Privacy Policy

Timescule is a cloud video recording and timelapse service operated by VIVTRON (“we”, “us”). This policy explains how we handle two different kinds of personal data: the details of the people who use a Timescule account, and the camera footage our customers record with Timescule.

For account data, we decide why and how it is processed, and we act as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

For camera footage, our customer decides which cameras to connect, where they point and how long footage is kept. The customer is the Data Fiduciary for the people who appear in that footage, and we process it on the customer's behalf, as their Data Processor, only to provide the service.

Account data: your email address, a password (stored by our authentication provider as a salted hash, never in plain text), your organization's name, the role you hold in it, and a record of administrative actions you take (for example adding a camera or inviting a teammate).

Camera data: still images your cameras upload to us, the video we compile from them, motion and object-detection markers derived from that video, and technical details such as upload times and camera health.

Billing data: the plan and invoices for your organization and your token balance. We do not collect or store card or bank details; payments are made directly against our invoices.

Technical data: IP addresses and request logs our servers record when you or your cameras connect, kept to operate and secure the service.

We use account data to create and secure your account, let you sign in, send service-related emails (such as password resets and invitations), provide support, and bill for the service. We use camera data only to store, compile, analyse and play back footage for the customer that recorded it, as that customer has configured the service.

We do not sell personal data, do not use footage to train models for anyone else, and do not use camera data for advertising.

If you connect cameras to Timescule, you are responsible for recording lawfully: having a legitimate purpose, displaying any notices required where cameras operate, not recording places where people have a reasonable expectation of privacy, and responding to requests from people who appear in your footage. We will help you respond to such requests where we can.

Footage is kept for the backup length of each camera's plan (for example 7, 30 or 180 days) and then deleted automatically, from our servers and from our cloud storage provider. Motion markers are deleted along with the footage they describe.

If an account is paused (for example when a free trial ends unpaid), footage is kept for a grace period of up to 15 days and may then be permanently deleted. Account data is kept while the account exists and for as long afterwards as we need it to meet legal, accounting or dispute-resolution obligations. Database backups are kept for up to 30 days.

We use a small number of service providers to run Timescule, each bound to use data only to provide their service to us:

• Hostinger — servers in India that receive camera uploads and run the service;
• Cloudflare (R2) — encrypted cloud storage for footage and backups;
• Supabase — account sign-in and authentication;
• Vercel — hosting for the Timescule website and dashboard.

Some of these providers may store or process data outside India. We may also disclose data where required by law or by a valid order of a court or government authority.

Access to your organization's footage is limited to members of your organization, with roles controlling what each member can do. Connections to the dashboard are encrypted, video links are individually signed and expire, each camera uploads with its own separate credentials into its own isolated storage area, and administrative actions are recorded in an audit log. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you and the relevant authority as the law requires.

Subject to the DPDP Act, you may ask us for a summary of the personal data we hold about you, ask us to correct, complete or update it, ask us to erase it, and nominate another person to exercise these rights on your behalf. Where we process data because you consented, you may withdraw that consent at any time; this does not affect processing already done. To exercise any of these rights, write to support@timescule.com. If you appear in a customer's footage, please contact that customer first, as they control that footage.

For any complaint about how we handle personal data, contact our grievance officer at support@timescule.com. We will acknowledge your complaint and aim to resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

We may update this policy as the service changes. We will post the new version here with a new “last updated” date and, for significant changes, notify account holders by email.