Privacy Policy

Last updated: August 26, 2026 — operated by Erbacci LLC (Wyoming, USA)

1. Summary

We connect to your Ring account via Ring's official Partner OAuth — we never see your Ring password.
We capture still snapshots from cameras you designate, on a schedule you set, to build progress time-lapse videos.
We do not record audio, do not access live video, and do not run facial recognition, object detection, or any analytics.
Source snapshots are kept until your project ends (180-day cap); compiled reels up to 365 days for download. Then auto-deleted.
Reels and snapshots carry Ring's standard watermark (Ring logo + device ID, app name, timestamp), applied by Ring to all camera media — we don't add, alter, or remove it.
Sign-in is passwordless: on the same browser you stay signed in via one secure, HttpOnly cookie that holds only a signed account identifier (no password, no personal data); a new device uses an emailed one-time code.
We never sell your data.

2. What we collect

Category	Data	Source
Identifier	Ring account ID (opaque)	Ring OAuth
Contact email	The verified email on your Ring account — used for passwordless dashboard sign-in (one-time code) and the "reel ready" notification	Ring Users API (/v1/users/me)
Project/device	Camera IDs, project names + schedule you configure	Ring API + you
Snapshots	Still JPEG frames captured on your schedule	Ring API
Reels	MP4 time-lapse videos compiled from your snapshots	Generated by TimeStack

3. How we use it

Progress documentation: snapshots are compiled (with ffmpeg, no AI) into daily and cumulative time-lapse reels for the project you created.
That's it. No detection, no analytics, no profiling, no third-party advertising.

4. Retention

Data	Retention
Source snapshots	Until project end + grace (180-day cap), then deleted
Compiled reels	Up to 365 days, for your download
Account + project config	Until you delete; 30 days backup

5. Sharing

We use AWS (hosting, storage) in the EU as a processor — your reels and your snapshot archive stay within AWS. We also use Resend (resend.com), a third-party transactional email provider, to send TimeStack's transactional emails — the "your time-lapse is ready" notification and your passwordless sign-in one-time code; Resend receives only your email address and the message content (your project name and a dashboard link, or a 6-digit code) — plus, in the “your time-lapse is ready” email only, a single still frame from your own camera, embedded as a preview of the reel. Resend never receives your reels, any video, or the rest of your snapshots. We never sell or share your footage for advertising. Reels are shared only by you, when you choose to download/send them.

If you turn on notifications in the TimeStack mobile app, your device is registered with Apple's Push Notification service (iOS) or Firebase Cloud Messaging (Android) so we can tell you a reel is ready. They receive an anonymous device token and the notification text — never your snapshots, reels, or camera data. If you leave notifications off, no token is ever created.

6. Your rights & deletion

You can delete your account and all data instantly from the TimeStack dashboard (Settings → Delete account & data) — this immediately purges your snapshots, reels, projects, settings, and Ring connection. You can also disable TimeStack from the Ring app to revoke access and trigger deletion, or email info@erbacciltd.com (within 7 days). UK/EU GDPR rights supported.

7. Security

TLS 1.2+ in transit; S3 AES-256 at rest; DynamoDB encrypted; no human reviews your images.

8. Contact

info@erbacciltd.com