Privacy Policy

Last updated: October 18, 2026.

This Privacy Policy explains how DSPLAY Digital Signage Ltda, Brazilian company registration (CNPJ) 22.388.200/0001-04 ("DSPLAY", "we") collects, uses, shares, stores and protects personal data when you visit our website (dsplay.tv), use our management dashboard and sign-in pages, or install the DSPLAY app (player) on a device. It follows Brazil's General Data Protection Law (Law No. 13,709/2018, "LGPD") and, for users in the European Economic Area, the General Data Protection Regulation ("GDPR").

For your account and browsing data, DSPLAY is the controller. For the content you or your company add to the platform (media, playlists, screens and any third-party information in them), DSPLAY acts as a processor, handling that data on the customer's instructions. If you use DSPLAY through a reseller or a partner brand (white-label), that partner may also process your data under its own policy.

What data we collect

Sign-up and account data: name, email, phone, company, project, language and time zone. Passwords are stored only in encrypted form, with a modern hashing algorithm (bcrypt), never in plain text.
Billing data: company or personal name, tax ID (CPF/CNPJ or NIF), address and payment history. Card details are entered directly with our payment processors and are not stored on our servers.
Content and integrations: files and media you upload, screen and playlist settings, and the credentials of integrations you connect (for example, Instagram, Facebook or X access tokens).
Usage and technical data: IP address, browser, pages visited, actions in the dashboard (audit log), error logs and analytics data, as described under "Cookies".
Player (DSPLAY app) data: device identifier and model, Android version, screen resolution and orientation, network and task state, error logs, device location (when the permission is granted) and the proof-of-play log (which content was shown and when). We do not store the device's Google account email.
Exit survey: if you leave the sign-up page without ever having used the dashboard, we may ask why. The answer (the reason you pick and, if you want, a free text) is anonymous: we store no account, email or IP address with it, and delete it after about 13 months. Please do not write personal data in the free text. We only keep in your browser that the question was already asked.
Communications: messages sent through contact forms, support or email.
Use of artificial intelligence features: the text and instructions you send to those features (see "Artificial intelligence").

How we use data and our legal bases

To provide the contracted service: create and authenticate your account, deliver content to screens, produce proof-of-play reports, send operational notices (for example, invalid media or offline screens) and provide support. Legal basis: performance of a contract.
To bill, issue invoices and meet legal and regulatory obligations. Legal basis: legal obligation and performance of a contract.
To keep the service secure, prevent fraud and abuse, diagnose errors and improve the product. Legal basis: legitimate interest.
To measure website and dashboard usage and ad effectiveness with analytics cookies. Legal basis: consent in the European Union and the EEA, the United Kingdom, Switzerland, Brazil and Canada, which you can withdraw at any time; in other countries, legitimate interest, with the option to opt out at any time (see "Cookies").
To measure, on our servers, the steps of using the service (sign-up, profile completion, screen pairing and media creation) from records we already keep to provide the service, without storing or reading anything on your device and without sending this data to Google. Legal basis: legitimate interest.
To send marketing communications and product news. Legal basis: consent or legitimate interest, always with an unsubscribe option in every email.

We do not sell personal data.

Artificial intelligence

Some platform features use third-party artificial intelligence models:

Image generation: the text you write is sent to the AI provider (Google Gemini) to generate the image.
Dashboard assistant: the messages you write, the files you attach (images and PDFs may be read by the model) and the account data the assistant looks up to answer (such as the names and status of screens, media and playlists) are sent to the configured AI provider (Google, Anthropic, OpenAI or Mistral). The assistant only sees data you are already allowed to see. It can propose changes, such as creating a media from an attached file, but nothing changes in your account without your explicit confirmation, and the change is made with your own permissions. Attached files are kept in temporary storage and deleted within 7 days, except those you use to create a media.

We use these providers under commercial API plans whose terms state that the data sent is not used to train their models. Providers may retain requests for a limited period to monitor abuse. We do not store the content of conversations with the assistant; we only record how many messages and how much processing each account uses, to enforce limits and track costs.

AI-generated answers can be wrong: check important information before acting on it. Avoid sending sensitive personal data to these features. We make no automated decisions with legal effects on you based on them.

Integration data (Instagram, Facebook, X and others)

When you connect a third-party account to show its content on your screens, we access only what that requires: the account's identifier and name, its profile picture and its posts or media, plus the access token you grant, which we store encrypted and never display in the dashboard. We use this data solely to fetch and display that content on the screens you set up and to warn you when the connection stops working. We do not sell this data or use it for advertising or profiling.

You can revoke access at any time in the platform's own settings (for example, Settings › Apps and websites on Facebook or Instagram); after that we can no longer access the account. To request deletion of the data obtained through these integrations, including the access token, email contact@dsplay.tv. Alternatively, when you remove the DSPLAY app in your Facebook or Instagram settings, request the deletion there: the request reaches us automatically and you get a confirmation code to follow it up. We handle the request within 30 days.

Who we share data with

We share data only with the service providers (processors) needed to run the platform, under contract and only as far as necessary:

Authentication: Clerk.
Infrastructure, hosting and storage: Amazon Web Services (AWS), Cloudflare and Vercel.
Transactional email: Resend. Operational SMS alerts (only for accounts with no email contact): Amazon SNS (AWS).
Payments and invoicing: Stripe, Asaas and Moloni.
Error monitoring: Sentry.
Analytics on the website and dashboard, as described under "Cookies": Google Analytics and Microsoft Clarity; in the player app, Google Firebase (Analytics and Crashlytics).
Maps: Google Maps.
Artificial intelligence: Google (Gemini), Anthropic, OpenAI and Mistral, depending on the feature and the configured model.
Integrations you connect: Meta (Instagram and Facebook), X and other content sources, only to fetch the content you set up.

