Privacy Policy - Smart Ad Box

Our Commitment to Privacy

At Smart Ad Box, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.

✅ Privacy-First Design: Smart Ad Box is a digital signage management platform. We do NOT display ads to end viewers, track viewer behavior, collect personal data from your TV audiences, or sell any data to third parties.

This policy applies to all users of the Smart Ad Box platform, including account holders and device users.

1. Information We Collect

1.1 Account Information (You Provide)

Data Type	Examples	Purpose	Required?
Identity	Name, company name	Account identification	Required
Contact	Email address, phone number	Communication, support, alerts	Required
Location	Country, country code	Localized pricing, tax compliance	Required
Payment	Billing address (if provided)	Invoice generation	Optional

💳 Payment Processing: We do NOT store credit card numbers, CVV codes, or banking passwords. All payments are processed through secure third-party gateways (Stripe, PayPal, etc.) that comply with PCI-DSS standards.

1.2 Device Technical Data (Automatically Collected)

When you pair a TV/screen with our platform, the device automatically sends technical information necessary for the service to function:

Data Point	Description	Example Value	Purpose
Device ID	Unique pairing identifier	`598966`	Device identification & pairing
Device Type	Platform/category	`google` (Android TV)	Compatibility management
Screen Resolution	Display dimensions	`1920x1080`	Content optimization
Storage Space	Total available space	`5939 MB`	Storage management
App Version	Installed app version	`1.0`	Update management
Orientation	Screen orientation setting	`0°, 90°, 180°, 270°`	Display configuration
Device Name	User-assigned name	`STORE-1-TV-1`	Device identification
Pairing Date	Date device was connected	`Jun 18, 2026`	Account history
Online Status	Connection state	`Online / Offline`	Monitoring dashboard
Last Sync	Last communication timestamp	`Jun 18, 08:04 AM`	Activity tracking
Memory Usage	RAM consumption	`1053 MB`	Performance monitoring
Timezone	Device timezone setting	`Asia/Dhaka`	Scheduling accuracy

2. What We DO NOT Collect

To be absolutely clear, Smart Ad Box DOES NOT collect, access, or store:

❌ Personal files from your device storage (photos, documents, videos outside our app)
❌ Browsing history or internet usage data
❌ Installed applications list from your TV/device
❌ Location/GPS data — We only know timezone from device settings
❌ Microphone or camera input — We never access audio/video feeds
❌ Viewer analytics — We don't track who watches your screens
❌ Facial recognition or biometric data
❌ WiFi passwords or network credentials
❌ Google/device account information
❌ CPU/GPU temperature — We display it but don't store historical data

🔒 Privacy by Design: Our app only requests the minimum permissions needed for digital signage functionality. We don't track, profile, or monetize your device usage or viewer behavior.

3. How We Use Your Information

All collected data is used exclusively for providing and improving the digital signage service:

Purpose	Data Used	Legal Basis
Account creation & management	Name, email, phone, country	Contractual necessity
Device pairing & identification	Device ID, type, name	Contractual necessity
Content delivery & display	Resolution, orientation, storage	Contractual necessity
Service monitoring	Online status, last sync, memory	Legitimate interest
Scheduling & timezone	Timezone setting	Contractual necessity
App updates	App version	Legitimate interest
Invoice & billing	Name, email, country, plan	Legal obligation
Support communications	Email, device info	Consent / Legitimate interest

4. Data Sharing & Third Parties

4.1 We Do NOT Sell Data

We do not sell, rent, trade, or otherwise monetize your personal information or device data to third parties for marketing, advertising, or any other purpose.

4.2 Service Providers

We may share data with trusted third-party service providers who help us operate the platform:

Service	Provider Examples	Data Shared	Purpose
Cloud Hosting	AWS, Cloudflare	All platform data	Infrastructure
Payment Processing	Stripe, PayPal	Payment details (not stored by us)	Transaction processing
Email Services	SendGrid, AWS SES	Email address	Notifications
Analytics	Internal only	Aggregated usage stats	Service improvement

🔐 All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

4.3 Legal Disclosures

We may disclose information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

5. Data Security Measures

We implement industry-standard security measures to protect your data:

Encryption: All data transmitted between devices and our servers is encrypted using TLS 1.3
Password Hashing: Passwords are hashed using bcrypt (never stored in plain text)
Access Controls: Role-based access control (RBAC) for admin accounts
Secure Storage: Data stored in ISO 27001 certified data centers
Regular Audits: Security assessments and vulnerability scanning
Session Management: Automatic session expiration and secure cookie handling
CAPTCHA Protection: Brute-force prevention on login pages

⚠️ No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Please use strong passwords and enable two-factor authentication when available.

6. Data Retention Policy

Data Type	Retention Period	After Termination
Account information	Duration of account + 30 days	Permanently deleted
Uploaded content/media	Until deleted by user or account termination + 30 days	Permanently deleted
Device data & logs	Rolling 90 days	Permanently deleted
Invoices & billing	7 years (legal requirement)	Retained for compliance
Support tickets	2 years after resolution	Permanently deleted

7. Your Data Rights

Depending on your jurisdiction, you may have the following rights:

Right	Description	How to Exercise
Access	Request a copy of your personal data	Contact support or use dashboard export
Rectification	Correct inaccurate data	Update via account settings
Erasure	Delete your account and data	Account deletion request
Portability	Receive data in machine-readable format	Data export request
Restriction	Limit processing of your data	Contact support
Objection	Object to data processing	Contact support

📧 To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. Identity verification may be required.

8. Children's Privacy

Smart Ad Box is a business-to-business (B2B) platform intended for commercial use. We do not knowingly collect data from children under 13 years of age. If you believe a child has provided us with personal information, please contact us immediately for removal.

9. International Data Transfers

Your data may be stored and processed in Bangladesh, United States, Europe, or other locations where our servers are located. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for cross-border data transfers.

10. Cookies & Tracking

We use essential cookies only:

Session Cookies: Necessary for login and authentication (deleted when browser closes)
Preference Cookies: Remember language and display preferences (optional)

We do NOT use:

❌ Third-party advertising cookies
❌ Tracking pixels or beacons
❌ Social media tracking
❌ Fingerprinting or device identification

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

Email notification to account holders
Dashboard notification banner
Updated "Last Updated" date

Continued use after changes constitutes acceptance. We recommend reviewing this policy regularly.

12. Contact Us

For privacy-related inquiries or to exercise your data rights:

Privacy Officer: [email protected]
Data Protection: [email protected]
General Support: [email protected]
Response Time: Within 48 hours for privacy requests