← Back to home

Privacy Policy

Last updated: 1 August 2026

1. Who We Are

ContentSignage ("we," "us," "our") operates a cloud digital-signage platform. This policy explains what personal data we collect, why we collect it, and your rights. Contact us at jayprajapati857@gmail.com.

2. Data We Collect

Category Examples Purpose
Account data Name, email (via Auth0 sign-in) Authentication and account management
Organization data Organization name, membership, roles Multi-tenant account structure
Media data Uploaded images, videos, and playlists Core service features: the content you assign to your screens
Screen/device data Device name, pairing state, last-seen time, device token Registering and managing your paired screens
Usage data Pages visited, features used, IP address Security monitoring and product improvement

We do not collect payment card details directly. Any future payments will be processed by a certified payment provider.

3. How We Use Your Data

  • To create and manage your account and organization
  • To provide core features: media library, playlists, screens, and pairing
  • To send transactional communications (account creation, pairing confirmations)
  • To detect and prevent fraud and security threats
  • To improve the Service through aggregated, anonymised analytics

4. Legal Basis for Processing

United Kingdom and European Union (GDPR)

We process your personal data on the following lawful bases:

  • Contract: processing necessary to provide the Service you requested
  • Legitimate interests: security monitoring, fraud prevention, product analytics
  • Consent: optional marketing emails (you may withdraw consent at any time)

India (DPDP Act 2023)

We process personal data as a Data Fiduciary based on your consent as a Data Principal. You may withdraw consent at any time; withdrawal will not affect the lawfulness of processing carried out before withdrawal. We appoint a Grievance Officer to handle requests. Contact details are in Section 8.

United States

There is no single federal privacy law in the US. We comply with applicable state laws including the California Consumer Privacy Act (CCPA). See Section 8 for CCPA-specific rights.

5. Sharing Your Data

We do not sell, rent, or trade your personal data, and we do not use it for ad tracking. We may share it only with:

  • Service providers: Auth0 for authentication, our hosting infrastructure, and email delivery, under agreements that restrict their use of your data
  • Legal authorities: when required by law, court order, or to protect our rights and those of our users
  • Business transfers: in the event of a merger, acquisition, or asset sale, your data may transfer to the acquiring entity under equivalent privacy protections

6. International Transfers

The Service, including uploaded media and screen data, is hosted on our own servers. If you are in the UK or EU, any transfers of personal data outside the EEA are protected by Standard Contractual Clauses (SCCs) approved by the European Commission. If you are in India, we store and process data in compliance with the requirements of the DPDP Act 2023.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

  • Account, organization, media, and screen data are deleted within 30 days
  • Encrypted backups are purged within 90 days
  • We may retain anonymised, aggregated analytics data indefinitely

8. Your Rights

UK and European Union (GDPR)

You have the right to:

  • Access: request a copy of the personal data we hold about you
  • Rectification: have inaccurate or incomplete data corrected
  • Erasure: request deletion of your personal data ("right to be forgotten")
  • Portability: receive your data in a structured, machine-readable format
  • Object: object to processing based on legitimate interests
  • Restriction: limit how we process your data in certain circumstances
  • Lodge a complaint: with the Information Commissioner's Office (UK) or your national supervisory authority (EU)

United States: California (CCPA)

California residents have the right to:

  • Know what personal information we collect, use, disclose, and sell (we do not sell personal information)
  • Delete personal information we have collected, subject to certain exceptions
  • Opt-out of sale: we do not sell personal information
  • Non-discrimination: we will not discriminate against you for exercising any of your rights

To exercise CCPA rights, contact us at jayprajapati857@gmail.com. We will respond within 45 days.

India (DPDP Act 2023)

As a Data Principal you have the right to:

  • Access: obtain a summary of personal data processed and the processing activities
  • Correction and erasure: correct inaccurate or incomplete data, or request erasure
  • Grievance redressal: raise a grievance with our Grievance Officer (response within 48 hours)
  • Nomination: nominate an individual to exercise rights on your behalf in the event of death or incapacity

Grievance Officer (India):
Email: jayprajapati857@gmail.com
Response time: within 48 hours

9. Cookies

We do not use advertising or tracking cookies. The dashboard sets a strictly necessary session cookie from Auth0 to keep you signed in. The Service cannot function without it. We do not use any cookies beyond this Auth0 session cookie.

You can control or delete cookies through your browser settings. Blocking the Auth0 session cookie will prevent you from logging in.

10. Security

We protect your data with TLS encryption in transit, tenant-scoped access controls, and regular security reviews. No transmission method over the internet is 100% secure. We will notify you of any breach affecting your personal data as required by applicable law (within 72 hours under GDPR; promptly under DPDP; as required under applicable US state law).

11. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or in-app notice before they take effect. The date at the top of this page indicates when the policy was last updated.

13. Contact

For privacy questions or to exercise your rights:
Email: jayprajapati857@gmail.com