We may also share data when required by law, court order or a competent authority, or to exercise our rights in legal, administrative or arbitration proceedings.

International transfers

Several of the providers above store or process data outside Brazil, mainly in the United States and the European Union; our main database is hosted on AWS in the United States. These transfers follow Article 33 of the LGPD, based on contractual clauses and the data protection safeguards those providers offer.

Cookies

We use two kinds of cookies:

Essential: they keep you signed in and remember your language, selected project, cookie choice, consent region and whether this browser has already signed in (so the exit survey is not shown to people who already use the service). They are needed for the service to work and do not require consent.
Optional, in three categories: usage analytics (Google Analytics, to understand how the website and dashboard are used), session recordings (Microsoft Clarity, which records clicks, scrolling and the addresses of the pages visited, which can include search filters; page text and what you type are masked and not recorded; in the dashboard, when you are signed in, it links your sessions to your internal account identifier, never to your email) and ad measurement (Google ad signals, which work together with usage analytics).

What happens before you choose depends on the country you visit from, identified from the IP address of each visit (we do not store the IP address for this, only the resulting region):

The European Union and the EEA (Iceland, Liechtenstein and Norway), the United Kingdom, Switzerland, Brazil and Canada, and whenever the country cannot be identified: no optional cookie is turned on before you choose. On the website and in the dashboard, a small bar asks once, with "Reject all" and "Accept all" equally easy; closing the bar counts as rejecting. If you reject, we only ask again after 6 months.
Other countries: usage analytics and ad measurement are on until you opt out, unless your browser sends the Global Privacy Control (GPC) signal, which we honor as an opt-out.
In every country, session recordings are only turned on with your permission, and the sign-in and sign-up pages turn on no optional cookie without a choice you already made.

Cookies we use and how long they last:

dsplay-analytics-consent (DSPLAY, essential): stores your choice. 12 months; a rejection, 6 months.
dsplay-consent-region (DSPLAY, essential): stores whether your region requires prior consent. 30 days.
_ga and _ga_* (Google Analytics, usage analytics): tell visitors and sessions apart. Up to 2 years.
_clck (Microsoft Clarity, session recordings): recognizes a visitor across sessions. 1 year.
_clsk (Microsoft Clarity, session recordings): groups the pages of one session. 1 day.

When you turn a category off, we delete its cookies. You can change your choice at any time through the "Cookie preferences" link in the footer of the website and the sign-in pages, or on the "My account" page in the dashboard, or block cookies in your browser settings. Blocking essential cookies may prevent you from signing in.

How long we keep data

We keep data for as long as needed to provide the service and meet the purposes of this policy, generally for the duration of the contractual relationship. Technical and audit logs are kept for limited periods. When that period ends, data is deleted or anonymized, except in the cases set out in Article 16 of the LGPD:

compliance with a legal or regulatory obligation (for example, tax records);
studies by a research body, with anonymization whenever possible;
transfer to a third party, provided the LGPD's requirements are met; or
exclusive use by DSPLAY, with no third-party access, provided the data is anonymized.

How we protect data

We use encryption in transit (HTTPS/TLS) across the service, encryption at rest for the database and stored files, additional application-level encryption of integration access tokens and AI service keys, role- and project-based access control, request rate limits per user and per IP address against abuse and brute-force attacks, access tokens sent between our services in protected headers (never in the request address, so they stay out of access logs), restricted staff access, an audit log of changes, and error monitoring. No system is completely secure, but we review these measures continuously.

If a security incident may create relevant risk or harm to data subjects, we will notify Brazil's National Data Protection Authority (ANPD) and the affected data subjects within the deadlines set by regulation, by email and with a notice in the dashboard.

Your rights

Under the LGPD (Article 18), you may request at any time:

confirmation that we process your data, and access to it;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
portability of your data to another provider;
deletion of data processed based on consent;
information about who we share your data with;
information about the option to withhold consent and its consequences;
withdrawal of consent;
objection to processing based on legitimate interest where the law is not being followed.

To exercise your rights, including deleting your account and all data associated with it and your devices, email contact@dsplay.tv. We handle deletion requests within 30 days. We may ask for information to confirm your identity. Users in the European Economic Area have the equivalent GDPR rights. If your data is part of a DSPLAY customer's content, we will forward the request to that customer.

You may also file a complaint with the ANPD (gov.br/anpd) or, in the European Economic Area, with your country's data protection authority.

Children and teenagers

DSPLAY is a service for businesses and professionals and is not directed at anyone under 18. We do not knowingly collect data from children or teenagers; if we find such data, we delete it.

Changes to this policy

We may update this policy to reflect changes in the service or the law. The date of the last update is at the top of this page and, for material changes, we will notify you by email or in the dashboard.

Contact and data protection officer

Questions about this policy or about how we process your data, including requests to our data protection officer, can be sent to:

DSPLAY Digital Signage Ltda CNPJ 22.388.200/0001-04 Av. Rio Branco, 139, Bairro do Recife Recife, Pernambuco, Brazil, ZIP 50030-310 contact@dsplay.tv