How we protect your footage
Your footage is private. Here is what we do to keep it that way, and what we ask of you.
Encrypted connections
Our websites, the sign-in area and video viewing use HTTPS. Traffic between our own servers is encrypted and signed, so a request cannot be replayed or changed on the way.
Encrypted storage
Recordings are stored on encrypted disks, and each customer's footage is also encrypted with a key of its own.
Sign-in protection
You sign in with your password and a one-time code sent to your email or phone. Passwords are stored only in a protected, one-way form, and we keep a history of sign-ins that you can review.
Your camera passwords
The user name and password you give us for your DVR are stored encrypted, and are never shown again in full.
Restricted servers
Our recording servers accept connections only from our own servers, not from the open internet, and viewing links for video are short-lived.
Access by our team
A small number of authorised staff can access the systems that run the service, only to give you support you ask for, to keep the service running and secure, or where the law requires. Access needs a sign-in with a one-time code and is recorded in an internal access log that we keep.
Logging
We keep security and access logs for at least 180 days, as the CERT-In directions require, so that we can investigate problems.
Deletion
Footage is deleted automatically when its retention period ends. If you close your account we delete your recordings and account details, except what we must keep by law.
Knowing when something breaks
If a camera stops sending video, you get a notification, and an email if you want one, instead of finding out when you need the footage.
Between your DVR and us
Most DVRs and cameras send video over standard RTSP, which is not encrypted by itself. Where your equipment supports encrypted RTSP (RTSPS) we can use it. We recommend that you:
- Use a separate view-only user on your DVR for CamBytes, with a strong password.
- Change the default password of your DVR and cameras.
- Where your router allows it, accept the forwarded port only from our server's address. We will give you the address on request.
- Keep your DVR's firmware up to date.
What we ask of you
- Keep your CamBytes password private, and do not share sign-in codes.
- Use an email address and phone number that only you can reach.
- Tell us at once if you think your account has been used by someone else.
Report a security problem
If you think you have found a weakness in CamBytes, please write to security@cambytes.in. We will reply, look into it quickly and not take action against anyone who reports in good faith and does not harm customers.
Incidents
If a security incident affects personal data, we tell the people affected and the authorities as the law requires, including the Data Protection Board of India, and we report cyber-security incidents to CERT-In within the time it sets.
Questions about how we handle your data?
Read our privacy policy, or write to us.