated, and only you (the property owner) review the evidence packet.
10. Contact
info@erbacciltd.com