Privacy policy
Effective 13 November 2026. This policy explains how Vasuh Technologies ("CamBytes", "we") handles personal data, under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
Who we are
CamBytes is a cloud service that records video from your cameras and DVR/NVR recorders and lets you watch and play it back. The service is run by Vasuh Technologies, H-502, Green Valley Apartment Plot No 18, Sector 22 Dwarka New Delhi - 110077, India. Questions about privacy: privacy@cambytes.in.
For the footage from your cameras, you decide why it is recorded and who may see it. You are the Data Fiduciary and CamBytes is your Data Processor: we store and serve the footage on your behalf and only as you instruct.
For your account and billing details and the website, we decide why and how the data is used, as described below.
What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email address, phone number, time zone, password (stored only in a protected, one-way form) | To create your account, sign you in and contact you |
| Camera details | Camera names, the address of your DVR or camera, and the user name and password you give us for it (stored encrypted) | To connect to your cameras and record them |
| Footage | The video your cameras send us, and the times it was recorded | To store it, play it back and delete it when its time is up |
| Alerts and notifications | Events such as "camera stopped", and your choices about which ones to receive by email | To tell you when something needs attention |
| Security and usage records | Sign-in times, IP address, device type, actions in your account | To protect accounts, detect misuse and meet legal duties |
| Billing | Plan, invoices, payment status. Card or bank details are handled by our payment provider; we do not store them | To bill you and keep accounting records |
| Messages to us | Emails you send to support or sales | To reply and keep a record |
This website does not use advertising or analytics cookies or trackers. Our servers keep ordinary technical logs (such as IP address and page requested) for security and reliability. The sign-in area of the service uses a cookie that is necessary to keep you signed in.
Your camera footage
- We use footage only to provide the service to you: record it, store it, show it to you, and delete it at the end of your retention period.
- We do not sell footage, share it with advertisers, or use it for any purpose of our own.
- We do not routinely watch your footage.
- Footage is deleted automatically when it is older than the retention period of your plan (7, 15 or 30 days, or what you agreed with us). Deleted footage cannot be recovered.
Access by our team
A small number of authorised CamBytes staff can access the systems that run the service. They do so only to give you the support you ask for, to keep the service running and secure, or where the law requires. Access to customer accounts and footage is limited to the people who need it for those purposes, requires a sign-in with a one-time code, and is recorded in an internal access log that we keep.
Why we use data
We process personal data with your consent, or for the purposes the DPDP Act allows without consent, such as providing the service you asked for, meeting legal obligations, and keeping the service secure.
Who we share it with
We share personal data only with:
- Service providers who help us run CamBytes: data-centre and hosting providers, email and text-message delivery services, and payment processors. They may use the data only for our purposes and must protect it.
- Authorities, when the law requires it and the request is valid. Where we are allowed to, we tell you first, and we give the minimum that is required.
- A buyer or successor, if the business is sold or merged, under the same promises as in this policy.
We do not sell personal data.
Where data is stored
Recordings and account data are stored on servers in India. They are not moved to other countries by us. Some of the services we use to send you email or text messages, or to take payments, may process the data needed for that (such as your email address or phone number) on their own systems; we use such services only for these purposes and only with countries that the Government of India has not restricted.
How long we keep it
- Footage: for the retention period of your plan, then deleted automatically.
- Account details: while your account is open. When you close your account, we delete your recordings and account details, except what we must keep by law (for example invoices and tax records).
- Security and access logs: at least 180 days, as required by the CERT-In directions, and up to one year.
- Messages to us: as long as needed to deal with them and for a reasonable time afterwards.
Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we process about you and how we process it;
- have inaccurate or incomplete data corrected, and data that is no longer needed erased;
- have your grievance addressed (see our grievance redressal page);
- nominate another person to exercise these rights on your behalf if you die or become incapacitated;
- withdraw consent you have given, which does not affect what was done before you withdrew it.
Write to us at the address below and we will reply within a reasonable time and in any case within the period the law requires. We may need to confirm who you are first. If we cannot resolve your complaint, you may approach the Data Protection Board of India once the law allows.
Requests about footage of people recorded by a customer's camera should go to that customer, who decides what is recorded. We will help the customer to respond.
Your responsibilities as a camera owner
Cameras record people. If you use CamBytes you are responsible for using cameras lawfully. In particular:
- Place cameras only where recording is lawful. Do not record places where people expect privacy, such as bathrooms, changing rooms or bedrooms of others.
- Tell people they are being recorded, for example with clear signs, and tell employees how and why you use cameras, as the law in your country requires.
- Keep footage only as long as you need it, and share it only with people who have a good reason to see it.
- If you record people other than your own household, you act as a data fiduciary under the DPDP Act and must meet its duties.
We are not responsible for whether your use of cameras is lawful. We may suspend an account that is being used to record people unlawfully.
Children
CamBytes accounts are for adults. We do not knowingly collect personal data from children for our own purposes. If your cameras record children, you are responsible for doing so lawfully and, where the DPDP Act requires, with verifiable consent from a parent or guardian.
If something goes wrong
We protect data with the measures described on our security page. If a breach affects personal data, we will notify the Data Protection Board of India and the people affected as the DPDP Act requires, and report cyber-security incidents to CERT-In within the time it requires.
Changes to this policy
If we make a material change, we will tell you by email or in your account before it takes effect. The date at the top shows when it was last updated.
Contact us
Vasuh Technologies
H-502, Green Valley Apartment Plot No 18, Sector 22 Dwarka New Delhi - 110077, India
privacy@cambytes.in
Grievance Officer: see our grievance redressal page