Privacy Policy

Last updated: 8 June 2026 — operated by Erbacci Ltd

This policy must stay consistent with the Ring Privacy & Legal questionnaire. If you change behavior, update both.

1. Summary

We connect to your Ring account via Ring's official Partner OAuth — we never see your Ring password.
We process motion events and still snapshots from cameras you designate, to detect illegal dumping.
We store evidence (snapshots, optional short clip reference) for 90 days, then auto-delete. You can export an evidence packet anytime; the exported copy is yours.
We do not record audio, do not run facial recognition, and do not share evidence with any agency automatically.
We never sell your data.

2. What we collect

Category	Data	Source
Identifier	Ring account ID (opaque)	Ring OAuth
Device/site	Camera IDs, site names you set	Ring API + you
Incident data	Motion timestamps, before/during/after snapshots, optional clip reference, object labels	Ring + AWS Rekognition
Plate (optional)	Single plate string on a confirmed incident — only if you enable LPR for a site	Camera image OCR

3. How we use it

Dumping detection: snapshots are analyzed by AWS Rekognition (managed service, EU region) to identify bulky objects/people/vehicles. Rekognition retains no image after analysis. We do not identify individuals.
Evidence: confirmed incidents produce a timestamped packet you can review and export.
Analytics: per-site incident counts and repeat-location summaries, computed only from your own sites. No cross-customer analysis.

4. License plates (only if you enable them)

If you turn on plate capture for a site, a plate may be recorded as a single field on a single confirmed incident, for property-access / evidence purposes, within your single Ring account only. We do not build a database of vehicle movements, do not track vehicles across locations, and do not match against any external or known-offender list.

5. Sharing with authorities

We never share your footage or evidence with police or any agency automatically. You decide whether to export an evidence packet and whom to send it to. There is no shared offender database across customers.

6. Retention

Data	Retention
Incident snapshots / clip references	90 days, then auto-deleted
Account + site config	Until you delete; 30 days backup

7. Your rights & deletion

Disable DumpWatch from the Ring app to revoke access and trigger deletion within 24 hours, or email privacy@erbacciltd.com (honored within 7 days). UK/EU GDPR rights (access, erasure, portability) supported.

8. Security

TLS 1.2+ in transit; S3 AES-256 at rest; DynamoDB encrypted; no human reviews your images (analysis is automated).

9. Contact

privacy@erbacciltd.com