Who is responsible for your information?
Play Digital Signage, Inc., 620 S 7th St, Las Vegas, Nevada 89101, United States, is responsible for the personal information described in this policy. You can reach us at hello@playsignage.com.
What information is being collected
The information collected from our web system and our app is the following:
- Name
- Country
- IP address
- Browser brand, version, and operating system name
- Billing details (Country, city, address, zip, company, VAT nr.)
- The content you create and upload (slides, playlists, schedules, screen names and notes, text, images, videos and other files)
On our website and web portal, third-party systems also collect the following information (Google Analytics, Crisp.chat, Stripe):
- Time zone
- Credit card nr. (Stripe only, see below)
- Approximate location (derived from your IP address)
- Browser version
- Operating system
Our player software collects information needed for diagnostic purposes, such as:
- Player IP address (personally identifying)
- Player operating system
- Player make and model
- Resolution
- Which slide is currently being played (proof of play)
Our mobile app
This policy also covers the Play Digital Signage app for Android phones and tablets and for iPhone and iPad (“the app”). The app is a way to manage your Play account. It uses the same account and the same servers as our web portal, so everything in this policy applies to it.
- Signing in. You sign in with your Play e-mail and password, or with Sign in with Apple, Google, Microsoft or Facebook. With those services we receive your name, e-mail address and an account ID from them, and use them only to create your account and sign you in. If you use Sign in with Apple and choose “Hide My Email”, we only see Apple’s relay address. We never receive your password for those services.
- Face ID and Biometric unlock. You can choose to unlock your saved sign-in with Face ID or your passcode on iPhone and iPad, or with Biometric unlock (your fingerprint, face or screen lock) on Android. This is handled entirely by your phone’s operating system. We never receive or store your face, fingerprint or any other biometric information. Your sign-in is stored in your phone’s secure storage (the Keychain on iPhone and iPad, the Android Keystore on Android) and is removed when you log out or delete your account.
- Camera. The app uses your camera only to scan the QR code a screen shows when you add it to your account. The camera picture stays on your phone; only the code it reads is used.
- Photos and videos. The app only reads the photos, videos and files you pick in your phone’s own photo or file picker; it has no access to the rest of your photo library. Files you choose to upload go to your team’s Play Library. A profile photo you pick in the app stays on your phone and isn’t uploaded.
- What you create. Slides, playlists, schedules, screen names and notes, text and the files you upload are stored on our servers so they can play on your screens.
- Billing and team details you enter in the app (company, VAT number, address, invoice recipients, team members’ names and e-mails) are handled the same way as in the web portal.
- Location. The app doesn’t use your phone’s location. When you type a city for the Weather or Clock apps, the text you type is sent through our servers to Google to find it.
- Security audit log. Like the web portal, actions on your account made from the app (for example sign-ins and changes to playlists) are recorded in your team’s security audit log, so you can see who did what and when.
- No tracking or ads. The app contains no advertising, analytics or tracking tools. We don’t track you across other companies’ apps or websites, and we don’t sell your data.
- Third-party content. When you add or preview content from services such as YouTube, Vimeo, Google Docs, Sheets, Slides, Maps and Calendar, Canva or Notion, that content is loaded from those services under their own privacy policies.
- Website tools. Google Analytics, Google Ads, Ahrefs and the Crisp chat widget run on our website and web portal, not inside the app.
Who is collecting it?
Your information is collected by Play Digital Signage, Inc. through the following systems:
- Our web portal
- Our apps for Android and iPhone
- Player application
- Google Analytics (website and web portal only)
- Crisp.chat
- Stripe
- Cloudflare, which runs our login service and stores your account (see Where is it stored?)
- Cloudflare Turnstile
Why is it collected?
We only collect a minimal amount of personal information to keep our systems running. Free users only need to supply their name and e-mail address to use our service; for paid users, we also require billing information. IP address, browser version, and operating system are collected for our security audit log functionality, to provide users with the history of actions taken on their account. We collect, store, and compare both user and player IP addresses to prevent account fraud in our systems. Proof-of-play data shows you what has played on your screens. We use your e-mail address to send you account e-mails (such as sign-in codes and invoices) and, if you have not turned them off, e-mails about product updates.
Who will it be shared with?
We don’t sell your personal information or share it for advertising. We share it only with service providers that help us run Play, and only what each one needs:
- DigitalOcean: hosting of our servers, databases and uploaded files (see “Where is it stored?”).
- Amazon Web Services (AWS): a backup copy of uploaded files (Amazon S3), used if our main file storage fails.
- Crisp (crisp.chat): support chat and chat history, and e-mails about product updates (your name and e-mail).
- Mailgun: sending e-mails from our web portal and app, such as sign-in codes, invoices and account e-mails.
- Google: our company e-mail (Google Workspace), so e-mails you send us are stored there; Places and Time Zone lookups for the Weather and Clock apps and YouTube lookups for the YouTube app (sent from our servers); and, on our website only, Google Analytics and Google Ads measurement.
- Stripe: card payments. Your card number goes directly to Stripe, and we never store it.
- Cloudflare: runs our login service and stores your account and login data, sits in front of our servers for network security and protection against attacks, runs parts of our service (file uploads and storage, the web portal and content previews), and provides Turnstile bot checks on sign-in.
- CloudConvert: converting some video and office files you upload. Files are deleted from their servers after conversion.
- Ahrefs: website traffic analytics (website only).
Each of these providers may only use your information to provide their service to us, and they protect it at least as well as this Privacy Policy does. We may also disclose information if the law requires it, or to a buyer if Play Digital Signage is sold or merged. In that case this policy keeps applying to your information.
