Privacy Policy

Effective date: 1 July 2026 · Last updated: 23 July 2026 (added section 5, “Email we send”)

1. Who we are

ProofClock is a Ring Appstore application operated by Erbacci LTD, a company registered in Cyprus (company no. HE 457237), which is the data controller for the personal data described here. Payments for paid plans are billed through the Ring Billing System to Erbacci LLC (Wyoming, USA). You can contact us for any privacy request at info@erbacciltd.com.

2. What data ProofClock accesses

To deliver proof-of-attendance, ProofClock accesses, through the Ring Partner API and only with your authorization at account linking:

• Ring device metadata — device ID, user-assigned name, device type, coarse location (country/state) for compliance, and online/offline status.
• Motion-event notifications (webhooks) — the timestamp of each motion event and the classification Ring assigns (human / vehicle / motion). No frames, clips, snapshots, or audio are retrieved.
• Your Ring account email — retrieved once at linking (from the Ring Users API) to identify your account, send passwordless sign-in codes, and deliver the service emails described in section 5.

ProofClock does not access Live Video, media clips, image snapshots, or audio. It respects any privacy zones configured on the device.

3. What ProofClock derives and stores

From those timestamps, ProofClock derives and stores only the minimal data needed for the service: your sites and schedules, your device list and status, the motion-event timestamps, and the computed attendance verdicts (Verified / Short / No-show / Unverifiable) for each expected window. It also stores your session, the email addresses of people you invite, and an access log of sign-ins and data views.

4. How we use it

We use this data solely to provide the feature you enabled: showing when scheduled crews arrived, how long they stayed, and whether they met the service window, and producing reports you can use for billing. We do not use Ring data for advertising, marketing, profiling of individuals, resale, or any purpose beyond delivering the service.

No AI training. ProofClock uses no AI or machine-learning models, and no Ring data is ever used to train, fine-tune, or improve any model.

5. Email we send

ProofClock sends only account and service email — never marketing:

• Sign-in codes and team invitations — sent only when you (or a teammate) request them.
• Service notices about your own account — trial-ending reminders (3 days and 1 day before your free trial ends), a notice when your trial or subscription ends and attendance tracking is paused, a confirmation when a subscription is activated, and an alert if ProofClock loses its connection to your Ring account and needs to be re-linked.
• Optional weekly attendance digest — a summary of your sites’ verdicts. Off by default; you can turn it on in Settings.

You can turn service notices and the digest on or off at any time in Settings → Email preferences. We do not send promotional or marketing email, and — as stated in section 4 — we never use Ring data for advertising or marketing.

6. Workforce monitoring & consent

ProofClock is a consensual employer attendance tool. If you use it to monitor staff or crews, you (the employer/account owner) are responsible for giving those individuals notice and obtaining any consent required by your local law. The account owner confirms this in-app before use, and ProofClock keeps an access log so account owners can see who accessed the data. ProofClock is not intended for covert surveillance of individuals.

7. Retention

Raw motion-event timestamps are retained for approximately 90 days and then automatically expire. Access-log entries are retained for approximately 1 year. Sites, schedules, devices and computed verdicts are retained until you delete them, unlink the integration, or request deletion, after which they are removed.

8. Sub-processors & sharing

ProofClock shares data only with the processors strictly necessary to run the service:

• Amazon Web Services (AWS) — cloud hosting and storage (AWS Lambda, DynamoDB, S3, CloudFront; US-East region). No AI/vision services are used.
• Resend — transactional email delivery for the messages described in section 5 (passwordless sign-in codes, team invitations, and account/service notices). Resend receives the recipient's email address and the message content; it does not receive any Ring device data. Used under Resend's terms with no training on our data.
• For paid plans, the Ring Billing System (with Stripe Connect) processes payment/transaction data only — never Ring device data.

We do not sell your data and have no law-enforcement integration or data-sharing with law enforcement.

9. Your rights & deletion

You can delete your account and all associated data at any time from Settings → Delete account in the app, or by unlinking ProofClock from the Ring app. On unlink (the app_integration_removed event) or on a deletion request, we permanently delete your stored data. You can also exercise access/deletion rights — and, as a Cyprus/EU controller serving US users, your rights under the GDPR and applicable US state laws (e.g. the CCPA) — by emailing info@erbacciltd.com.

10. Security

Data is encrypted in transit (TLS/HTTPS) and at rest (AWS-managed encryption). Access to production systems is restricted with least-privilege AWS IAM roles, and activity is logged and monitored via AWS CloudWatch/CloudTrail.

11. Children

ProofClock is a business tool for adults. It is not directed to children under 13 and contains no child-oriented content.

12. Changes

We may update this policy; material changes will be reflected here with a new effective date and, where appropriate, communicated in-app.

Erbacci LTD (Cyprus, HE 457237) · Contact: info@erbacciltd.com · ProofClock · Powered by Ring