Privacy Policy
This Privacy Policy describes, in placeholder form, how Ghalio ("we", "us") would handle information for our cloud CCTV recording and storage service. It is intended to outline our approach and is subject to legal review before it takes effect.
Last updated: Placeholder draft — not yet effective
Pending legal review
This document is placeholder copy provided for product scaffolding and has not yet been reviewed by counsel. It does not constitute a binding legal agreement. Final, legally-reviewed terms will be published before general availability.
Information we collect
To operate the service we process a limited set of information: account identity (handled by our authentication provider), billing and subscription details, the camera/DVR configuration you provide, and the video recordings your devices upload for retention.
- Account identity (name, email) managed by our authentication provider.
- Billing and subscription metadata required to provision your plan.
- Device and ingest configuration you supply during onboarding.
- Video recordings and associated metadata uploaded by your cameras.
How recordings are stored and retained
Recordings are stored in tenant-isolated object storage and encrypted in transit. Each tenant's data is physically segregated. Retention follows the duration of the plan you select; once a recording passes its retention window it becomes eligible for deletion. Playback streams directly from storage to your browser.
Third-party services
We rely on a small number of processors to deliver the service: an authentication provider for account identity, object-storage providers for recordings, a payment processor for billing, and an email provider for transactional notifications. These processors handle data only as needed to perform their function.
- Authentication provider — account sign-in and identity.
- Object storage providers — encrypted recording storage.
- Payment processor — subscription billing.
- Email provider — transactional and account notifications.
Security
We apply encryption in transit, per-tenant storage isolation, and least-privilege access controls. No method of transmission or storage is perfectly secure, but we work to protect your recordings using industry-standard safeguards.
Your rights
Depending on your jurisdiction you may have rights to access, correct, export, or delete your information. See the "Your data & privacy" section below for how to exercise these requests.
Cookies and consent
We use a small number of cookies that are necessary for sign-in, security, and remembering your consent choice. We do not use cookies for cross-site advertising. You can manage your consent via the banner shown on your first visit.
Your data & privacy
Your account identity is managed through our authentication provider, not stored as a password in our own database. To request a copy of your data, or to request deletion of your account and recordings, contact our support team or delete your account directly through your authentication provider profile. We will action verified requests within a reasonable period.
Request a data export
Email support with the subject "Data export" from your account email address and we will compile your account and recording metadata.
Request deletion
Deleting your account through the provider profile, or emailing support with the subject "Account deletion", will begin removal of your account and associated recordings.