What Better Signage collects and why.

Information we handle

Account and authentication information

When you create or use an account, we handle your name, email address, and authentication information. Passwords are processed for authentication and stored as one-way password hashes, not as readable plaintext passwords. Signup and login records can include your IP address, browser user-agent, and access time. At signup, we can retain the first-touch URL and referrer and, when present, UTM source, medium, and campaign values. We also record the terms and privacy-policy version you accept and the acceptance time.

Support and account requests

When you contact us, we handle your contact details, ticket topic, messages, ticket status, and service information you provide to resolve the request. Support replies in the ticket are visible to the customer. Staff may separately keep account-level notes to operate and support the service. Ticket messages and account information are stored by the service; transactional emails notify you about the conversation. Do not submit passwords, authentication links, payment card numbers, or unrelated sensitive information. Abuse controls use hashed keys derived from request IP addresses or email addresses with an action label; these temporary records are pruned by the service’s maintenance process.

Screens and devices

We handle screen and device identifiers, pairing state, and device credentials needed to connect an Apple TV to your account. Persisted device credentials are stored as hashes on the service. The Apple TV stores its local device credential in the tvOS Keychain. During pairing, the service temporarily retains the request's public source IP address in memory for a five-minute abuse-rate-limit window. When local peer delivery is available, the app sends its local-network seed address and persistent public-key fingerprint to the service; the service retains and redistributes them only to authorized Apple TVs in the same Better Signage library.

Operations and diagnostics

Apple TVs send heartbeats and operational data used to run and troubleshoot the service. This can include app and tvOS versions, playback or service errors, timing information, current state, media hashes, cache usage, and playlist required or cached byte counts. Available device-storage capacity is used and displayed only on Apple TV and is not sent to the service.

Media and deployments

We handle the media you upload and the information needed to organize and deliver it, including media metadata, playlists, screen assignments, deployment versions, readiness state, and activation state.

How we use information

• Provide account access and protect accounts and paired devices.
• Store, prepare, and deliver the media and playlists you choose.
• Pair Apple TVs, monitor device readiness, and coordinate deployments.
• Maintain, secure, diagnose, and improve service reliability.
• Send service messages such as signup verification, password resets, ticket acknowledgements, and support replies.

Browser and Apple TV storage

The dashboard uses an authentication cookie and local upload-recovery records. Opening a private guest ticket link sets an essential support-access cookie for up to seven days. The public website uses a session flag to remember whether its introduction has played and stores your analytics choice and optional browser-exclusion setting. Only after you allow analytics, it loads Google Analytics and stores bounded campaign labels for the current tab. See the cookie and local-storage policy for names, purposes, durations, and your controls.

The Better Signage app downloads assigned media to a local cache on each Apple TV so that the device can play prepared content locally. The app also keeps its device credential in the tvOS Keychain. Clearing app data, removing the app, or device storage management can remove locally held data.

Service providers

We use service providers to operate Better Signage. These providers process information relevant to the services they supply:

• Resend processes transactional email, including signup, verification, password-reset, and support-ticket notifications. Customer support notifications contain the recipient address, a ticket reference, a heading, and a private ticket link, rather than the customer’s message body. Operator notifications include contact details and the ticket category.
• Google Analytics loads only after you allow analytics on the public website. It measures public pages, referring-site origin, accepted campaign labels, approximate location, browser and device type, and clicks toward signup, a storage plan, or the App Store. Clicks show interest; they do not prove an account was created, a payment succeeded, or an app was installed. Our events omit full query strings and URL fragments, and use known public page paths. Google Analytics does not run in the dashboard or Apple TV app. Advertising storage, Google signals, and advertising personalization are disabled by our tag configuration. See how Google uses information from sites that use its services.
• Cloudflare R2 stores uploaded media used by the service.
• Stripe processes subscription and payment information for paid web-dashboard plans and receives the customer email, venue name, and venue ID needed to manage the subscription.

Advertising, tracking, and sale

Better Signage does not use third-party advertising, does not use your information for cross-app or cross-website tracking, and does not sell personal information. Website analytics are used only to understand how the public site is used.

Your analytics choice

You can allow or decline optional analytics, change your choice using Analytics settings in the website footer, or exclude this browser from measurement. We do not load the Google tag before permission. A Do Not Track or Global Privacy Control signal also keeps analytics off. Declining or excluding this browser stops collection, removes this site’s accessible Google Analytics cookies, and clears campaign storage in the current tab. Your choice applies to this browser; clearing site storage removes the saved preference. It does not delete data already received by Google.

With analytics allowed, short source, medium, and campaign labels can be kept across public pages in the current tab and passed to the signup page. We reject values containing email-address or URL punctuation and long numeric identifiers. Campaign links should use campaign labels, never customer names or other personal information.

Retention and deletion

We retain information as needed to operate the service, protect accounts, troubleshoot problems, meet legal obligations, and maintain appropriate business records. Retention depends on the type of information and why it is held. Better Signage does not currently publish a fixed deletion schedule or promise automatic deletion after a specific period.

Where processing relies on your consent, you can ask to withdraw it. This does not automatically remove information we need for another applicable purpose, such as account security, a service you still use, or legally required records. Removing a screen stops it receiving new playlists; removing the app or resetting a device is separate from deleting server-side account data or canceling a paid subscription.

Account settings lets you update your name and download a JSON export of account and library metadata; the export does not include original media files. To request access to other personal information, correction, an email change, or deletion, open a privacy ticket or email us if you cannot sign in.

Deletion is handled by support after identity verification, with progress and confirmation in the ticket. We may retain information reasonably needed for security, legal, or required recordkeeping purposes. We do not promise immediate automated deletion, a fixed completion period, or that clearing a device deletes your server account. Your applicable privacy rights may also include objection, restriction, or a complaint to your local data-protection authority.

Contact