What CounterClock does
CounterClock measures counter service speed for your business using your own Ring camera. It counts anonymous presences in the view your camera returns. It never identifies people: no facial recognition, no biometric analysis, no re-identification of individuals across images, and no per-employee metrics.
Data we collect
- Ring account data: your Ring account ID, the email on your Ring account, and OAuth tokens — used to operate the linking you authorize in the Ring app.
- Device metadata and motion events: camera IDs, the camera name from your Ring account, online/offline status, motion-event timestamps.
- Camera snapshots: still images from your linked camera, processed automatically to count people anonymously. The count covers the whole frame the camera returns: the customer zone you draw during setup records your intent and is not yet used to crop the image, so narrow what is captured using your camera's own Ring motion zone. Images are retained for at most 7 days, then deleted. Derived data is counts and timings only.
- Settings you provide: business name, timezone, zones, dayparts, goals.
- People you invite: if you invite a manager or a staff member to view your dashboard, we store the email address you enter and the role you give them, so they can sign in. They are removed when you revoke their access.
- Connected TV screens: if you connect a TV to show one location's live numbers, we store a one-way hash of the access key the TV holds (never the key itself), the location it shows, the name you give it, the TV model and app version it reports, when it was connected and when it last checked in. Every connected TV is listed at counterclock.erbacciltd.com/auth/tv — that list is the record of which screens can show your numbers, and where you disconnect them. A TV shows that location's numbers only: no camera images, no names, no email addresses.
What we never do
- No facial recognition, no identification of individuals, no biometrics.
- No sale of your data; no advertising use; no training of AI models on your Ring data.
- No law-enforcement access requests are fulfilled without valid legal process.
- No cross-app or cross-account combination of your data.
Where processing happens
Application hosting and storage are on Amazon Web Services (US, us-east-1).
People are counted by an open-weights vision model (currently Qwen3.5-9B) running on a computer operated by Erbacci LLC located in Dubai, United Arab Emirates. Images reach it through a relay server hosted by Contabo GmbH in Germany, which terminates the encrypted connection before forwarding it over a private tunnel; Contabo is therefore a sub-processor, and this path involves a transfer outside the United States. Frames are held in memory for the detection only and are not written to disk on either machine.
If that computer is unreachable, counting falls back to Amazon Bedrock (Anthropic Claude Haiku 4.5, US region) inside our own AWS account. In both cases the output is an anonymous count — no faces, no identities, no re-identification.
Sub-processors: Amazon Web Services (hosting, AI fallback, and transactional email through Amazon SES in us-east-1), Contabo GmbH (relay), Resend (automatic backup for transactional email).
One more third party is involved, and it never receives camera data: our pages load their typefaces from Google Fonts, so Google sees the IP address and browser of anyone who opens them — including this page.
Emails we send
We send transactional service email only, and we do not send promotional email. Today CounterClock sends exactly one kind: your one-time sign-in code, sent when you ask to sign in. Service notices about your account and your camera are built but not switched on; the optional evening report and weekly digest are designed and not being sent. If any of these are switched on, this page will say so before the first one goes out, and you will be able to turn them off in Settings.
Retention & deletion
These periods match what the systems actually enforce: snapshots ≤7 days (storage lifecycle rule), raw motion events ≤90 days and service episodes ≤90 days (record expiry), 15-minute aggregated statistics ≤400 days (the horizon needed to compare a week or a season year-on-year), alerts ≤30 days. Connected TV screens are kept until you disconnect them, unlink, or delete your account; a TV left unused for 90 days stops working (screens connected to the sample location used for app review: 14 days after connecting). While a TV is being connected we keep a pairing record: a fingerprint of the code shown on the TV, the TV model and app version it reports and, once you approve the code, your account identifier, the location you chose and the name you gave the TV. The account, location and name are removed from it as soon as the TV has connected; the code stops working after 10 minutes and the record expires after 70 minutes. Only to limit abuse, we also keep short-lived counters keyed by a shortened hash of the requesting network address: this hash is pseudonymous, not anonymous (it can be matched back to an address), and the counters expire within 65 minutes. Expired TV, pairing and counter records can no longer be used and are deleted automatically, normally within a few days of expiring. Unlinking CounterClock from the Ring app revokes access and deletes your stored tokens; you can request full deletion of all data at info@erbacciltd.com, and the dashboard includes in-app account deletion.
In-app account deletion removes at once every location, camera assignment and measurement (occupancy episodes, 15-minute windows, alerts), invited manager and staff access, any camera frames still in temporary storage, our log of the notifications Ring sent about your cameras, our frame-by-frame log of your counter, every connected TV screen, and the Ring connection tokens we hold. Anything a single request cannot reach is removed automatically within the periods above.
What is kept: a record of the CounterClock plans Ring reports for your cameras, stored under a one-way fingerprint of your Ring account ID (never the ID itself), with no email address and no camera ID, because Ring keeps reporting those plans after an account is deleted.
Deleting your account in the app does not remove CounterClock from your Ring account. To do that, or to manage your CounterClock plan, go to account.ring.com → Integrations.
Your rights
You can withdraw consent at any time by unlinking CounterClock in the Ring app, which revokes our access and deletes your stored tokens. You may ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted — write to info@erbacciltd.com and we will act on the request. As a US company we align with applicable US state privacy laws, including the California Consumer Privacy Act as amended (CCPA/CPRA), and we apply the same data-minimisation principles everywhere. We do not sell your data and we do not discriminate against anyone who exercises these rights.
Children
CounterClock is a business tool for the operator of a service counter. It is not directed to children under 13, contains no child-oriented content, and is not marketed to children.
Who can see your data
Nobody at Erbacci LLC reviews your footage as a matter of course — the counting is automatic and what we keep is counts and timings. A small number of authorised people can access production systems when they need to, on a need-to-know basis, to investigate a fault or answer a support request you raise; that access is restricted by least-privilege roles and every action is logged. Snapshots are deleted automatically after 7 days, which limits what could be looked at even then.
Opting out
There is no optional or secondary use of your data to switch off: CounterClock uses what it collects only to measure your counter, and nothing is used for advertising, profiling or AI training. The way to stop processing is to unlink CounterClock in the Ring app, which takes effect immediately. Because we never use your data for training, there is no training opt-out and therefore no effect on your service from making one.
Changes to this policy and to how we measure
This page carries an effective date at the top. If we change what we collect, how long we keep it, who processes it, or the models that do the counting — including a change in accuracy or in what the app can detect — we update this page and change that date before the change takes effect, and material changes are re-submitted to Ring for recertification. Product changes are also described in the app's release notes on its Ring Appstore listing.
Your responsibilities as operator
You are responsible for complying with local recording/monitoring laws at your premises, informing your staff of operational monitoring, and posting customer-facing disclosure signage. CounterClock provides signage text during onboarding.
Scope
The CounterClock mobile apps can be downloaded worldwide. The service itself works only with Ring accounts and Ring cameras in regions where Ring offers the Ring Appstore and the CounterClock integration. Wherever you operate, you are responsible for using the service in compliance with the laws that apply at your premises.
Contact
Erbacci LLC — info@erbacciltd.com