Privacy Statement
In order to implement certain features and services within the NCast Presentation Recorders, the NCast recorder configuration pages request private and confidential account information from the User. This page explains what information is collected, why it is needed, where it is stored and what are the best practices to keep the user's accounts safe and secure.
First, note that sensitive information is always stored on the recorder being configured and account names and passwords are never transmitted to NCast Corporation or any third parties other than the service being configured.
NCast Corporation does not collect or sell any of the account configuration information entered during the process of configuring a recorder. In fact, quite often the account details and passwords are only visible to the service being configured.
Current best practices recommend that a separate account be established for each recorder in use and that new and unique passwords are assigned to that account. With this practice, any compromise to the account or recorder will be limited in scope.
The following paragraphs supply additional information about the use of sensitive account information.
Scheduling and Google Calendar Credentials
The Presentation Recorders use Google Calendar to implement automatic recording and streaming of events. To implement this, a Google Account must be established and the recorder must be linked to this account. The linking process requires signing in to a Google Account and creating a unique key to the Calendar which will be used for scheduling. This key allows the recorder to view and access all entries in the Calendar. The login credentials for this account are only seen by Google and the unique key is the only item stored within the recorder.
Best practices suggest that a separate Calendar be established for each recorder and that no sensitive information be added to the Calendar other than the entries needed for scheduling.
Google Drive File Upload
The NCast Presentation Recorders are able to upload archived video files to Google Drive for storage and later retrieval by the content viewers. In order to accomplish this a Google Account must be established and the recorder must be linked to this account. The linking process requires signing in to the Account and creating a unique key. Once this login and setup is complete, only the key is retained within the Recorder for future use.
No files are ever downloaded from the Google Drive Account. The recorder software only implements an upload process. Other files on the Account are not visible from the recorder.
Best practices suggest that separate accounts be established for each recorder and that no sensitive information be added to the account other than the uploaded recordings.
YouTube Video File Upload
The NCast Presentation Recorders are able to upload archived video files to YouTube for viewing by a wider audience. In order to accomplish this a YouTube Account must be established and the recorder must be linked to this account. The linking process requires signing in to the Account and creating a unique key. Once this login and setup is complete, only the key is retained within the Recorder for future use.
Best practices suggest that separate accounts be established for each recorder and that no sensitive information be added to the account other than the uploaded recordings.
YouTube Live Streaming
A popular feature of the Presentation Recorders is the ability to live stream through YouTube. This process requires that a unique Stream Id be created on the YouTube stream configuration page and then configured into the recorder. Knowledge of this Stream Id grants anyone access to the live streaming facility, so the Stream Id must be protected and not disclosed to others. Generating a new Stream Id will fix any potential compromise to this feature..
Video File Uploads
Other upload services which the NCast Recorders support (Box, Kaltura, Opencast, etc.) vary in the way account data is stored. In all cases the sensitive account details are only stored in the recorder and are never transmitted to NCast Corporation. The use of unique passwords and separate accounts for each recorder will limit the damage in case of compromised credentials.
|