Privacy Policy

Screenvana runs digital signage: a cloud dashboard your team uses to design content, plus a lightweight player that runs on the screens you install it on. This page explains, in plain terms first and precise terms after, what we collect across both halves of that system, why, and what control you have over it.

1. Who this policy covers

This policy covers two roles at once, and it matters which one applies to a given piece of data:

When we act as a controller — for account holders, workspace members, and website visitors — we decide why and how that data is processed, and this policy is our direct promise to you about it. This covers your name and email, billing details, support conversations, and how you use the Screenvana dashboard itself.

When we act as a processor — for the content a workspace uploads and the screens it operates — the workspace owner is the controller, and we process that data only on their instructions, under a services agreement with them. If you're a customer of one of our workspaces (for example, you work somewhere that has one of our screens in its lobby), your organization is responsible for how that data is handled, and you should direct privacy requests to them; we'll support any request they forward to us.

Screenvana is provided by Screenvana, Inc. (“Screenvana,” “we,” “us”). This policy applies to our website, dashboard application, and the player software that runs on paired screens.

2. Information we collect

Account & workspace data

When you sign up, we collect your name, email address, and a password (stored as a salted hash — we never store or can see your actual password). If you enable two-factor authentication, we store the secret needed to verify your authenticator app, not any of your login codes themselves. If you invite teammates, we store their email, name, and role (Owner, Admin, Editor, or Viewer) within your workspace.

Billing data

Subscription billing is handled by Stripe. We never receive or store your card number — Stripe handles that directly and gives us back a customer and subscription reference we use to keep your plan in sync. Your billing name, email, and country may pass through Stripe as part of that.

Content you upload

Images, videos, templates, playlists, and anything else your workspace uploads or creates in Screenvana is your content, and you control it. We store it to provide the service — hosting it, serving it to your screens, and keeping the version history you configure — and we don't inspect, use, or share it for any purpose beyond that.

Screen & device data — what your hardware actually reports back

This is the part generic to most privacy policies but not to signage, so we're specific about it. When you pair a screen, it receives a device token (a long, random secret used to authenticate that screen, not tied to a person). From then on, the screen periodically checks in with a heartbeat that reports:

• Whether it's currently online, and the last time it checked in
• The screen resolution and orientation it's running at
• Which piece of content it's currently displaying

We also log playback events — which media played, on which screen, for how long — so your workspace can generate proof-of-play reports. None of this is tied to the identity of anyone standing in front of the screen; a screen is a piece of hardware your organization operates, not a person, and we do not track or profile viewers. Our infrastructure providers' standard web server logs may incidentally record the IP address a request came from, as is normal for any internet service, kept briefly for security and abuse prevention rather than as a persistent profile.

Cookies

Today, Screenvana uses exactly one cookie category: a session cookie that keeps you signed in, set when you log in and required for the dashboard to function. We do not currently run advertising cookies, third-party analytics trackers, or cross-site tracking pixels. If that changes, we'll update this section and, where required, ask for your consent first — not bury it in a policy update.

3. How we use it

We use the information above to:

• Provide, maintain, and secure the dashboard and player
• Authenticate you and keep your workspace's data isolated from every other workspace
• Process payments and send billing-related communications
• Send transactional email — password resets, screen-offline alerts, team invitations
• Investigate abuse, enforce our terms, and keep the service reliable
• Respond to support requests you send us
• Comply with legal obligations, such as tax and accounting recordkeeping

We do not use your account data to train third-party AI models, and we do not sell it. See Section 8 for what “sell or share” means under California law and why it doesn't apply to how we operate.

4. How we share it

We don't sell your data, and we don't share it for third-party advertising. We share it only with the specific service providers who help us run Screenvana, each bound by a contract limiting them to the purpose we hired them for:

We may also disclose information if required by law, subpoena, or valid legal process, or where necessary to protect the rights, property, or safety of Screenvana, our customers, or the public. If Screenvana is ever involved in a merger, acquisition, or asset sale, customer data may be transferred as part of that transaction, subject to this policy's commitments continuing to apply.

5. How long we keep it

We keep account and workspace data for as long as your account is active. If you close your account, we delete your account data within 30 days, except where we're required to keep records longer — for example, billing records are kept as required by tax and accounting law, and security logs are kept briefly to investigate abuse. Content you delete from your media library (images, videos, playlists) is removed from active storage promptly and purged from backups on our standard backup rotation.

6. International transfers

Screenvana's infrastructure may process data in the United States and other countries where our hosting and service providers operate. Where we transfer personal data out of the European Economic Area, the UK, or Switzerland, we rely on recognized safeguards for that transfer — primarily the European Commission's Standard Contractual Clauses (SCCs) — and we require the providers in Section 4 to offer an equivalent standard of protection to your data regardless of where it's processed.

7. Security

We take a set of concrete precautions rather than a vague promise:

• Passwords are stored as salted hashes, never in plain text and never logged
• Optional two-factor authentication (TOTP) is available on every account
• Data is encrypted in transit (HTTPS/TLS) between your browser, our servers, and your screens
• Every workspace's data is isolated from every other workspace at the database level
• Device pairing uses a long-lived, high-entropy secret token, not a static shared password
• Administrative actions inside a workspace are recorded in an audit log visible to workspace owners

No system is completely immune to compromise, and we won't claim otherwise — but if something goes wrong, we will notify affected customers without undue delay and consistent with our legal obligations.

8. Your privacy rights

If you're in the EEA, UK, or Switzerland (GDPR)

We process your personal data on these legal bases: performing our contract with you (running your account), our legitimate interests (keeping the service secure and improving it), your consent (where we ask for it), and legal obligations we're subject to. You have the right to:

• Access the personal data we hold about you, and get a copy of it
• Correct inaccurate data
• Request deletion (“the right to be forgotten”)
• Restrict or object to certain processing, including profiling
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

If you're a California resident (CCPA/CPRA)

We do not sell or share personal information for cross-context behavioral advertising, and we have not done so in the past 12 months — so there's no “opt out of sale” toggle to look for, because there's nothing to opt out of. You still have the right to know what personal information we collect, request its deletion, correct inaccuracies, and not be discriminated against for exercising these rights. You may also designate an authorized agent to make a request on your behalf.

For everyone

Regardless of where you live, you can exercise any of the above by emailing privacy@screenvana.app. We'll verify your identity before acting on the request and respond within the timeframe your local law requires (30 days, absent an applicable law specifying otherwise). Most account-level requests — updating your name, downloading your content, deleting your account — can also be done directly from workspace settings without waiting on us.

9. Children's privacy

Screenvana is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us at privacy@screenvana.app and we'll delete it.

10. Sensitive content on screens

Because workspaces can upload their own content, please don't upload content revealing racial or ethnic origin, health conditions, religious beliefs, sexual orientation, biometric data used for identification, or similarly sensitive categories, unless you have an independent legal basis and appropriate safeguards for doing so under applicable law. Screenvana is built for menus, wayfinding, announcements, and dashboards — not for handling special-category personal data.

11. Changes to this policy

If we make material changes, we'll update the effective date at the top of this page and, for significant changes, notify workspace owners by email before the change takes effect. We encourage you to review this page periodically.

12. Contact us

Questions, requests, or concerns about this policy or your data:

See also our Pricing page for plan details, or contact support with any other questions.