Privacy Policy

1. Information we collect

We only collect what we need to run the service:

• Account details: your email address and password. Passwords are stored by our sign-in provider in scrambled (hashed) form; we never see them.
• Business details: your business name, the people you add to your team and their roles, your store names, time zones, opening hours and settings such as offline alerts.
• Your content: the pictures and videos you upload and your playlists. When you upload a picture we save a fresh copy of it, which leaves out hidden details such as camera information and GPS location.
• TV information: the names you give your TVs, which store and playlist each one uses, and when each TV last checked in. Each TV proves who it is with its own random code, which we only keep in scrambled form. While a TV is waiting to be paired, we keep a scrambled form of its network address for up to one day to stop people guessing codes.
• Emails we send you, such as sign-in links, offline alerts and account notices.
• Technical records: our hosting providers automatically record basic details of visits, such as IP address, browser or device type and time, to keep the service secure and to fix problems.
• Records of actions taken by our own staff on accounts (for example, a suspension), for security.

2. How we use it

• To provide the service: show your content on your TVs, keep your stores and screens organized, and let you sign in.
• To send emails you need, such as sign-in links, offline alerts and important account or service notices.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal obligations.

We do not sell your information, we do not share it for advertising, and we do not use advertising or tracking tools on our website or TV player. We do not look at your pictures and videos except when needed to run the service, to fix a problem you ask us about, or to deal with a report of illegal or harmful content.

3. Cookies

We use only the cookies needed to keep you signed in. The TV player stores its own code and copies of your playlist's pictures and videos on the TV, so it can keep playing if the internet drops. We do not use cookies for advertising or analytics.

4. Who helps us run the service

We use a small number of trusted companies, who handle information only to provide their service to us:

• Supabase: database, sign-in and file storage (servers in the United States, Oregon).
• Vercel: website hosting (United States).
• Hostinger: sending our emails.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of our business (in which case this policy will continue to protect it).

5. Where your information is stored

Your information is stored in the United States. If you are in Canada, your information is processed in the United States and may be accessible to authorities there under U.S. law.

6. How long we keep it

We keep your information while your account is open. When an account is deleted, we delete its business, stores, screens, playlists, pictures and videos, and the sign-ins of its team. Copies may remain in our providers' backups for up to 30 days before they are overwritten. Technical records are kept by our hosting providers for a limited time. We may keep a small record of account actions where needed for security or legal reasons.

7. Your choices and rights

Depending on where you live (including under Canada's PIPEDA and U.S. state privacy laws), you may have the right to:

• see the information we hold about you and get a copy of it;
• correct it;
• have it deleted;
• withdraw your consent, for example by turning off offline alerts on the Account page or closing your account.

To make a request, email support@thekclegacy.com from the email address on your account. We will reply within 30 days. If you are in Canada and not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

8. Security

We protect your information with measures such as encrypted connections, keeping each business's data separate at the database level, private storage for your files, scrambled codes for TVs, and two-step sign-in for our staff. No system is perfectly secure; if a breach affects your information, we will tell you and the relevant authorities as the law requires.

9. Children

KCSignPlay is a business service for people aged 18 or over. We do not knowingly collect information from children.

10. Changes to this policy

If we make important changes, we will tell you by email or in the app before they take effect. The date at the top shows when this policy was last updated.

11. Contact us

KC Legacy Group LLC, 30 N Gould St, Sheridan, WY 82801, United States. Email: support@thekclegacy.com.