Privacy policy

Who the controller is

SignageStack operates the dashboard, the player and this website, and is the controller for the data described in this policy. For anything in it, write to office@signagestack.com — the address reaches the people who run the service.

When you use SignageStack to show content on your own screens, you are the controller of whatever you put on them and we are your processor. The data processing addendum covers that relationship.

What we collect about you

Account and organisation data you give us directly:

• Your name and email address, and a hash of your password — never the password itself
• The organisation you belong to and your role in it
• Your interface language and notification preferences
• Billing details needed to issue an invoice

What the screens report

Each paired player reports a device profile so you can tell your screens apart and see which ones are healthy:

• Platform and browser user agent, and the player version it is running
• A heartbeat timestamp, which is what “last seen” means in the dashboard
• A playback log: which item played, when, and for how long

Content you upload

Images, video and documents you upload are stored in object storage and served to your players. We do not inspect, index or use them for anything except delivering them to the screens you assigned them to.

Connected accounts

If you connect Google, Microsoft or Canva, we store the access and refresh tokens that provider issues, encrypted at rest with AES-256-GCM. Tokens are decrypted only in server memory when an app needs to fetch your data, and are never sent to a player or included in a snapshot. Disconnecting or uninstalling an app, or deleting your account, deletes its tokens and the content fetched through them — and for Canva we also revoke them with Canva, which withdraws the access you granted.

Google user data

This section describes the data SignageStack receives from Google APIs. It applies whenever you sign in with Google, connect a Google account to an app, or import files from Google Drive. We access only the following:

• Sign in with Google: your name, email address and Google account ID, to create your SignageStack account and sign you in.
• Google Calendar app: the list of calendars your Google account subscribes to, so you can pick one, and the events of the calendar you pick — title, start and end time, and location.
• Google Sheets app: the cell values of the one spreadsheet you select in Google’s file picker.
• Google Slides app: the slides of the one presentation you select in Google’s file picker, as images.
• Google Drive import: the files you select in Google’s file picker, which are copied into your media library.

How we use Google user data

We use Google user data only to provide the features you ask for: to sign you in, to show the chosen calendar, spreadsheet or presentation on the screens you assign it to and in the dashboard preview, to keep it up to date when it changes in Google, and to add the files you import to your library. We cannot see anything else in your Google account, and we never create, change or delete anything in it.

We never sell Google user data, never use it for advertising, and never use it to develop, improve or train artificial intelligence or machine-learning models. Nobody at SignageStack reads it unless you ask us to for support, it is needed for security (for example, to investigate abuse), or the law requires it.

SignageStack's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

Who we share Google user data with

We do not sell, rent or trade Google user data. We share, transfer or disclose it only in these cases:

• Within your organisation: members of your SignageStack organisation can see it in the dashboard, and the screens you assign it to display it to anyone in front of them.
• With the providers that host SignageStack, only to run the service, on our instructions and under data processing agreements: MongoDB Atlas (our database, which holds the fetched content and the encrypted tokens), Railway (the servers that fetch and process it) and Cloudflare R2 (storage for slide images, imported files and database backups). None of them may use it for their own purposes.
• When the law requires it: to comply with a legal obligation or a valid request from a public authority, or to protect the security of our users and the service.
• In a merger, acquisition or sale of assets, only after asking for your explicit consent.

Keeping and deleting Google user data

Google tokens are stored encrypted with AES-256-GCM, content travels only over TLS, and only your organisation can access it.

When you disconnect a Google account, delete the app that uses it, or your account or organisation is erased, we delete the tokens and everything fetched through them — calendar events, cell values and slide images — at once. Files you imported from Google Drive are ordinary files in your library and stay until you delete them. Deleted data leaves our database backups within 30 days.

You can also remove SignageStack’s access at any time at https://myaccount.google.com/permissions. Disconnecting inside SignageStack does not remove that permission, because other SignageStack apps connected to the same Google account may still use it.

Sub-processors

We use a small number of providers to run the service:

• MongoDB Atlas — the primary database
• Cloudflare R2 — media storage and delivery, and nightly database backups
• Resend — transactional email (invitations, password resets, scheduled reports)
• Railway — hosting for the API, background jobs and cache
• Vercel — hosting for this website, the dashboard and the player
• Sentry — error monitoring for the dashboard and the player
• Google, Microsoft and Canva — only for the apps you explicitly connect
• Google Analytics — website audience measurement, only if you accept analytics cookies

How long we keep it

Closing an account or an organisation starts a 30-day grace period. During it the account is disabled but recoverable by signing back in; after it, personal data is anonymised — your name and email are replaced with a non-identifying placeholder — consent records are deleted, and an organisation's screens, playlists, app instances and uploaded media are erased for good.

A free trial that ends without a paid plan or an upgrade request is erased when it ends — the account and its organisation's screens, playlists, app instances, connected accounts and media — after an email the day before. An expired trial has no grace period.

Detailed playback records are deleted automatically 90 days after they are written. Monthly totals — screen, item, month, seconds — survive that deletion and are kept for the life of the organisation, because the questions that outlive ninety days are real ones: an annual report, a contract that ran last autumn, a dispute about what a screen showed in March. They carry no hour-by-hour detail.

A device that shows a pairing code and is never paired is removed after 14 days. Invoices and the records behind them are kept for as long as tax law requires, which is longer than any of the above.

Nightly database backups are kept for 30 days and then deleted, so anything erased leaves the backups within 30 days.

Your rights

You can ask for a copy of your data, correction of anything wrong, deletion of your account, or a machine-readable export. Write to office@signagestack.com and we will respond within 30 days. If you are in the EU or the UK you can also complain to your national data protection authority.

The legal grounds we rely on

Where the GDPR or the Serbian Law on Personal Data Protection applies, the grounds are: performance of the contract, for everything needed to run your account and deliver content to your screens; our legitimate interest, for keeping the service secure, preventing abuse and understanding which parts of it are used; your consent, where we ask for it; and legal obligation, for invoicing and tax records.

Where we rely on legitimate interest you can object, and we will stop unless there is a reason that overrides it.

Where the data is processed

The providers listed above process data in the European Union and in the United States. Where a provider processes personal data outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision, and the provider is bound by a data processing agreement with us.

How it is protected

All traffic between browsers, players and the API runs over TLS. Passwords are stored only as hashes and never in a form anyone here can read. Third-party access tokens are encrypted at rest with AES-256-GCM and decrypted only in server memory. Access is scoped to an organisation, so one customer cannot reach another customer's data, and production access is limited to named administrators.

No system is completely secure. Use a password you have not used elsewhere, and tell us at office@signagestack.com if you think an account has been reached by someone who should not have it.

Children

The service is sold to businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.

Cookies

This site and the dashboard use strictly necessary cookies and local storage only — to keep you signed in and to remember your language. There is no advertising and no cross-site tracking. The cookie page lists every one of them.

Changes to this policy

When something material changes we update the date at the top of this page and, where the change affects how we process your personal data, tell account holders by email before it takes effect.