Privacy notice

1. What we collect

• When you sign up (required): email address, name, password (stored only as a one-way hash), the date you verified your email and accepted the Terms.
• When you use the Service: your Locations (name, time zone, and — if you enter them — coordinates), your cameras (hostname, hardware type, network address, status and settings), and the photos and videos they upload.
• Automatically: sign-in cookies (needed to keep you signed in; no advertising or tracking cookies), the IP address of requests (for security and rate limits), and server logs.

2. Why we use it

• to create and secure your account, sign you in, and send verification and password-reset codes;
• to run your cameras and make, store and show the time-lapse videos;
• to prevent abuse, fraud and attacks, enforce the Terms and answer reports;
• to contact you about your account, your cameras and changes to the Service.

We do not sell personal information, show advertising, or build profiles of people.

3. Who can see what

Your Location's name and videos can be shown publicly on the website. Your email address, account details, coordinates and camera details are visible only to you and to the Service's operators. Images are published under the Terms (section 4 on public-interest use).

4. How long we keep it

• Account information: until you delete your account; then it is deleted within 30 days, except where the law requires us to keep it longer.
• Verification codes: 10 minutes. Rate-limit counters: about an hour.
• Server and security logs: only as long as needed for security and troubleshooting.
• Photos and videos: while your account exists; after deletion as described in the Terms (section 4).

5. Service providers and where data is stored

The Service runs on Amazon Web Services (Amazon Web Services, Inc.), which stores and processes data for us in its Seoul region (Republic of Korea) and sends our emails through Amazon SES. AWS processes data only on our instructions. We do not otherwise give personal information to third parties, except where the law requires it (for example a court order) or to protect people from immediate harm.

6. Your rights

You may ask to see, correct or delete your personal information, or to stop its processing. You can change your name and password in your profile; for everything else, write to contact@chase-nova.com from your account email. We answer within 10 days. You can withdraw your consent by deleting your account.

7. Children

The Service is for people aged 14 and over. We do not knowingly collect information from younger children; if we learn of such an account, we delete it.

8. Security

Connections are encrypted (HTTPS), passwords are hashed, cameras use individual keys, and access to the data is limited to the operators who need it.

9. Changes and contact

We announce changes to this notice on the website before they take effect. Privacy officer (개인정보 보호책임자): the chase-nova operator, contact@chase-nova.com. You may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118).