01Scope: public Demo and private cameras

Public Demo

Published Demo accounts are for product demonstration and must connect only to the prepared street/public-area Demo feed. Classroom, child, staff, or other private cameras must never be assigned to the public Demo list. Demo sign-ins and usage may be logged for security and abuse prevention.

Private viewing

School or organisation cameras require authentication and are limited by account, room, and viewing schedule. Images may include children, guardians, staff, or others and must not be screen-recorded, forwarded, or published except through the controller’s lawful process.

02Data processed and purposes

  • Account and authorization — name, phone number, hashed password, account status, and user-to-student/room mapping for authentication and access control
  • Security and usage — IP address, user agent, sign-in/out times, camera open/switch events, Camera ID, and forced sign-outs to prevent unauthorized access, investigate incidents, and operate the service
  • Live and recorded images — the web app relays camera/Synology images to authorized viewers and does not create its own separate image archive. Cameras or the NAS may retain recordings under the controller’s storage policy
  • Support communications — information supplied by users or administrators when requesting support, to diagnose and resolve issues

The lawful basis depends on the controller’s context, such as service performance, legal duties, legitimate interests, and safety. This notice provides information; it does not automatically turn necessary processing into consent-based processing.

03Cookies, language, and Cloudflare Analytics

NamePurposeDuration
NURSERY_SESSIONStrictly necessary authentication, CSRF, in-session language, and security stateSession cookie; the application expires inactivity after approximately 60 minutes
CCTV_LANGRemembers the selected TH/EN language; not used for advertisingApproximately 1 year

This site uses Cloudflare for edge/CDN/security services, so Cloudflare may process IP, request, network, and device data. The installation does not declare Web Analytics as enabled; if enabled later, update the configuration and this notice.

04Retention and deletion

Activity logs
The installation does not yet declare a number of days. Ask the controller before production use.
Login attempts
The installation does not yet declare a number of days. Ask the controller before production use.
Camera/NAS recordings
The installation does not yet declare a number of days. Ask the controller before production use.

The days stated here must match the database task, Task Scheduler, and Synology Surveillance Station. Publishing a number on this page alone does not delete data.

05Recipients, transfers, and your rights

Data may be accessed by the controller, authorized administrators, SyncTech as processor/support provider, the selected camera and Synology infrastructure, and Cloudflare when enabled. Some providers may process data outside Thailand; the controller must put appropriate contracts, safeguards, and transfer basis in place.

Depending on applicable law, basis, and exemptions, you may request access, a copy, correction, deletion, restriction, objection, or portability, and complain to the regulator. Contact the controller below. Recording-deletion requests must also account for safety and legal duties.

06Contact the controller

SyncTech Solution Co., Ltd. 38/39 Moo 12, Khlong Song Subdistrict, Khlong Luang District, Pathum Thani 12120, Thailand [email protected] 02-121-4551