How is it secured?
All connections to our servers are HTTPS, which means that the traffic is encrypted, including web-socket connections. Internet traffic is routed through the Cloudflare network, which protects our servers against Denial of Service (DoS) and brute force attacks. In the app, your sign-in is stored in your phone’s secure Keychain.
Where is it stored?
Your account and login data (name, e-mail, password hash, team memberships and the security audit log, including IP addresses and browser details) is stored and processed by Cloudflare, which runs our login service.
Your screens, playlists, files and the rest of your team’s data are on our servers, hosted by DigitalOcean in two regions, each with its own servers and a failover server:
- Europe: Amsterdam, the Netherlands. Data of our EU customers is stored here.
- United States: San Francisco, California. Data of our US customers is stored here.
Our databases are DigitalOcean managed databases and uploaded files are stored in DigitalOcean Spaces in the same region. A backup copy of uploaded files is kept in Amazon Web Services (Amazon S3) so it can be used if our main file storage fails. Traffic to our servers passes through Cloudflare’s global network, which also runs parts of our service (file uploads and storage, the web portal and content previews).
Files that require conversion (all video files except for .mp4, and OSX office formats .key, .numbers, and .pages) are processed by cloudconvert.com. CloudConvert provides a discreet service; they do not read, look into or mine any data from files or their metadata, and files are deleted from their servers once the conversion is done. See their privacy policy.
How long we keep your data
We keep your account information and content for as long as your account exists. Other data is kept as follows:
| Data | How long we keep it |
|---|---|
| Files you delete | Removed from our servers after 24 hours |
| Proof of play, each playback | 100 days |
| Proof of play, hourly summaries | 190 days |
| Web portal usage events | 90 days |
| Copies of e-mails we send you | 180 days |
| Web server access logs | About 14 days |
| Application logs | About 10 weeks |
| Backups | 30 days |
| Backups of account and login data | One year |
| Security audit log | Kept for security and account history for as long as needed; not deleted automatically |
| Invoice records | Kept permanently, as required for accounting and tax |
| Downloaded invoice PDFs | Temporary copies removed after 24 hours and generated again when you download one |
| Support chats (Crisp) | Kept in Crisp, also after your account is deleted (see below) |
Children’s privacy
Play Digital Signage is a business service and isn’t directed at children. We do not knowingly collect information from children under the age of 15, and children under 15 are prohibited from using our Services. If you learn that a child has provided us with personal information in violation of this Privacy Policy, you can alert us at hello@playsignage.com.
Changes to this privacy policy
This Privacy Policy may be modified from time to time, so please review it frequently. Changes to this Privacy Policy will be posted on our websites, and the “Last updated” date above will change. If we materially change the ways in which we use or share personal information previously collected from you through our Services, we will notify you through our Services, by e-mail, or other communication.
International data transfers
Data of our EU customers is hosted in the Netherlands and data of our US customers in the United States. Some of our service providers (for example Cloudflare, Google, Stripe, Crisp, Mailgun, CloudConvert and the AWS backup copy of uploaded files) may process information in other countries, so we may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.
Cookies
Our Cookie Policy can be found on its own page. The app itself doesn’t use cookies for tracking.
How to request your data
If you wish to request the data we have on you, please write to us at hello@playsignage.com from the same e-mail address you wish the report for.
How to delete your data
You can delete your account at any time:
- In the app: Account → Delete Account.
- On the web: your profile page in our web portal.
- By e-mail: write to hello@playsignage.com from your account’s e-mail address.
To confirm, we e-mail you a 6-digit code. If you belong to more than one team, you first leave the other teams. If you own your team, you can either transfer ownership to another member and delete only your account, or delete the team together with your account. A team can’t be deleted while it has unpaid invoices or outstanding charges. Once deleted, your account can’t be restored.
When your account is deleted:
- Your profile, sign-in methods (including the link to your Apple, Google, Microsoft or Facebook account) and team memberships are deleted.
- If you delete your team too, its screens, slides, playlists, schedules and saved cards are deleted, and its uploaded files are removed from our servers after 24 hours.
- Invoice records are kept, as accounting and tax rules require. They are detached from the deleted team, together with a note of who deleted the team and when.
- Your support-chat contact and chat history stay in Crisp. We mark you as deleted there and unsubscribe you from product e-mails.
- Security audit log entries are kept for security and account history.
- Logs and backups that contain your data expire on their own within the periods listed in “How long we keep your data” (backups within 30 days).
How to withdraw your consent
- Product-update e-mails: turn off “Receive product update e-mails” under Account in the app, or on your profile page in our web portal.
- Sign in with Apple, Google, Microsoft or Facebook: you can disconnect Play at any time in that account’s settings. On iPhone: Settings → [your name] → Sign-In & Security → Sign in with Apple → Play → Stop Using. You’ll then sign in with your e-mail instead.
- Photos: on iPhone and iPad, change or remove the app’s access in Settings → Privacy & Security → Photos. On Android the app has no access to your photos beyond the ones you pick.
- Camera: on iPhone and iPad in Settings → Privacy & Security → Camera; on Android in Settings → Apps → Play → Permissions.
- Face ID and Biometric unlock: turn it off in the app under Account → Face ID (iPhone and iPad) or Account → Biometric unlock (Android), or in your phone’s settings.
- Website cookies: see our Cookie Policy.
Contact us
Play Digital Signage, Inc.
620 S 7th St, Las Vegas, Nevada 89101, United States
hello@playsignage.com
Feel free to contact us with any questions!