Privacy Policy

We collect the following categories of information:

• Account & business information. Your name, email address, password, business name, city and state, and the number of screens you operate, provided when you sign up or manage your account.
• Payment information. When you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not store your full card number; we retain limited billing metadata such as subscription status and a customer identifier.
• Menu & content data. Product catalog and inventory data synced from your point-of-sale system, along with images, videos, playlists, and slides you upload or create to display on your screens.
• Integration credentials. API keys or similar credentials you provide to connect a point-of-sale system, stored to operate the integration on your behalf.
• Device & player data. Identifiers and status information from the TV player devices you pair, used to deliver content and show whether a screen is online.
• Usage & technical data. Log data such as IP address, browser type, pages viewed, and timestamps, collected automatically when you use the Service.

We use the information we collect to:

• provide, operate, and maintain the Service, including syncing and displaying your menus;
• process subscriptions, billing, and payments;
• authenticate users and secure accounts;
• communicate with you about your account, support requests, and Service updates;
• monitor, troubleshoot, and improve the Service;
• detect, prevent, and address fraud, abuse, or security issues;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We share information only as described below:

• Service providers. With vendors who help us run the Service — for example, cloud hosting and database providers, our payment processor (Stripe), and storage providers — who may process information on our behalf under confidentiality obligations.
• Point-of-sale integrations. With the third-party POS systems you choose to connect, to the extent needed to retrieve your menu and inventory data using the credentials you provide.
• Legal & safety. When we believe disclosure is required by law, regulation, legal process, or to protect the rights, property, or safety of CanopyOS, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. We may use analytics tools to collect aggregated usage information that helps us improve the Service. You can control cookies through your browser settings, though some features may not function properly without them.

The menu and inventory data displayed through the Service is your business data. Our screens are intended for in-store display of product information and generally are not designed to collect personal information from the public who view them. If any content you provide includes personal information, you are responsible for having the rights and lawful basis to use it, and you act as the controller of that information while we process it on your behalf.

We retain your information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it. You may request deletion of your account as described below.

We use administrative, technical, and organizational safeguards designed to protect your information, including access controls, tenant data isolation, encryption in transit, and optional multi-factor authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. You can update much of your account information directly in the app, or contact us at support@canopydisplay.com to make a request. We will respond consistent with applicable law. We will not discriminate against you for exercising these rights.

The Service is intended for licensed businesses and users who are at least 21 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us so we can remove it.

We operate in the United States, and your information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be processed here, where data protection laws may differ from those in your jurisdiction.

The Service may link to or interoperate with third-party services, such as your point-of-sale provider and our payment processor. Those services have their own privacy practices, and we encourage you to review their policies. We are not responsible for the privacy practices of third parties.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions or requests about this Privacy Policy? Contact us at support@canopydisplay.com, or by mail to CanopyOS, State of Oregon.